Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: sKZsHOK/iT0LRJh2UgobvKceePr9tE35ee1eeEx+3/Y=
Subject key identifier: 18:CD:86:60:92:67:F9:77:17:39:95:9E:39:3F:F8:EF:A6:E2:52:F0
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01A130344467E7D8804F2722837B0DC986B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0AAF
Signing time: Mon 12 Oct 2026 13:01:34 +0000
Manifest this update: Mon 12 Oct 2026 13:01:34 +0000
Manifest next update: Tue 13 Oct 2026 13:01:34 +0000
Files and hashes: 1: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (hash: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=)
2: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: j9gtrtWveZTSHBq8oTwxX6riCua13Qp+/XqhADcMftQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:34:44:67:e7:d8:80:4f:27:22:83:7b:0d:c9:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Oct 12 13:01:34 2026 GMT
Not After : Oct 13 13:01:34 2026 GMT
Subject: CN=18cd86609267f9771739959e393ff8efa6e252f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:11:9c:1b:f1:56:ff:e3:34:d4:87:e6:79:
12:44:68:f8:a2:e8:7d:ab:86:70:d8:a2:6d:9a:00:
f7:00:ba:d0:14:1f:87:e0:3f:d6:dd:90:e6:ea:48:
4e:7f:98:7e:88:3f:02:ee:d5:20:9e:a9:c1:e0:2f:
b2:22:15:27:54:96:dd:32:1e:ee:d9:4c:6c:57:b3:
ae:95:5a:c3:01:49:df:b1:aa:93:fe:46:32:47:83:
aa:8d:1a:af:5f:96:2b:bf:e0:77:01:7a:63:e4:db:
d1:e8:6b:05:e3:81:e0:0d:16:b7:b7:53:b6:4d:9b:
ee:f8:6d:4a:9f:f5:a9:2b:2d:06:60:09:95:fb:47:
5e:9b:9f:5a:f7:65:c1:66:bc:7d:2f:90:e7:ca:27:
03:4a:21:b4:f9:d6:ce:30:fc:84:6f:3e:7e:99:04:
d2:45:4c:b2:c8:e8:2c:d9:76:0a:25:0d:08:26:59:
f8:44:85:22:4e:a0:e7:b6:5d:47:cc:b5:39:9b:49:
70:a3:4d:47:23:73:8d:44:7b:f8:c7:0c:3a:42:e1:
e0:ac:f9:b9:a1:b0:39:ce:6a:91:9d:f0:fe:a0:bc:
77:53:97:2d:43:0f:60:57:89:6e:9c:ff:76:77:3d:
f0:12:8a:7f:c3:96:3d:81:0c:f3:75:e5:4f:08:6b:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:86:60:92:67:F9:77:17:39:95:9E:39:3F:F8:EF:A6:E2:52:F0
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:ce:da:24:85:e5:ff:b7:b2:17:c7:66:5c:aa:c4:98:51:
f9:c0:2d:ab:19:d2:10:35:67:76:01:c6:8a:17:26:c1:4d:68:
41:81:f1:5f:e2:83:6d:8c:14:8a:55:0a:47:c4:00:81:e9:d6:
1b:25:5b:f5:18:40:a9:84:f5:55:be:fc:12:24:3b:6e:e8:ce:
09:45:58:77:59:a3:54:06:3e:d4:b2:1f:de:82:f2:23:48:fc:
1d:b2:85:43:f1:19:d1:93:d3:02:89:f7:ff:2e:04:48:b5:4d:
cc:6a:7a:59:1c:9e:11:0c:66:73:a4:73:16:b4:ec:b9:3a:8a:
9d:70:dc:80:1d:05:0c:bf:ee:15:3d:06:49:86:09:15:7c:3c:
67:ef:82:f7:7d:8e:84:a0:f8:18:15:51:25:a9:0e:5c:8c:35:
8f:bf:72:ec:76:56:d4:e5:68:31:ea:e8:65:57:bb:ba:18:0c:
21:84:65:6d:3a:6b:0c:07:a6:a3:3d:7e:45:8b:c1:90:a3:e3:
47:25:a6:e8:d6:6d:21:ca:67:dc:b8:93:fb:b9:70:0c:f0:ed:
41:74:98:c6:ca:a0:26:a8:99:14:07:ad:be:0a:9c:1e:65:aa:
f1:77:cd:f7:53:b2:97:ba:64:66:2f:d3:60:ea:35:fb:33:e9:
ec:7c:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:34:13 2026 by rpki-client