Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: jqqPKJlajUK7XwPGATtBOn/aSMStmZYDjAicu7AzH7Q=
Subject key identifier: 62:A2:93:CF:DD:6F:01:13:3F:E6:B1:6C:2F:3E:3B:3F:C2:1E:29:88
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01A0C5FC86C264EAD110B496E08B064BB7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1A4C
Signing time: Mon 21 Sep 2026 22:00:56 +0000
Manifest this update: Mon 21 Sep 2026 22:00:56 +0000
Manifest next update: Tue 22 Sep 2026 22:00:56 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: SzDq0hBrKSGHUle+/00H5uugq5q3t/TJAMEMZeX6zB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:86:c2:64:ea:d1:10:b4:96:e0:8b:06:4b:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Sep 21 22:00:56 2026 GMT
Not After : Sep 22 22:00:56 2026 GMT
Subject: CN=62a293cfdd6f01133fe6b16c2f3e3b3fc21e2988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:b8:7b:c3:cb:00:c5:7d:91:ea:99:89:34:
9c:10:e5:4d:54:41:92:18:13:9b:52:30:35:4a:b5:
2e:32:bd:47:d0:6e:69:d9:b3:b4:55:3c:e5:20:57:
26:dd:5b:c7:95:d0:b3:bc:a9:20:13:d7:ee:03:df:
64:02:90:6a:1f:1f:cf:aa:ea:9b:59:eb:2f:66:7c:
4e:ba:49:22:66:55:39:51:22:8a:6a:3a:f2:ed:40:
8e:31:c1:96:ef:ba:0e:05:4e:5d:9a:11:75:ec:03:
e1:15:31:0b:e6:c2:88:b5:21:cd:0a:64:bc:03:f8:
bb:f0:77:04:7e:fc:04:34:55:6b:03:3b:e0:9f:fd:
7d:0f:06:d2:02:92:ab:8a:b3:6e:c0:a6:bd:58:65:
9a:d1:bd:38:c7:ef:84:71:c1:65:ce:91:50:cb:46:
6e:fa:b8:93:a5:c0:2a:c5:1a:3b:fa:13:ae:f6:84:
1b:ef:ed:4d:ec:80:21:1b:ae:bb:eb:32:81:44:5e:
14:42:b1:af:41:e0:c3:df:a9:c4:e9:3c:77:f5:6b:
bb:96:56:b1:36:96:a2:5d:8f:5c:36:8e:34:bb:36:
dc:ec:a2:03:6c:4e:19:b5:65:0a:9c:af:f2:98:3a:
6d:95:6b:4e:83:e1:1f:20:f6:23:d6:c2:f6:e9:ee:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:93:CF:DD:6F:01:13:3F:E6:B1:6C:2F:3E:3B:3F:C2:1E:29:88
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2d:fe:2d:46:dd:e2:00:bc:dc:c7:d1:b6:50:a1:74:85:5e:
09:31:e7:a5:df:d6:09:55:c2:c6:5d:f4:14:1b:9e:9a:c9:5c:
7e:e1:a0:9a:13:6e:82:df:8f:79:a1:e5:eb:e2:3f:25:3a:f6:
13:f9:d8:02:1b:84:c2:55:07:ad:4c:89:78:f1:83:2e:aa:bc:
4b:b3:04:5f:97:fc:b7:e7:64:23:c6:7e:ea:3c:1c:fd:f5:99:
90:b4:e7:71:23:3e:5a:f9:d3:d4:f4:dd:4f:b4:44:bb:99:09:
8f:82:a7:6a:9b:76:28:94:ef:7a:41:53:75:50:a1:9f:77:a9:
77:d9:a4:d1:ed:09:21:aa:f3:23:f4:09:d2:f9:d7:db:48:c9:
7b:43:e8:64:df:ff:f9:02:d8:23:e5:50:5d:e9:dc:69:e5:9b:
8d:88:92:69:7d:df:2b:36:d3:73:eb:a2:3f:9e:7a:14:c6:18:
e0:95:4a:6f:d1:25:d9:30:3c:a6:46:5e:62:8f:d9:f1:bf:fe:
89:6a:0f:12:98:74:55:af:ee:5b:45:f9:5b:47:73:98:d3:03:
fd:f9:7a:c1:8c:8e:4b:e6:83:77:ab:f7:4b:60:96:67:e2:a8:
98:5c:9e:97:1d:58:f3:a5:fc:4d:9d:87:bf:16:84:e7:2b:59:
97:2e:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:34 2026 by rpki-client