Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: lxFdfoMZXwtuW5Bxsk7Btvk2X22jLTXjMtJ0CFZM3Xo=
Subject key identifier: BD:14:43:48:6F:71:E7:79:CD:5E:BC:CA:9B:34:3C:E1:9D:D1:2A:A3
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A0C6A0993159613B80EBFAF4AF5C725288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 122B
Signing time: Tue 22 Sep 2026 01:00:08 +0000
Manifest this update: Tue 22 Sep 2026 01:00:08 +0000
Manifest next update: Wed 23 Sep 2026 01:00:08 +0000
Files and hashes: 1: 51Bjfc34BpXeMkYaQNKSHvEnwDQ.roa (hash: FawcCE0rNo08r8oSxUQizRXz/FNXVyPwChX3x3n8ZGU=)
2: VOjaP0vPiACD0uS-bICx9WGuZeI.roa (hash: 9j4hZQlNE98hodvZ6eidQ8K7TvDH7tzFrNjO5UbEpFU=)
3: YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa (hash: Xyc9Bn1xcz5Vwdiy76RPK2cwcVQdXnxhuij3Z9jTrnw=)
4: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: lK2mFscWRIXg53j18LjN6JRMTqEeUZeiwO517JjKrI4=)
5: e4hMILxKJxI4HPgobdoJA7_qzew.roa (hash: hNFizLc3kMocMX6MQDv3HdR9iBYMfMByyGD/mo8TfJo=)
6: jFpXUQdW_8WooLIc_r8NHAOFq5I.roa (hash: QNhPW7mwEoqlv0FVLXTOe8Hyk9HQZ4btsFGqykx+UXs=)
7: mp-VpswUBjza82Vpf1GOWZIhrlQ.roa (hash: ae9rTRwpHTYdLNVU2WmOKxDNxm6rN9lNU5zvZm8mMAI=)
8: wsrq6fWnAqeku8A_GZwiLZf-5K4.roa (hash: J+LxxVoqWb4DhzDjDoPAH244InAa96sW5M272Q6W0+c=)
9: ztSs7zmKYYrvh6ddsY39F_uOKEk.roa (hash: /k/b9/O5jpdDOIMSaJIPt2QCSI1+oOFC4DFoJBolsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:99:31:59:61:3b:80:eb:fa:f4:af:5c:72:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Sep 22 01:00:08 2026 GMT
Not After : Sep 23 01:00:08 2026 GMT
Subject: CN=bd1443486f71e779cd5ebcca9b343ce19dd12aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:40:71:29:0d:df:c3:7f:e5:f9:f2:04:a7:
c5:0f:64:be:b3:eb:c9:8b:6e:f0:b4:1d:8a:b6:85:
71:7b:58:0f:ae:5e:11:cb:08:0c:15:1f:4b:62:d7:
b2:3f:e6:d9:a6:83:10:cc:7d:87:3d:e6:19:2d:05:
36:f5:b6:d0:ed:46:5e:fc:1d:3f:fc:cf:a8:e2:53:
e4:74:78:d2:cd:b2:ca:d0:61:b3:92:ad:6c:66:eb:
2b:fe:8e:c9:4c:30:ca:51:95:fc:7f:25:78:ad:c5:
82:21:41:74:f2:10:58:b5:66:c5:cf:8b:fd:ad:6a:
48:7c:82:61:12:7b:8c:b5:ac:f8:dd:f1:da:93:93:
4c:7b:b1:60:fa:f1:ac:08:58:4a:f4:b9:a6:f4:74:
f7:22:0a:28:cf:45:8a:2c:08:5c:2e:5b:11:54:4e:
43:e7:44:db:d6:6d:83:b2:45:d2:3f:e1:3f:c6:24:
e9:ad:2b:e7:68:81:e6:63:c5:7c:bd:45:38:08:b0:
3d:8e:2b:43:9c:dd:80:97:47:95:f7:aa:b5:34:43:
6f:84:8d:2f:97:3b:09:e9:0d:e0:6e:df:c8:f0:a4:
1b:a7:6a:ea:59:49:d1:b7:35:e6:f8:13:42:01:b6:
d7:44:6b:d4:2b:4b:06:0c:6c:ac:ea:ca:84:58:cc:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:43:48:6F:71:E7:79:CD:5E:BC:CA:9B:34:3C:E1:9D:D1:2A:A3
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:2c:70:2a:9e:cf:70:ee:0e:47:1a:59:fb:5d:93:e3:f5:
d5:8c:46:81:fa:72:70:c0:3e:d5:6d:aa:29:a4:6a:ba:56:3e:
02:85:e2:fd:2d:6b:1e:7c:96:c2:b9:43:58:68:8a:ae:27:64:
d1:2b:e6:93:31:e0:64:d2:ae:d9:8f:f8:2c:a6:fe:ba:4a:b0:
76:ed:f7:90:ef:29:26:27:d8:54:da:cd:e4:c2:4a:32:93:df:
49:7b:43:20:cf:81:05:9e:88:b6:d9:b9:fa:7f:41:83:ca:84:
cd:f3:af:15:a1:1e:21:01:48:5f:14:17:a2:f2:2c:14:fb:6c:
5f:f4:51:89:b9:90:ad:c0:1a:50:fb:ab:73:e4:02:b4:f1:61:
f5:81:00:cf:70:3a:e6:48:b6:88:4a:23:e4:9d:4f:f9:3f:33:
c4:97:af:1c:2a:8c:5c:48:f7:ef:94:5b:27:24:1e:2b:92:5e:
84:70:28:89:99:f6:97:4c:5b:4d:5a:6f:c4:7b:b8:b8:9c:38:
e0:46:92:ec:4d:95:54:79:d2:d5:b4:14:45:f1:e0:2a:97:31:
1e:9d:13:b7:e6:f6:48:30:24:30:5b:b9:89:f2:e1:c4:93:02:
28:c1:43:3e:1a:e9:63:65:0d:2d:03:8a:a7:23:69:74:22:a1:
6e:ce:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:38 2026 by rpki-client