Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: r3KAbldk0KhLe4H4xe6Y5/+B+7W0Pf2f3rh5E7MGX3k=
Subject key identifier: 9D:A8:55:1B:F5:86:73:13:98:41:26:3C:39:AF:41:7B:FD:A8:B9:B7
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 01A0D0127EA1281EA85D516729E51D3342E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1589
Signing time: Wed 23 Sep 2026 21:01:07 +0000
Manifest this update: Wed 23 Sep 2026 21:01:07 +0000
Manifest next update: Thu 24 Sep 2026 21:01:07 +0000
Files and hashes: 1: JNmXvrsL4QUvDHkICJz6m5Up78E.roa (hash: BLhtsTAWR9XcWaxVCBS42M+LRcERJIfM10IC2M3COIA=)
2: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: X3Uabla8iIXnzDb5WIRXK94mx/N8cwO8COEF7F1fHyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:7e:a1:28:1e:a8:5d:51:67:29:e5:1d:33:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Sep 23 21:01:07 2026 GMT
Not After : Sep 24 21:01:07 2026 GMT
Subject: CN=9da8551bf58673139841263c39af417bfda8b9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:d3:f8:c6:ac:91:2f:c0:15:7f:af:67:e6:
8a:59:49:2a:73:07:fa:59:db:c5:65:08:70:84:09:
3f:29:06:e0:07:63:a7:c9:40:53:4c:e7:be:d0:44:
d0:7e:42:41:a4:7b:f9:8a:b2:c8:59:a4:b3:20:6c:
1f:52:24:59:60:93:8f:f2:3e:4f:92:23:93:76:2f:
1c:7d:1c:c0:b9:8c:f5:cc:c6:ee:c3:d4:fc:12:13:
8c:23:82:48:c3:48:d9:bb:15:a7:31:5f:48:33:ed:
cd:37:a6:7c:a1:be:54:52:6f:d0:76:c7:f2:8f:a4:
f7:bf:c5:62:45:23:31:42:05:d9:89:9d:80:f3:b0:
f3:1b:ee:39:aa:86:a2:06:c9:2f:41:6f:a0:5a:3c:
ec:57:ce:25:ae:fa:4d:b8:43:dd:90:d0:b8:0e:80:
27:bc:69:63:c9:1c:2b:ba:aa:8f:f2:1c:99:23:92:
00:8f:80:b7:43:31:88:01:47:ab:87:79:e2:61:23:
4a:05:08:2b:d7:0c:76:59:d6:7f:08:a4:99:78:bb:
0d:69:ea:cf:e6:bd:c8:ad:4b:94:1c:8a:4a:f4:13:
af:b3:d2:66:2a:bf:64:1a:fe:77:36:8b:4f:2e:17:
89:47:74:9f:55:2f:cb:a7:23:e8:82:a2:1c:21:c5:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:55:1B:F5:86:73:13:98:41:26:3C:39:AF:41:7B:FD:A8:B9:B7
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:88:ff:22:f1:76:88:c2:d4:5f:eb:50:ea:f4:c5:4d:35:
19:16:b8:fe:7b:70:e5:64:b1:5d:37:59:7f:aa:4a:af:78:41:
cd:2c:3c:ce:76:31:36:e2:ec:8f:5d:bd:ea:fb:6b:06:6b:02:
77:14:28:9c:03:db:71:dc:2c:57:7a:e4:c9:5b:08:b6:ea:41:
1a:89:9a:b7:01:9b:70:cb:c2:ff:5d:a2:46:03:2e:02:33:ca:
a9:bb:b3:20:89:32:09:e8:e7:40:fb:90:ac:28:41:a3:bd:9e:
90:7a:6b:d8:6c:7d:9b:17:99:89:5b:5d:38:46:8a:e8:07:d1:
b3:10:c2:7d:dd:60:15:40:86:af:12:d1:b2:cd:c8:c0:a2:38:
67:2f:ed:69:44:9a:ad:2c:36:a6:1a:b9:cf:51:ed:11:66:07:
43:ca:71:fb:ec:bf:9a:e2:2b:d2:10:4c:05:64:27:2f:42:14:
6e:f1:f7:d6:14:91:3a:aa:28:53:30:05:2d:8d:20:81:74:22:
8a:9f:05:1f:b8:20:99:0f:2f:91:37:32:a8:62:ee:8d:7f:af:
12:b4:3b:f0:11:28:8b:cf:c4:67:d0:37:82:3c:c2:9d:16:44:
95:78:1e:c9:6b:06:b4:39:f6:5e:3c:d2:75:d4:8d:f8:d7:bf:
43:61:7b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEn6hKB6oXVFnKeUdM0LkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1
MGJjYTMwHhcNMjYwOTIzMjEwMTA3WhcNMjYwOTI0MjEwMTA3WjAzMTEwLwYDVQQD
Eyg5ZGE4NTUxYmY1ODY3MzEzOTg0MTI2M2MzOWFmNDE3YmZkYThiOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtrT+MaskS/AFX+vZ+aKWUkqcwf6
WdvFZQhwhAk/KQbgB2OnyUBTTOe+0ETQfkJBpHv5irLIWaSzIGwfUiRZYJOP8j5P
kiOTdi8cfRzAuYz1zMbuw9T8EhOMI4JIw0jZuxWnMV9IM+3NN6Z8ob5UUm/Qdsfy
j6T3v8ViRSMxQgXZiZ2A87DzG+45qoaiBskvQW+gWjzsV84lrvpNuEPdkNC4DoAn
vGljyRwruqqP8hyZI5IAj4C3QzGIAUerh3niYSNKBQgr1wx2WdZ/CKSZeLsNaerP
5r3IrUuUHIpK9BOvs9JmKr9kGv53NotPLheJR3SfVS/LpyPogqIcIcVLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2oVRv1hnMTmEEmPDmvQXv9qLm3MB8GA1UdIwQY
MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt
OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm
LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiSI/yLx
dojC1F/rUOr0xU01GRa4/ntw5WSxXTdZf6pKr3hBzSw8znYxNuLsj1296vtrBmsC
dxQonAPbcdwsV3rkyVsItupBGomatwGbcMvC/12iRgMuAjPKqbuzIIkyCejnQPuQ
rChBo72ekHpr2Gx9mxeZiVtdOEaK6AfRsxDCfd1gFUCGrxLRss3IwKI4Zy/taUSa
rSw2phq5z1HtEWYHQ8px++y/muIr0hBMBWQnL0IUbvH31hSROqooUzAFLY0ggXQi
ip8FH7ggmQ8vkTcyqGLujX+vErQ78BEoi8/EZ9A3gjzCnRZElXgeyWsGtDn2XjzS
ddSN+Ne/Q2F7Aw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:41:48 2026 by rpki-client