Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: 3PWfVOGazArFHAx72zJ0bPB4g5fGKmi22zU9Usy3oAM=
Subject key identifier: 99:1B:2F:67:80:8E:06:DD:5F:49:AD:1E:07:8B:27:24:55:F3:47:84
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A08AC36989882F0F7305EF152D15D3172B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 120C
Signing time: Thu 10 Sep 2026 10:00:57 +0000
Manifest this update: Thu 10 Sep 2026 10:00:57 +0000
Manifest next update: Fri 11 Sep 2026 10:00:57 +0000
Files and hashes: 1: 51Bjfc34BpXeMkYaQNKSHvEnwDQ.roa (hash: FawcCE0rNo08r8oSxUQizRXz/FNXVyPwChX3x3n8ZGU=)
2: VOjaP0vPiACD0uS-bICx9WGuZeI.roa (hash: 9j4hZQlNE98hodvZ6eidQ8K7TvDH7tzFrNjO5UbEpFU=)
3: YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa (hash: Xyc9Bn1xcz5Vwdiy76RPK2cwcVQdXnxhuij3Z9jTrnw=)
4: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: Xw6LY+8jBXqlczbpWcQX+ecR2P+qd3af8KGrRGVVmcg=)
5: e4hMILxKJxI4HPgobdoJA7_qzew.roa (hash: hNFizLc3kMocMX6MQDv3HdR9iBYMfMByyGD/mo8TfJo=)
6: jFpXUQdW_8WooLIc_r8NHAOFq5I.roa (hash: QNhPW7mwEoqlv0FVLXTOe8Hyk9HQZ4btsFGqykx+UXs=)
7: mp-VpswUBjza82Vpf1GOWZIhrlQ.roa (hash: ae9rTRwpHTYdLNVU2WmOKxDNxm6rN9lNU5zvZm8mMAI=)
8: wsrq6fWnAqeku8A_GZwiLZf-5K4.roa (hash: J+LxxVoqWb4DhzDjDoPAH244InAa96sW5M272Q6W0+c=)
9: ztSs7zmKYYrvh6ddsY39F_uOKEk.roa (hash: /k/b9/O5jpdDOIMSaJIPt2QCSI1+oOFC4DFoJBolsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:69:89:88:2f:0f:73:05:ef:15:2d:15:d3:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Sep 10 10:00:57 2026 GMT
Not After : Sep 11 10:00:57 2026 GMT
Subject: CN=991b2f67808e06dd5f49ad1e078b272455f34784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:37:f3:64:79:44:99:9c:b8:da:1d:e5:56:
89:a0:28:ba:f2:f3:53:fb:59:e2:55:35:94:e3:64:
28:7a:6d:dc:e5:d9:80:0c:2b:c7:4e:85:0c:6c:fa:
73:49:1b:bf:c3:72:50:78:55:ee:9a:2c:88:a8:99:
f2:d8:ef:c1:07:06:5d:ad:7a:75:a2:d1:de:99:47:
aa:22:40:32:f3:6d:49:a2:85:0c:4f:9d:d0:ba:4b:
9c:fa:02:bd:c5:14:24:d8:4e:b1:9c:b8:e9:36:bc:
28:6b:c1:26:5e:d2:a9:67:d5:60:85:19:2f:85:4c:
d2:15:1c:8b:21:b0:b6:30:0f:af:f9:81:23:14:c7:
e0:7e:16:93:98:4a:4f:dd:1b:1a:b7:c7:7e:4e:dd:
bb:1b:b7:6b:83:4a:a5:2f:7b:90:ae:a6:0e:d3:0e:
79:9d:f2:38:94:2f:db:0e:c0:a1:48:e7:64:07:c9:
d7:fc:1b:2b:75:0c:7b:d3:f8:dd:b7:69:ea:2c:9f:
a9:1f:94:e7:f0:ea:99:39:38:c2:e3:bf:0b:e4:f3:
ce:9e:2b:6c:21:61:34:3e:b0:c4:72:54:c2:dc:a3:
03:d9:3c:07:79:cf:36:c1:6b:cf:0e:53:d9:bf:41:
14:8b:6f:1f:ed:d6:a5:a1:68:fe:f3:73:91:6f:da:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:2F:67:80:8E:06:DD:5F:49:AD:1E:07:8B:27:24:55:F3:47:84
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:8d:78:3b:71:35:82:8c:71:05:04:b3:20:84:eb:ae:f2:
02:bc:2a:9e:03:93:0f:03:83:0d:28:48:52:81:6e:78:b7:12:
43:fc:12:23:5a:c5:25:8f:19:d4:a2:e4:11:fb:6c:27:df:3e:
96:fa:09:41:89:b0:4d:38:55:84:d5:ff:f4:b9:8b:b3:f5:1c:
2a:d5:ca:5e:ad:06:9c:b1:5f:da:cf:19:67:4e:38:82:10:11:
a3:f1:dc:41:04:a2:db:18:46:69:31:b3:9d:8a:0b:f8:c7:58:
d8:7f:16:eb:6e:60:5d:a7:5a:bc:5d:ff:6a:28:e9:76:f5:c4:
58:23:d6:fb:dc:76:97:38:c8:83:1c:29:30:63:43:51:e9:22:
b6:04:e2:1d:15:2e:e9:6d:76:dc:a8:92:9d:7c:4a:06:a4:1e:
4a:fe:bc:c9:7a:81:66:72:11:1d:08:6f:b2:64:0e:64:e9:70:
d3:a7:28:1a:30:5b:9a:2a:a6:af:d5:c5:51:ca:da:35:8e:d9:
de:3c:b6:29:a3:03:79:63:dc:40:0a:75:a3:13:f5:74:70:b4:
3c:1d:9a:17:f4:eb:91:99:ac:3a:50:9b:e9:12:51:b0:a7:15:
17:70:46:ca:5c:70:e5:3d:24:17:f0:c2:86:0d:4a:29:af:09:
0f:f5:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:50:23 2026 by rpki-client