Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
File: l8lOmcPZolKEsu228-qtp8Thjzs.mft (raw, json)
Hash identifier: uJfK3JX+ojqmlF1qtANjeBINtgJAelUBhuPeNmOcBgs=
Subject key identifier: D9:A0:F5:FE:BF:FE:B5:5F:98:C7:11:82:5B:CE:10:63:AB:41:E6:FB
Authority key identifier: 97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
Certificate issuer: /CN=97c94e99c3d9a25284b2edb6f3eaada7c4e18f3b
Certificate serial: 01A1A5CA4A842C31ED804A3A5DD33DC7ED00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
Manifest number: 91
Signing time: Wed 04 Nov 2026 09:01:00 +0000
Manifest this update: Wed 04 Nov 2026 09:01:00 +0000
Manifest next update: Thu 05 Nov 2026 09:01:00 +0000
Files and hashes: 1: YluA6nn9_ZeoHJNXusDVsmof_vQ.roa (hash: FecFRAlHvWvToi6q52jEFelhzQj84gV3wBIToo7AuU0=)
2: l8lOmcPZolKEsu228-qtp8Thjzs.crl (hash: 1jsXWh29dMn0tN5NWxn3kSLX8AFBIeR6YcfJoMyS0EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:4a:84:2c:31:ed:80:4a:3a:5d:d3:3d:c7:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c94e99c3d9a25284b2edb6f3eaada7c4e18f3b
Validity
Not Before: Nov 4 09:01:00 2026 GMT
Not After : Nov 5 09:01:00 2026 GMT
Subject: CN=d9a0f5febffeb55f98c711825bce1063ab41e6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:66:a6:8f:49:1e:b7:88:85:b7:a5:d1:da:
64:ae:6d:8d:29:5f:e2:f9:af:77:23:d2:a3:63:d8:
a8:35:18:d4:db:81:90:95:98:a6:70:ea:5a:44:00:
3e:39:99:ae:9b:a4:e3:68:b6:a4:85:21:f3:c7:41:
3b:54:55:8e:d9:db:50:88:52:76:84:72:6a:6e:4f:
65:ac:bc:3a:44:a1:92:d3:d9:4e:a8:2f:58:3f:00:
63:d8:19:cc:57:29:53:4b:3c:57:fa:2b:e8:fa:fe:
f5:e8:ba:a4:81:d4:3d:9f:09:63:6b:b0:bb:fd:75:
9e:8f:30:fd:a7:c6:50:b6:58:4d:28:af:12:45:64:
86:21:f2:17:1b:bd:d1:fc:5f:70:c6:6a:6f:0c:bb:
59:23:5e:7e:be:e8:cc:13:6b:2c:7f:28:9d:ce:c0:
0d:9f:55:c2:92:d4:9a:87:19:be:b6:0e:42:f7:12:
e3:73:28:16:3f:a3:c2:5f:f9:db:55:5e:92:ef:a4:
0e:db:cb:8d:7f:ee:70:a3:ad:bf:c6:5d:85:ca:ae:
cc:7d:79:34:5a:e1:57:89:3a:bc:bd:fd:8d:db:75:
ef:9c:ee:b7:cf:74:ef:cb:a7:89:a3:76:34:ff:df:
a9:af:00:32:11:29:b8:36:ea:4a:08:ea:03:82:a2:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:F5:FE:BF:FE:B5:5F:98:C7:11:82:5B:CE:10:63:AB:41:E6:FB
X509v3 Authority Key Identifier:
keyid:97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a1:35:f6:20:1e:bd:59:05:da:b7:fd:73:c3:16:aa:c6:ea:
d6:de:c6:a1:98:d3:43:7d:1a:ec:79:3e:52:c0:67:eb:e9:3d:
ab:08:b3:e8:14:9e:25:2c:da:3a:5f:ee:5b:09:1f:dc:ae:ba:
34:f9:95:fc:22:21:be:06:d1:8e:c4:4d:7e:d9:8a:a2:10:bd:
48:af:60:c4:ad:da:ad:47:0a:0f:57:fd:ce:9d:24:a3:d6:67:
a3:51:1e:7f:88:30:b7:34:1c:1a:f4:4d:83:8e:18:fc:c4:4a:
17:3a:48:53:0c:c4:03:d1:b9:e6:31:96:18:8a:4b:75:5b:05:
a5:68:fe:ea:f7:a2:49:6e:40:3b:8f:d6:1c:96:91:85:96:9c:
16:d3:0d:b6:4e:e3:40:68:6a:44:a3:b3:e9:52:61:bf:45:2a:
a3:31:67:ed:75:2d:da:ed:15:08:5f:a9:ba:95:c3:3b:ec:a3:
52:ec:dc:c0:ad:f6:6b:c5:b1:42:c0:93:4e:5e:d6:e9:cb:80:
1e:29:9c:b7:69:bf:da:79:4b:14:b2:5f:e7:af:83:b1:11:c2:
76:ba:50:b8:0d:e6:12:ac:2c:4c:41:79:f5:33:9f:79:99:29:
27:7a:4b:e4:e4:46:e7:a2:9d:39:bf:b4:b0:d4:b0:85:cb:cb:
0e:ae:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:12 2026 by rpki-client