Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: 5ywtCp2gw7h0GJyEo22MbQje1Vog6fMJOI+FRCWiPxc=
Subject key identifier: 1F:DF:55:CD:1F:0B:30:21:D9:12:CA:82:1A:58:67:9D:96:DE:D0:A5
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019FACE3DBD9605B9E05D3A563DA26F1E66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 128B
Signing time: Wed 29 Jul 2026 08:00:41 +0000
Manifest this update: Wed 29 Jul 2026 08:00:41 +0000
Manifest next update: Thu 30 Jul 2026 08:00:41 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: rDv6xcqRHevLgclKJbCMLyJp+RzpnVVJkLhp68aX+0c=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:db:d9:60:5b:9e:05:d3:a5:63:da:26:f1:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jul 29 08:00:41 2026 GMT
Not After : Jul 30 08:00:41 2026 GMT
Subject: CN=1fdf55cd1f0b3021d912ca821a58679d96ded0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:ca:0d:df:6a:3d:df:a0:b0:b1:3a:fe:40:
ef:fb:6c:d4:b3:95:94:e7:6c:5b:98:2a:73:2a:ef:
9f:96:5d:5e:04:4e:87:54:f9:6f:f9:8c:96:ef:ef:
87:4f:ee:05:db:da:bc:ef:95:e5:ef:c6:43:cf:07:
ac:8c:f7:e8:9c:9d:db:17:bc:86:40:38:24:90:b4:
bd:42:90:ea:65:ac:2c:b4:08:40:2f:57:76:13:84:
03:45:3b:ab:96:48:35:b1:b1:9e:7d:2b:2a:cf:cb:
53:e6:c4:9f:36:27:ad:bb:6c:ca:1d:0b:dc:a4:b5:
a6:7d:21:a3:7d:d1:45:b3:54:f0:d4:35:db:96:e5:
ab:94:44:bd:64:a2:19:ba:ff:fc:35:2b:bb:9f:70:
50:4b:33:78:ce:24:ef:51:4f:6c:31:82:dd:12:a6:
1a:b1:15:8c:5e:e9:a5:af:81:25:bc:d8:57:4c:f8:
da:26:53:25:60:5c:fc:7f:0e:ba:50:fb:ad:ef:64:
d5:b5:9d:97:df:86:88:1d:cf:25:e5:df:6e:41:32:
b8:2b:c5:c8:25:99:4a:e1:30:c1:ac:a8:26:cf:31:
0a:c9:03:e2:eb:df:3b:1a:9a:ba:f8:5e:f7:e4:c8:
50:41:98:7a:47:4a:2e:fc:7e:1d:a2:02:f2:21:46:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:55:CD:1F:0B:30:21:D9:12:CA:82:1A:58:67:9D:96:DE:D0:A5
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:68:ad:48:8c:6f:84:13:34:2f:88:95:6c:42:84:b1:5c:
08:b6:4c:b5:3d:1b:c0:13:d0:4f:c0:1d:23:52:08:54:23:8f:
2c:5e:19:c7:c1:34:a7:b5:f2:35:63:7f:19:6f:18:68:cc:37:
00:fb:81:71:f3:f7:80:a6:40:6e:ed:b5:de:64:a7:0a:25:01:
0d:94:93:15:2a:d6:da:8e:99:96:25:b3:ac:7a:06:e0:9c:cd:
e2:e6:fd:72:8f:f5:23:cd:c0:3b:28:cb:3c:27:89:d3:f8:3b:
dc:6c:7e:75:9c:f1:00:0a:73:8d:fc:6e:ab:8a:36:7f:39:04:
a7:4d:3c:93:29:42:d8:72:c7:95:e5:ed:2b:a0:80:94:6b:10:
20:9a:8b:5f:39:0a:c1:d3:51:2a:f4:a0:ed:ef:7f:d9:32:2a:
8c:b3:6c:3a:8b:09:c0:fa:38:6c:50:f1:79:9e:a2:70:4d:90:
cb:05:af:a9:06:99:11:fb:93:5c:de:9e:e8:d3:24:f3:81:6c:
b2:08:e7:cd:06:18:f9:76:28:b5:e3:67:91:0f:96:0e:f9:3f:
fe:12:e6:f0:20:11:2d:f6:c7:1b:be:0f:43:7a:d2:e9:e1:51:
6a:f7:7f:a8:29:1a:17:46:c0:f1:45:e5:e2:2e:a9:70:93:c7:
85:f3:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:12 2026 by rpki-client