Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: uzqFn6ognK8WLwFAhllWW7FsCyCoR5HuyJGwcArl2J8=
Subject key identifier: 14:52:5B:3F:F8:C8:1C:88:E4:16:9E:8D:51:0B:96:51:21:3B:29:1C
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019D9BBF0AFCAAECEAB0520712A93E560352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 08D4
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: CEqXVM+sb38Ly6yti/fus/QWck2Tm0kb7sq70H1k8iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0a:fc:aa:ec:ea:b0:52:07:12:a9:3e:56:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=14525b3ff8c81c88e4169e8d510b9651213b291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:e6:c2:db:8d:c0:20:24:42:90:41:67:b5:
b1:f4:3b:80:82:1e:42:1d:42:e1:df:5f:e4:d3:5f:
af:68:b7:d8:38:3a:0a:12:50:4a:83:f7:90:de:e9:
1a:eb:2b:27:d3:e8:84:d2:51:d2:ff:25:36:81:aa:
f6:84:aa:26:90:52:03:14:79:92:97:53:eb:89:4b:
17:f0:7a:fa:b5:02:40:e7:45:fe:9e:20:5a:bc:87:
03:07:bb:0a:d0:5c:01:63:eb:e7:19:34:f7:e7:a0:
2b:cf:b2:07:90:a2:41:3a:8f:b3:d5:19:56:e6:9c:
20:81:b2:21:41:e4:d2:84:b3:e5:20:91:13:10:09:
94:44:f5:2a:6f:1f:cd:72:dc:6d:e0:11:98:16:19:
8c:b2:0c:61:f5:c3:f6:db:f2:e4:b4:8c:e8:94:4c:
06:e6:8f:75:99:d5:07:ed:ff:97:2b:c5:fa:34:39:
d8:62:83:c8:93:d1:63:2f:8c:01:32:53:20:d7:af:
f8:e4:4f:39:44:fd:cb:4b:eb:fe:d5:24:71:64:c7:
cb:3d:16:7e:c4:c4:29:f7:45:a5:27:a1:e9:1f:2a:
7c:24:16:9c:62:fd:66:d0:5f:69:57:9e:72:85:56:
ef:a5:a4:03:1e:0a:05:c0:d2:5d:3f:08:b8:c0:06:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:5B:3F:F8:C8:1C:88:E4:16:9E:8D:51:0B:96:51:21:3B:29:1C
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2f:26:3d:f5:a8:10:98:ee:ef:cd:a7:54:24:ee:a6:f9:29:
cd:96:06:17:02:73:21:a9:28:14:d2:aa:b4:8d:32:93:37:31:
c4:dd:2c:e0:c6:12:c4:be:17:4f:f9:dd:2e:e1:b0:9d:98:e6:
24:4e:2f:b9:5b:79:60:8c:f8:8e:f0:10:db:d6:1a:cb:0c:3f:
dc:05:d7:45:5a:c8:e4:7d:43:99:5b:ff:6d:70:29:86:1c:ea:
94:f8:2a:cf:d2:e5:59:3b:01:02:14:3f:e8:28:ee:ec:06:87:
1f:e6:ef:0f:32:02:bb:49:47:6f:bd:f2:52:2f:81:13:7a:3d:
af:b8:8d:23:a8:ee:b5:96:df:c8:b0:db:6a:3a:a5:6b:a8:4a:
a8:ca:dd:38:94:9a:b8:b9:bf:af:51:3d:a1:13:56:8f:57:f3:
3f:23:2a:0a:be:ce:4e:bc:0b:a0:16:db:da:c7:ed:09:07:76:
bd:1e:d0:88:0a:45:d9:11:58:5d:81:3c:27:29:b4:e2:ef:b8:
05:94:f7:f4:38:d7:5c:f2:a1:52:7d:c0:fb:d1:9e:55:91:07:
d4:6e:62:1a:d9:40:14:96:21:e4:8b:fa:6f:eb:c9:e2:16:24:
32:e9:44:ef:a6:22:10:d1:b6:0c:98:82:7f:af:b0:0b:13:9e:
79:28:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:46 2026 by rpki-client