Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: FnLXUroIvtgS5oaKujITwDKlr+mgE08sWU01u2Lqx90=
Subject key identifier: 28:96:C0:67:51:1F:B6:9D:2C:21:58:2C:16:B6:02:D3:91:8E:5B:34
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019FAABE9D2F231801A83762A5569C006011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0CE3
Signing time: Tue 28 Jul 2026 22:00:46 +0000
Manifest this update: Tue 28 Jul 2026 22:00:46 +0000
Manifest next update: Wed 29 Jul 2026 22:00:46 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: 5CugJHpsMXL36THTrLU7uFZq00zSFagAS5sA6NHt8YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:9d:2f:23:18:01:a8:37:62:a5:56:9c:00:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jul 28 22:00:46 2026 GMT
Not After : Jul 29 22:00:46 2026 GMT
Subject: CN=2896c067511fb69d2c21582c16b602d3918e5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:aa:ea:00:01:25:36:b5:a3:46:9b:3c:4c:
56:11:06:8b:7a:1d:05:f3:9a:b0:5c:99:03:cb:1f:
41:76:2f:01:76:3e:df:b5:e2:72:e5:da:ee:57:91:
f2:1f:be:b5:d4:e8:31:ee:09:75:9c:0f:a8:08:3a:
fa:ed:19:90:31:cb:0c:47:dc:14:65:46:0a:d2:e0:
3b:03:ff:58:3b:20:90:49:95:29:b8:aa:52:00:0d:
52:13:be:40:09:eb:43:d1:03:d6:5b:50:01:5c:a3:
99:c2:b2:b1:53:32:52:d6:f4:df:cf:67:0b:7d:21:
79:32:1b:85:6b:0a:30:fa:46:96:90:3a:c6:c6:16:
6f:4f:86:81:ba:9f:94:2f:76:c8:9d:b9:7a:18:8c:
39:54:ca:45:32:f2:85:01:73:31:3c:43:90:e1:11:
7a:4e:db:62:bf:35:20:70:43:70:da:b7:e8:28:70:
93:e2:6c:7e:d1:dc:a9:99:94:f0:0c:c3:ef:2e:90:
c6:2b:f1:1d:90:91:a5:36:59:a9:69:9d:3f:20:04:
ab:48:99:5b:0e:d5:5e:c9:18:f5:f3:df:e7:12:c1:
04:39:36:96:86:63:88:0e:3a:cf:74:55:63:7d:01:
ae:b3:e1:5f:b7:af:66:9b:82:ca:66:07:d4:45:4c:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:C0:67:51:1F:B6:9D:2C:21:58:2C:16:B6:02:D3:91:8E:5B:34
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:dd:9c:73:c6:6a:66:34:28:e2:b5:f3:8d:6d:84:e6:e1:
2d:3f:ce:2a:1c:5e:c2:43:f7:3f:ce:ff:af:35:f4:c1:5c:6c:
4f:9d:d5:e7:69:f2:fe:13:49:60:c1:3d:40:b2:3f:4b:4d:e8:
a3:59:10:5e:c0:1b:7d:7f:d0:ef:b9:84:c7:a2:70:b5:a4:30:
bc:3b:8c:01:b9:6f:78:24:71:ea:10:a3:f9:04:21:50:a8:61:
f5:99:c3:6c:86:28:03:9e:3c:00:76:f0:c7:0c:0d:3f:02:c5:
ff:15:e0:02:31:64:07:d2:04:ba:32:39:25:a6:b8:ad:ef:46:
9d:b3:1a:af:ed:4d:9d:12:e5:79:50:a0:ef:66:1f:1b:d6:24:
a9:b9:af:68:63:55:b1:60:79:d0:eb:db:77:62:87:af:e1:67:
e1:a8:83:84:31:85:cd:ab:f0:72:5a:0a:a7:c9:0d:f8:59:eb:
4f:20:88:87:a5:01:6b:9c:c7:5c:b7:4d:b8:e1:3c:43:95:ae:
03:d5:c6:1f:3a:f3:bc:f1:e3:3f:f0:13:03:a5:67:a4:63:69:
ba:56:94:e0:bd:a6:ae:0a:be:a1:fb:0f:2f:25:9d:e2:ab:77:
cd:81:4d:4b:68:fe:80:55:32:59:e2:28:94:09:e4:05:fa:65:
4e:0c:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:43 2026 by rpki-client