Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: I0qb/tRiB2eoMTHkF5rsD4gq3937MFfSCqZ09W3ICgw=
Subject key identifier: ED:6F:AE:5C:2B:D4:E6:ED:85:30:5D:C5:98:E7:67:D8:2C:A4:75:3C
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019CAE35013260069709E35AA891CBE5E60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 10FE
Signing time: Mon 02 Mar 2026 11:00:35 +0000
Manifest this update: Mon 02 Mar 2026 11:00:35 +0000
Manifest next update: Tue 03 Mar 2026 11:00:35 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: rmOx/0rj6IcPHyh1SPfTSmm6ck33soEpKwr+m5D+388=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:01:32:60:06:97:09:e3:5a:a8:91:cb:e5:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Mar 2 11:00:35 2026 GMT
Not After : Mar 3 11:00:35 2026 GMT
Subject: CN=ed6fae5c2bd4e6ed85305dc598e767d82ca4753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:dc:20:59:2b:7d:28:5a:81:a2:e8:79:dd:
e8:e7:5e:72:9d:9d:c5:37:b1:42:29:da:ef:e7:8f:
3d:c1:ba:81:da:8c:c6:1c:31:e2:8d:7b:43:e9:87:
7e:df:c6:71:08:e8:56:3f:03:bc:18:67:14:bc:7c:
f3:0f:4d:90:e5:af:20:c2:4b:f4:83:67:cb:4c:c1:
49:ab:cb:c9:67:18:37:8f:ac:4d:b7:12:73:ef:f5:
db:c5:0a:fa:3d:1f:ea:1a:d8:da:16:ff:50:fe:c4:
8a:90:99:42:2e:9f:33:25:6f:6e:dc:95:de:3e:23:
8e:3f:b6:2b:58:ac:4f:8a:08:e2:90:6d:3d:e4:93:
3e:59:6b:13:e8:4a:04:86:dd:d9:85:98:bd:3c:0a:
0b:fd:32:67:d2:d4:30:35:f5:f8:74:09:56:9c:ec:
c2:f4:c6:e1:01:70:52:2b:80:ab:f6:3c:f6:e7:9d:
81:3c:1e:a5:61:e3:f5:1e:11:02:a3:8f:da:61:a4:
53:49:6c:60:ce:40:92:9d:ff:4e:0e:a5:64:b2:ca:
aa:fc:cb:45:b9:ee:39:e9:dc:bb:17:13:70:37:b7:
5a:a4:a1:bb:9f:d3:aa:21:90:6a:e1:6a:1d:0f:84:
99:6e:58:15:93:54:8c:27:36:87:cf:b9:76:48:b2:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:AE:5C:2B:D4:E6:ED:85:30:5D:C5:98:E7:67:D8:2C:A4:75:3C
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8a:82:b4:b2:ce:20:a4:33:ad:83:0d:66:b2:52:60:1e:72:
84:f9:b5:c8:24:f5:34:b1:da:30:ea:9e:bf:db:7b:8e:3f:11:
11:7c:18:2d:58:97:e2:f3:c2:7a:0b:27:4b:1a:70:f3:e4:82:
b9:da:53:b3:5b:96:b9:f2:6d:04:b1:76:d8:86:62:da:e7:a9:
f0:e9:0e:52:2d:c7:e6:94:de:2b:1b:48:f5:1c:ca:0f:8d:cb:
c6:3d:35:5e:8f:11:31:d0:ef:8c:42:6e:e8:73:d4:0f:9f:1c:
0d:5e:18:48:d3:fa:3c:56:6f:d5:2c:86:b7:97:e7:b1:f8:c0:
6f:96:5d:26:27:33:87:98:5f:74:69:0f:31:3e:35:cf:6e:e9:
49:1c:93:b7:1c:28:5c:8f:5e:84:04:22:07:c0:16:e1:31:0e:
67:99:8b:55:c2:b7:66:c0:b2:98:e7:56:13:9e:18:02:d6:62:
67:b1:c9:c8:72:8c:a6:39:07:ee:bb:3f:1d:95:a1:ea:a9:c4:
65:b9:8c:97:10:11:af:21:0a:bc:7d:96:a7:3b:f4:49:aa:67:
a0:13:7f:9e:26:bd:22:2c:a6:38:4a:d2:62:fb:3c:ba:97:57:
d6:de:81:63:0c:a5:a7:57:32:fb:0f:13:ae:c1:ff:af:6e:c8:
38:9a:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:54 2026 by rpki-client