Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: IeY2FhotCAM/heG3srRGBxjnf+Dzdqw4jswLbMTejWs=
Subject key identifier: 25:AF:E9:EA:04:93:F9:07:5F:94:18:5F:14:C0:26:0B:15:C1:49:48
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 01A187517F824A3C5FB9A8E95986007E5CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 0285
Signing time: Thu 29 Oct 2026 11:00:27 +0000
Manifest this update: Thu 29 Oct 2026 11:00:27 +0000
Manifest next update: Fri 30 Oct 2026 11:00:27 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: YN2+7gzZ7AdpK6wYdKezF095RNOaYzSz2P1CacGgxL8=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:7f:82:4a:3c:5f:b9:a8:e9:59:86:00:7e:5c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Oct 29 11:00:27 2026 GMT
Not After : Oct 30 11:00:27 2026 GMT
Subject: CN=25afe9ea0493f9075f94185f14c0260b15c14948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:76:77:3e:b0:51:b0:ec:57:eb:ea:b7:84:
a3:20:fb:0a:e4:c6:69:99:38:af:29:b0:10:36:0c:
22:27:a3:91:0d:8c:52:f9:79:00:75:79:92:24:1d:
4d:ac:56:bb:54:f1:fe:77:fb:c1:a4:f7:79:76:44:
dc:f7:3a:d9:de:93:74:39:ef:0e:66:b8:b1:b4:b4:
64:08:19:40:34:82:07:eb:a0:d3:2e:d7:40:5e:22:
96:48:18:ed:30:77:92:6c:ea:4f:e7:9c:e5:7a:d2:
23:79:d6:13:24:b7:99:17:c2:99:c0:7d:3f:f3:43:
6e:8a:5b:10:8d:41:3e:d7:6a:c4:fe:54:84:b4:ac:
e1:ac:52:63:73:0c:bd:b1:4b:50:9c:3b:8b:11:ec:
a0:c4:71:5a:7c:0d:ab:97:04:ac:f6:56:72:53:80:
f1:45:74:e9:4e:00:14:df:59:1b:c8:22:3a:9d:21:
1e:b1:ca:c8:52:92:bf:3a:40:a8:a8:a6:b0:b2:01:
09:72:6b:2c:7e:d1:e6:fa:92:dc:e8:c0:5c:47:fe:
42:49:9a:39:9d:26:b8:01:db:fd:37:5a:0f:a6:7b:
d1:5e:ad:6a:a9:01:ef:c9:cb:63:b2:5d:20:95:3e:
45:ea:0f:c4:f2:88:30:b7:3d:c6:8f:8f:b2:88:ed:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:E9:EA:04:93:F9:07:5F:94:18:5F:14:C0:26:0B:15:C1:49:48
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:d9:d7:69:7c:67:05:2f:5a:17:ab:73:ed:70:67:e4:93:
af:15:a3:02:fc:40:87:f1:8c:1b:27:57:0c:35:cc:97:3a:ab:
9f:df:46:89:0a:dc:12:c3:f6:4c:b9:01:db:c0:77:2a:5c:b3:
5a:c8:84:8e:6a:59:74:06:f6:ca:59:1d:33:a1:58:f6:a2:f6:
ad:06:7b:19:10:e6:e0:ba:ec:cc:eb:e7:41:c5:d5:ff:0f:cf:
3e:00:c9:b8:a0:10:00:6f:c9:4e:9d:d2:5d:eb:85:4e:87:0a:
bd:11:d6:0f:5d:e3:39:a7:fe:fd:23:78:a7:74:4a:a8:e4:dc:
2d:23:e5:99:48:7e:84:f3:b3:28:a4:41:8e:3d:a5:eb:87:ad:
42:98:6c:05:ef:a9:a8:27:d4:16:56:2c:d6:82:cb:03:60:69:
b9:c5:c2:0e:07:3b:fa:62:b1:c3:f8:17:0a:de:c4:ab:a6:bd:
e7:51:84:10:3e:a5:4c:4e:ed:45:6f:9b:e9:f4:8f:eb:7a:ad:
b0:6f:2c:14:38:b7:ab:f6:0c:7d:5a:fb:46:30:89:e8:ee:86:
29:91:55:e1:19:08:cd:15:24:d9:86:e3:c1:d8:d5:51:c2:94:
39:e6:2c:8c:6c:85:0e:c7:d7:3f:6f:cc:6f:a5:7e:6c:9e:51:
78:16:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:25 2026 by rpki-client