Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: FEWHK8Gom12PGK+8pZD2fUAnlNAKSSFdycZfBUhO9EI=
Subject key identifier: D2:7E:F9:B3:D4:76:73:B8:31:84:B3:0D:E7:CC:B7:74:64:C9:C7:66
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 01A0C4B321128EB3C81CCE0834843EE29A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0D75
Signing time: Mon 21 Sep 2026 16:01:08 +0000
Manifest this update: Mon 21 Sep 2026 16:01:08 +0000
Manifest next update: Tue 22 Sep 2026 16:01:08 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: LvA9eP4JoBSuYxH9x+c4ta26ZNptXugzB6/t03/OiUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:21:12:8e:b3:c8:1c:ce:08:34:84:3e:e2:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Sep 21 16:01:08 2026 GMT
Not After : Sep 22 16:01:08 2026 GMT
Subject: CN=d27ef9b3d47673b83184b30de7ccb77464c9c766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:f7:44:75:d1:bc:aa:88:4e:3d:37:42:4f:
0e:30:ca:4f:ec:40:27:e2:a5:da:0a:a3:a9:3e:5e:
b3:7b:04:15:94:66:93:05:73:9a:e4:96:1c:35:b4:
23:c7:14:73:ac:88:06:95:8e:dd:f3:c4:64:4e:5d:
eb:d1:6c:9f:c5:26:c1:8b:45:91:1e:ce:17:44:eb:
05:01:b8:db:3d:64:56:f1:6d:0a:26:4a:4b:75:c4:
34:ae:35:11:89:51:36:a4:dc:42:45:27:0c:7c:d0:
08:f0:7b:cd:b1:6a:e6:3e:7c:e0:79:30:e0:a1:ff:
20:71:4c:40:48:a9:56:2d:17:7a:0c:cf:7d:e2:0c:
c9:78:a8:ea:c1:13:f6:30:6c:4c:47:7b:1a:09:78:
5b:3b:6c:fe:d6:b8:2f:00:2a:9a:46:c4:e4:ec:a3:
4a:5e:9b:85:05:e4:1d:47:e7:d0:6b:5f:a5:54:1e:
66:e5:49:2b:3f:a6:d9:15:69:15:62:f7:d6:00:de:
8f:d2:67:fa:85:7a:3d:d9:66:7d:bb:7f:94:57:c5:
ea:46:fe:65:d3:7e:76:17:c8:8a:eb:14:0f:c6:45:
bd:c8:b3:c7:66:2c:95:bf:49:e8:df:11:cf:4e:2f:
a0:3b:e3:0b:8b:06:ea:e2:45:c9:20:d5:0c:c0:ed:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:F9:B3:D4:76:73:B8:31:84:B3:0D:E7:CC:B7:74:64:C9:C7:66
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:a8:3c:cd:45:ec:e7:7f:f5:cc:05:b5:fc:fd:1c:36:17:
cd:f2:06:2b:13:7a:82:6c:f7:b0:70:09:bb:65:0d:02:c5:6f:
82:bc:fb:79:ae:dd:ed:2d:b4:e6:1d:de:ab:4b:ea:fe:84:21:
5d:e8:0b:9c:ef:c2:34:5c:75:2c:fd:8c:2a:62:a3:45:5f:2d:
ad:bc:1f:1e:3e:8c:b3:5f:85:0f:0b:ec:61:cb:1a:7e:a2:e8:
5f:08:66:fd:6d:ab:22:91:8e:e2:79:0b:1d:78:79:fb:45:94:
53:4d:a8:a6:03:fc:f7:5b:1f:b5:df:b0:3d:ce:57:ec:dd:3b:
e0:0d:f5:ab:52:c5:97:1a:b6:67:99:34:4f:1d:2f:99:52:08:
39:cd:98:f4:be:b9:0d:ca:57:6b:0e:56:2f:12:f2:09:67:70:
17:87:a2:d6:91:05:7a:4e:e6:a7:a6:fa:f9:38:fb:8c:d5:33:
cf:cf:5f:0f:42:a2:11:3d:4b:14:9f:18:d0:fa:09:94:c2:c4:
eb:83:8d:2c:2c:4f:d3:c1:a8:08:cb:ec:a7:bf:45:43:9c:8d:
c1:d9:cb:74:0b:9e:a4:88:b5:bf:66:51:30:38:d3:c8:72:2f:
46:7c:08:fb:26:7c:64:e6:14:59:de:7f:d1:b9:58:bd:39:a4:
ab:4e:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:40 2026 by rpki-client