Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: HS3PxiM5jIxoDIIIJsjIon6o1tai+4ITI+ZwQ99jCtY=
Subject key identifier: 6C:5E:7A:7E:09:25:FA:C6:25:3C:48:1B:2E:50:38:B8:3A:E5:17:B5
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01A12579CAC2C6EE3506DEB834279D56BEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 134E
Signing time: Sat 10 Oct 2026 11:01:40 +0000
Manifest this update: Sat 10 Oct 2026 11:01:40 +0000
Manifest next update: Sun 11 Oct 2026 11:01:40 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: /XhJXYPDdU9C+mKoZrowN5TDDcors7guif1oaPChjLM=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:ca:c2:c6:ee:35:06:de:b8:34:27:9d:56:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Oct 10 11:01:40 2026 GMT
Not After : Oct 11 11:01:40 2026 GMT
Subject: CN=6c5e7a7e0925fac6253c481b2e5038b83ae517b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:7a:7c:77:d4:3c:8c:bb:d2:ea:77:14:45:
e6:46:2b:bf:8f:eb:e9:6b:ca:e9:1c:14:c5:1b:10:
85:34:5d:ea:94:a2:2f:60:67:6c:77:10:91:52:4a:
7a:b2:4d:07:b8:39:31:08:a1:f9:65:1d:9c:a4:d6:
cb:bc:0d:e8:ed:9e:f2:09:d6:20:62:9b:10:ef:5c:
24:49:3e:b4:a6:cd:ed:4c:ce:68:3a:3e:e0:48:ba:
50:9a:94:eb:a0:9a:7f:a7:eb:f3:69:0d:76:37:1c:
d1:27:43:4e:7d:24:23:9b:36:65:50:4b:3e:23:95:
4c:cf:35:d2:7c:c5:6f:f9:25:08:b2:bb:6e:24:dc:
da:40:b9:79:e1:ac:7d:8c:93:f4:2f:c4:43:c5:5b:
f3:4d:a2:5f:6a:30:2c:de:da:a5:24:51:af:0d:89:
7b:42:4a:66:b1:4f:19:4b:4c:eb:54:93:12:09:e5:
d2:33:4d:ec:e9:59:65:92:e9:2c:02:e9:8a:0d:11:
8b:88:66:c1:8c:86:89:f4:14:74:39:f2:31:6b:c5:
11:61:ae:4b:11:84:09:aa:31:10:d5:22:0f:85:e1:
06:ef:47:45:4b:74:2f:3a:47:a4:28:6b:96:8b:0c:
be:37:6b:60:86:70:98:c6:56:8e:50:65:3d:57:41:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:7A:7E:09:25:FA:C6:25:3C:48:1B:2E:50:38:B8:3A:E5:17:B5
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:18:96:24:91:51:56:30:20:7c:53:98:ef:c1:6c:fa:fe:e3:
ea:94:46:be:bc:7a:b5:8b:6c:56:05:9f:b1:de:23:2c:13:c9:
45:c3:3d:55:2d:58:38:c7:7e:92:ac:7a:b2:2d:b1:cd:dc:9a:
fb:b6:d5:e3:b9:b8:b9:4d:e5:8e:34:7b:34:0a:f7:14:ac:bf:
7b:7b:12:a7:e2:51:97:1f:e4:4e:84:00:99:c3:db:3e:57:92:
d9:e8:28:92:99:ac:56:14:94:0f:87:56:6c:1c:ef:8d:57:df:
dd:24:e8:05:eb:34:b9:f9:e9:94:41:98:06:47:be:3b:1f:9e:
05:9a:2d:b4:87:8e:d6:34:58:96:9e:93:4c:aa:10:68:17:6b:
bc:bb:9e:32:d9:66:8a:41:18:98:e8:7c:ff:45:ca:b8:93:67:
ef:34:e8:55:a0:90:f4:71:05:93:8c:3b:a5:c9:b6:20:e1:dd:
90:81:49:99:72:96:17:c0:16:2d:cc:e8:76:c6:54:93:02:f3:
af:fc:57:fe:64:87:c6:2d:4e:d0:6e:94:dc:ce:19:ab:5c:8f:
e8:98:1b:a3:48:86:be:69:48:7c:5e:e3:28:c1:4b:9d:81:06:
52:93:88:ae:6a:69:00:e1:c5:ab:67:50:08:8d:88:35:9c:57:
52:5a:83:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElecrCxu41Bt64NCedVr7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZDM3OTM1M2UzYzk0OGRmZDk4ZGEwYTU5ZTk3OTIzNTNh
NGQwZTMwHhcNMjYxMDEwMTEwMTQwWhcNMjYxMDExMTEwMTQwWjAzMTEwLwYDVQQD
Eyg2YzVlN2E3ZTA5MjVmYWM2MjUzYzQ4MWIyZTUwMzhiODNhZTUxN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCt6fHfUPIy70up3FEXmRiu/j+vp
a8rpHBTFGxCFNF3qlKIvYGdsdxCRUkp6sk0HuDkxCKH5ZR2cpNbLvA3o7Z7yCdYg
YpsQ71wkST60ps3tTM5oOj7gSLpQmpTroJp/p+vzaQ12NxzRJ0NOfSQjmzZlUEs+
I5VMzzXSfMVv+SUIsrtuJNzaQLl54ax9jJP0L8RDxVvzTaJfajAs3tqlJFGvDYl7
QkpmsU8ZS0zrVJMSCeXSM03s6VllkuksAumKDRGLiGbBjIaJ9BR0OfIxa8URYa5L
EYQJqjEQ1SIPheEG70dFS3QvOkekKGuWiwy+N2tghnCYxlaOUGU9V0ELgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxeen4JJfrGJTxIGy5QOLg65Re1MB8GA1UdIwQY
MBaAFC/TeTU+PJSN/ZjaClnpeSNTpNDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEt
OWUyMjU2MWJjYTg4LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEtOWUyMjU2MWJjYTg4
LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxiWJJFR
VjAgfFOY78Fs+v7j6pRGvrx6tYtsVgWfsd4jLBPJRcM9VS1YOMd+kqx6si2xzdya
+7bV47m4uU3ljjR7NAr3FKy/e3sSp+JRlx/kToQAmcPbPleS2egokpmsVhSUD4dW
bBzvjVff3SToBes0ufnplEGYBke+Ox+eBZottIeO1jRYlp6TTKoQaBdrvLueMtlm
ikEYmOh8/0XKuJNn7zToVaCQ9HEFk4w7pcm2IOHdkIFJmXKWF8AWLczodsZUkwLz
r/xX/mSHxi1O0G6U3M4Zq1yP6Jgbo0iGvmlIfF7jKMFLnYEGUpOIrmppAOHFq2dQ
CI2INZxXUlqDcQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:03:31 2026 by rpki-client