Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: xQ92rNjUJgYKPXPu0kpR3OjV4A+KSHMEKCrCnOkXvCo=
Subject key identifier: 99:88:34:69:11:35:F9:2B:77:C7:F3:9E:01:01:5B:8D:4D:2B:BF:53
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019D9BBE66434FE6F717520F3F58CA84E017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 1179
Signing time: Fri 17 Apr 2026 14:00:39 +0000
Manifest this update: Fri 17 Apr 2026 14:00:39 +0000
Manifest next update: Sat 18 Apr 2026 14:00:39 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: GDUdAEoszXkZdlvqAvex8O/8ckVVKzP78Sbc223gw5M=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:66:43:4f:e6:f7:17:52:0f:3f:58:ca:84:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Apr 17 14:00:39 2026 GMT
Not After : Apr 18 14:00:39 2026 GMT
Subject: CN=998834691135f92b77c7f39e01015b8d4d2bbf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:58:ec:c8:15:71:f0:ca:a7:24:17:7b:f3:
7d:c4:0c:12:85:aa:26:48:55:ae:88:e4:39:f6:91:
3c:7e:88:02:5c:f8:30:f3:f8:00:3b:68:43:59:87:
74:0b:2e:a5:32:c8:8f:2f:ee:69:cd:bf:17:31:3d:
4f:20:34:ba:42:27:23:32:be:f9:2d:0e:fb:53:21:
61:fe:fe:63:15:55:4e:da:43:29:1d:65:ee:dd:e6:
82:a6:10:15:0d:34:50:a7:ba:87:6b:4f:f4:56:c6:
1b:2e:69:94:f4:8f:7c:c0:06:dd:e2:0d:2a:0f:98:
d7:c2:d1:66:23:8e:70:26:bd:b3:56:1a:ed:93:2c:
26:99:29:00:30:d2:eb:10:8a:8e:da:25:e7:03:2a:
50:82:50:13:e7:73:83:e7:8e:0a:64:cc:6e:30:d8:
5e:04:1d:3c:59:7f:1a:90:cd:5e:fd:59:fa:3e:3c:
a0:77:14:04:36:9a:57:b3:78:c7:1d:8d:d9:71:16:
cb:12:a9:f7:93:9d:44:1d:6e:cd:d3:2c:61:e9:e0:
87:9a:7d:36:0b:a1:e5:53:94:5d:dc:e6:0f:8f:9d:
90:ae:a2:b0:c2:dd:a1:0b:9f:24:b6:59:0b:f9:c0:
1c:f5:8a:20:45:3d:2e:6c:4c:cd:21:ce:0f:be:aa:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:34:69:11:35:F9:2B:77:C7:F3:9E:01:01:5B:8D:4D:2B:BF:53
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:35:df:79:13:5f:6a:4e:b5:25:93:73:2c:35:df:02:a1:b4:
48:1c:02:8b:a6:32:7a:7a:3a:18:14:07:eb:bf:db:10:be:6f:
da:88:3e:cf:37:2c:80:5b:87:81:0c:e6:45:aa:cf:ec:4d:7c:
52:48:63:fb:a9:83:e6:d1:ab:b9:ff:61:8c:b6:c1:7b:ed:bb:
1a:3b:44:f3:15:93:8b:5e:a8:1f:05:9d:9e:18:58:45:78:f1:
ba:06:5c:09:2a:9a:f7:f7:08:38:84:8e:8c:d4:1a:56:91:51:
3b:03:8b:8a:13:0c:30:d3:f5:59:b3:e4:df:1e:d8:96:4d:22:
88:e9:44:40:a9:64:36:69:cc:06:9d:63:e3:c6:a0:8f:93:15:
f6:ab:66:f3:07:1c:44:ac:c8:95:8d:72:d8:ca:98:dd:24:95:
7c:d3:ea:1e:2d:1b:78:fa:95:36:42:b9:f2:97:f3:44:a0:10:
41:38:29:2f:cd:ef:22:6c:52:aa:b4:7a:b2:e7:e3:22:c5:60:
83:22:3f:e2:7d:ca:de:db:05:a4:3f:7e:7b:9b:05:03:00:d5:
3d:5c:e1:a8:fc:85:66:9f:7e:4a:2b:91:74:d9:0a:88:2e:50:
03:a7:71:c7:98:16:b6:13:bf:0f:b3:68:6d:09:99:94:26:16:
e8:5d:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:48 2026 by rpki-client