Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: n6z3SkSE22msZB7KajdZ89zzKQFa8azmoCLS9rL/I/g=
Subject key identifier: AB:9D:1D:C4:DD:2F:9A:D3:2E:9E:8D:F6:7A:45:38:DD:9B:39:CB:02
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01A139DBCFDB6B324299E9221C5DA2534FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0AB4
Signing time: Wed 14 Oct 2026 10:01:09 +0000
Manifest this update: Wed 14 Oct 2026 10:01:09 +0000
Manifest next update: Thu 15 Oct 2026 10:01:09 +0000
Files and hashes: 1: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (hash: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=)
2: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: dS5qHV6Eex4mb0ubIdAXpbalE1V9M3pMBzsqSfR99DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:cf:db:6b:32:42:99:e9:22:1c:5d:a2:53:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Oct 14 10:01:09 2026 GMT
Not After : Oct 15 10:01:09 2026 GMT
Subject: CN=ab9d1dc4dd2f9ad32e9e8df67a4538dd9b39cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:d3:11:46:41:d2:48:15:bf:a4:9c:5b:83:
0f:5e:4c:fa:f2:e0:1c:29:70:e1:63:84:2e:aa:56:
18:11:88:2b:e0:db:1a:5c:59:3c:0c:01:81:54:0c:
13:71:51:eb:52:0c:5b:3a:dd:44:76:23:ab:d0:d7:
e3:ad:b1:52:3c:a9:8e:40:4c:c4:12:eb:90:ea:9f:
fd:62:56:71:19:b5:6a:88:fc:e8:17:1c:d7:fc:84:
0c:e4:1a:65:2e:0b:32:b7:7a:46:e6:7f:b2:14:b1:
a1:fd:ff:59:b5:7a:26:63:73:f9:9a:83:6c:d0:02:
ec:d4:c4:bd:22:90:81:e3:cf:ca:60:dc:97:ce:89:
ab:84:41:fe:74:80:53:4c:a2:b2:3c:12:96:aa:65:
38:50:bb:db:6a:a6:8a:24:71:46:c5:b7:0b:8a:ea:
a3:65:30:15:ec:f5:51:a5:cc:33:31:bf:73:50:e4:
c3:fb:13:03:95:61:b7:a7:55:d4:50:68:8e:f5:1b:
7d:69:4a:7b:6d:ce:a0:13:a4:56:ca:75:0d:84:8c:
29:72:58:2a:78:f1:fa:17:9a:15:7e:9b:7d:83:c5:
ae:46:4c:e1:6c:79:2f:50:98:12:7d:bc:88:0c:6c:
74:02:74:f8:88:43:33:61:80:01:c2:46:b2:6c:39:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:1D:C4:DD:2F:9A:D3:2E:9E:8D:F6:7A:45:38:DD:9B:39:CB:02
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:a4:5e:d8:8c:93:a0:e1:0e:1e:2a:e3:41:b6:90:ab:a8:
2d:97:ca:51:86:3f:69:15:d0:58:42:8e:5f:1a:05:1f:e0:a5:
fb:19:82:64:48:36:d2:05:6d:17:d0:b5:78:7a:10:58:8f:87:
0b:05:cf:2c:bc:42:d1:b5:e4:45:95:31:8c:73:b9:16:8d:47:
da:56:a7:b0:36:c8:10:a3:51:80:50:69:a0:d2:b7:a5:15:9d:
ee:33:2b:eb:45:14:d6:30:5d:48:04:d6:2e:06:fe:c7:2b:55:
cd:94:c4:70:11:f7:36:2a:fb:7c:64:d6:06:d1:9c:ae:8d:8b:
7e:d5:c6:43:63:ae:49:71:e0:28:ed:4c:62:4f:8f:41:7d:64:
43:2a:3f:2d:42:4d:4b:eb:e3:36:10:c2:bf:3a:db:d4:1b:d9:
3a:1b:6c:70:cd:64:75:29:67:84:fe:cf:b2:26:e8:a7:d3:4d:
98:d7:48:ce:b0:bb:07:cd:6d:05:15:b9:54:c7:1f:ec:e3:07:
10:f2:69:7b:dc:6d:c1:dc:6a:09:b1:59:0f:75:c4:12:f1:87:
ff:cd:30:30:4f:93:59:25:da:56:df:af:a4:11:a6:1b:7d:b3:
39:eb:36:ff:63:34:42:70:96:0c:e4:c7:25:9e:60:1f:2a:1e:
23:ad:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:29:59 2026 by rpki-client