Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: g2VwcVQORmZvbqdYUYrIiSgi4xQFOlb3EpGUfdohGvA=
Subject key identifier: 12:FA:B3:98:B9:F6:57:5C:8D:DC:AB:44:CE:E2:2A:54:6F:68:AA:9D
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 019D97E210574D4936D3F9BAAB9ACA752E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0FA3
Signing time: Thu 16 Apr 2026 20:01:08 +0000
Manifest this update: Thu 16 Apr 2026 20:01:08 +0000
Manifest next update: Fri 17 Apr 2026 20:01:08 +0000
Files and hashes: 1: RzkStUYUjVQC6LTgMo4mZ3HqeCE.roa (hash: wOjCGMxhGea0Q6g7iJZGjMDjFNv2EEhIT9SC/wyAcEg=)
2: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: 7KsnI/4eBWYPayxLHIDsZbDde0fLfxgT2f7//qJitGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:10:57:4d:49:36:d3:f9:ba:ab:9a:ca:75:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Apr 16 20:01:08 2026 GMT
Not After : Apr 17 20:01:08 2026 GMT
Subject: CN=12fab398b9f6575c8ddcab44cee22a546f68aa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:b2:0f:ef:26:ac:00:94:36:c0:89:01:9c:
c4:26:5e:75:5f:39:b0:1f:a8:7c:cb:70:5a:0b:78:
eb:aa:72:fd:c2:38:61:3f:27:fa:82:48:c3:f1:8a:
94:78:1d:d1:54:ab:19:6e:e6:88:a9:f3:90:8c:0e:
9c:76:04:b3:ba:be:4c:9e:76:ab:f7:d0:ed:cb:dc:
a1:74:2f:f5:8d:49:06:dc:87:47:2a:9d:dc:b0:c3:
71:8b:d3:70:e8:1d:f2:0f:9c:09:dd:98:e4:d7:03:
99:4e:71:04:8e:c1:4c:0f:71:fc:82:e7:3a:be:55:
6c:89:df:50:ec:48:60:c3:b4:11:12:3a:04:4c:ab:
19:bc:87:ad:c0:60:89:a9:35:47:7d:55:fe:51:b2:
4e:ab:1d:75:9e:87:1f:fc:db:7e:e0:cb:e3:99:29:
5b:87:04:e9:20:82:92:56:1e:3a:a5:61:cb:e9:6f:
8c:68:08:27:ff:db:b4:e8:1b:de:e8:5d:80:f4:9a:
17:31:8e:f5:e9:b8:ff:0d:e1:ad:3a:61:19:7c:6e:
35:63:3e:e7:0d:28:a3:7d:ba:d6:93:b1:5f:2f:1e:
f7:42:a4:94:c0:d4:7d:24:ab:d4:ef:1a:9f:2e:ab:
db:0c:a8:f0:47:92:3c:ca:6b:c2:93:82:6c:7b:87:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:B3:98:B9:F6:57:5C:8D:DC:AB:44:CE:E2:2A:54:6F:68:AA:9D
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:31:7e:5d:40:e9:7e:4c:34:74:21:a0:90:38:6b:7e:e4:e3:
4e:07:54:34:9b:7c:41:71:dc:69:d1:78:76:f0:4e:cf:3e:bf:
2d:4d:cc:87:9b:83:b2:7e:51:19:ac:e3:2b:c8:48:43:33:36:
79:5c:5f:68:eb:de:d2:e5:79:79:ea:4b:e2:fe:dc:c2:09:1d:
80:87:59:5e:cb:e8:cd:da:fd:01:e1:86:82:4e:c3:ca:a9:84:
ef:5c:1d:2f:10:1e:98:c7:68:4b:cc:f6:d6:73:86:c0:8d:1a:
41:fa:4c:0b:9e:50:70:a4:27:20:2a:2c:87:ca:a4:1d:e0:44:
73:ba:8e:79:d3:c3:4a:74:a2:2c:a9:19:4f:7e:50:ab:58:13:
ae:3c:5d:82:04:e4:5e:55:1b:16:1d:da:5f:f4:ca:17:bb:5e:
3c:0b:9d:e2:ba:4b:d1:54:48:ad:4f:6f:a8:42:d3:1e:f0:c1:
6a:5c:e8:27:fe:6c:90:82:0c:07:4d:2c:b4:13:57:24:89:b9:
4c:4d:72:cf:6b:13:ad:11:4e:20:00:58:4d:09:08:a6:a3:8d:
45:64:4c:ec:2e:e3:d8:5b:46:f2:6a:57:35:55:e4:dc:d0:ff:
eb:7e:fe:88:08:3e:40:6e:87:27:5b:82:83:24:b8:9a:e1:6f:
8e:bd:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:49 2026 by rpki-client