Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
File: l04fjAqkvQNL6t2zOJvXNspEPsA.mft (raw, json)
Hash identifier: hNI2dgyPtCHKKpEtLoCzAryJStBpmQqi9wO0nGo2uZE=
Subject key identifier: 9B:9F:0D:D4:9B:16:5C:B4:93:FF:7D:D8:AE:3D:76:E9:29:61:FA:8B
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Certificate issuer: /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial: 01A1306AD28FF103D56112A665C2CFE1A084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
Manifest number: 92
Signing time: Mon 12 Oct 2026 14:01:09 +0000
Manifest this update: Mon 12 Oct 2026 14:01:09 +0000
Manifest next update: Tue 13 Oct 2026 14:01:09 +0000
Files and hashes: 1: 7BZeedmWNxSvPKrlY8KT7vjjkl0.asa (hash: rlQ8KOmIrplS+aFjafrA9Je7LwJ3y4Bn50nbQiuj0HQ=)
2: MxA5nOeYhvXqWhlLB7RwnnofywM.asa (hash: OwE4V5j/z1QQ3UTL0xnNyAFabeAG1dV4F3vQTef4/hM=)
3: l04fjAqkvQNL6t2zOJvXNspEPsA.crl (hash: TAdD+Rtm3J+E7HJb4cyqKgcHPP7zsA0vuZuoDV2JXLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:d2:8f:f1:03:d5:61:12:a6:65:c2:cf:e1:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Validity
Not Before: Oct 12 14:01:09 2026 GMT
Not After : Oct 13 14:01:09 2026 GMT
Subject: CN=9b9f0dd49b165cb493ff7dd8ae3d76e92961fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:19:8c:70:4d:24:41:38:32:53:9d:ab:c0:
d3:ee:89:3f:a2:6e:ff:f2:40:29:17:83:94:17:d7:
1b:7b:0b:b0:36:7a:d9:05:f5:46:c2:1a:da:4d:31:
17:80:4d:4b:ef:2b:63:65:be:78:6f:54:a4:08:96:
e5:37:5c:ae:ea:55:d3:24:4d:4b:40:53:1d:02:f9:
7c:fa:f4:b4:10:9e:85:22:3d:ad:6c:fd:ba:5c:55:
2e:e6:66:cf:b6:28:20:78:98:4b:64:85:47:47:21:
34:06:ec:a9:8d:90:c8:42:48:72:61:dd:8a:5e:b8:
ae:20:22:fa:10:e2:a4:d8:b5:4d:19:60:5f:c4:91:
00:34:27:9d:92:22:8f:3f:f9:5e:f9:ed:38:44:8e:
26:c7:d9:97:57:da:c2:49:58:28:e7:ae:f2:af:08:
c9:36:45:bb:a2:fb:e4:0f:41:a4:13:e6:5f:dd:ba:
43:76:5b:6f:f9:17:3b:8c:4f:8b:92:d6:ec:16:2d:
5f:af:25:32:52:d8:3c:e0:90:ea:44:bc:88:e6:d0:
cc:c2:cb:47:cb:4c:49:11:ee:52:f8:b2:f8:f0:59:
55:94:56:98:45:16:ab:38:fd:f5:d8:14:55:87:06:
9e:a9:e5:f0:80:14:d5:6b:09:4e:2a:4a:7d:e9:9e:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:0D:D4:9B:16:5C:B4:93:FF:7D:D8:AE:3D:76:E9:29:61:FA:8B
X509v3 Authority Key Identifier:
keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:f8:1e:ae:aa:5e:de:b1:1d:ea:51:3e:6b:7a:60:f2:ce:
59:2d:9f:3d:5c:b4:b5:d9:09:b0:13:8b:20:48:27:3c:5e:df:
13:be:ca:b2:4b:4d:b4:f8:32:33:64:b9:68:9b:0c:0e:cd:be:
13:84:9b:6f:49:74:79:7c:25:d9:ea:83:f2:93:28:ab:e9:35:
64:dc:73:ec:90:4c:9f:6b:48:80:f7:cb:9f:72:92:54:90:f1:
9c:c9:cf:00:6e:70:18:2b:4e:03:6d:5f:e1:43:e8:8f:47:5e:
2e:cf:f5:db:c8:71:5c:30:9b:e0:e5:e6:5a:d7:e3:ef:9a:e7:
9b:49:a1:1b:b9:3d:33:ef:f1:38:30:25:1b:de:c6:c0:40:68:
1a:fc:8e:e9:5c:6d:5b:5d:4c:68:02:b4:ae:f0:80:67:7c:b8:
ad:74:89:90:fb:c0:35:18:f5:9f:a8:25:d3:0b:87:cb:e9:87:
e7:ce:83:0e:ac:b3:94:4e:7e:aa:64:79:e4:b8:d0:12:3d:63:
dd:22:b7:3d:1d:6a:28:a5:4c:ce:55:88:83:77:59:c2:85:bb:
fa:77:ce:a3:eb:7b:c5:a6:bd:72:82:3f:2d:c6:6d:af:64:30:
62:2b:41:18:28:dd:63:96:8b:bf:4d:f5:98:ba:9a:4c:af:7d:
e9:38:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:06:30 2026 by rpki-client