Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: QkiOeoqlCoP8IG97FaLrt59A6FmkjmQhWfnfaEcOubU=
Subject key identifier: 8D:BD:B8:A1:DE:C3:59:E4:AF:43:64:3E:08:4F:BD:A1:CF:70:A5:7A
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 019DCF3E2992DAFD6A34C347B9F4D7EB03B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 98
Signing time: Mon 27 Apr 2026 14:00:50 +0000
Manifest this update: Mon 27 Apr 2026 14:00:50 +0000
Manifest next update: Tue 28 Apr 2026 14:00:50 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: h/QVpzLJhx73B5ykG+8a43o3XkMZbQXRQ1siiao4K24=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:29:92:da:fd:6a:34:c3:47:b9:f4:d7:eb:03:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Apr 27 14:00:50 2026 GMT
Not After : Apr 28 14:00:50 2026 GMT
Subject: CN=8dbdb8a1dec359e4af43643e084fbda1cf70a57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:af:81:ad:9c:c5:d3:47:75:1d:fa:6f:e3:
97:bf:73:fd:76:65:37:85:fc:f4:0f:b8:32:ee:d7:
44:77:b0:de:2f:cd:cb:0b:6e:29:e9:be:cf:c2:20:
38:14:99:67:26:fb:50:bc:bb:12:93:ec:59:83:69:
19:2a:c8:1c:72:3f:e7:fc:fe:b7:75:0e:d5:cc:69:
4f:05:c5:1d:ce:a3:ac:b8:f3:7a:bc:d8:d7:3c:f0:
5c:cc:d5:55:17:d0:d2:9e:bd:92:aa:bb:20:63:15:
95:d3:61:99:9a:14:fe:2c:2c:e0:be:bd:ab:39:10:
b2:db:8c:d2:a8:64:c7:52:af:ce:a6:6b:bf:23:8b:
c3:fd:58:b9:c0:40:3d:21:6a:d6:ee:5c:57:4c:78:
45:8f:0a:7a:1b:1c:bd:6a:2c:a7:6c:97:66:aa:4c:
f3:8f:c1:c3:6e:cd:d9:25:cc:43:b6:e8:25:ca:c5:
84:45:3f:0a:b1:ff:ba:f3:b5:c9:5e:4c:85:41:09:
a1:85:25:e5:21:80:57:a1:ea:d5:16:a0:4d:46:51:
2a:88:db:3d:3e:07:1c:50:23:47:2c:4a:62:b1:a1:
1a:aa:70:04:97:8b:f2:f7:7d:20:1b:39:20:24:39:
cb:00:50:cb:59:5c:02:77:2a:ab:26:d9:24:e6:54:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:B8:A1:DE:C3:59:E4:AF:43:64:3E:08:4F:BD:A1:CF:70:A5:7A
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c0:12:39:bc:57:9e:bf:38:00:89:95:72:bf:17:ab:dd:19:
4c:1b:79:50:88:9d:e4:bc:dc:40:4e:ef:81:26:ea:c9:8c:11:
7a:72:89:ed:56:52:92:1d:03:97:75:b7:79:13:92:db:c4:8b:
28:68:21:39:1a:d2:1e:10:ed:48:5d:e5:ec:de:ca:0b:bd:f6:
83:4c:0e:ad:f2:09:16:6e:2e:46:ae:38:77:e8:a5:bf:4f:2c:
43:23:d5:44:ba:a8:8b:7b:12:be:09:40:ca:6b:a3:0a:78:53:
b6:90:97:e0:6f:c8:af:58:e4:b8:36:9a:15:43:ef:ae:d6:1b:
d2:0c:61:0c:79:d7:65:d8:75:ca:fd:f2:17:a1:5b:f3:3c:e3:
ff:2a:31:bd:06:6d:8d:f6:cc:f5:1a:30:bc:e9:8b:a2:04:e8:
d1:ec:01:f5:a3:21:4a:1d:30:b1:27:c5:5c:e4:ec:0b:ce:de:
3e:68:92:e9:37:78:b2:99:b0:cb:6b:20:53:cb:c5:c3:85:6b:
99:0f:ba:84:65:64:e5:ee:60:a6:f5:19:e2:38:94:10:07:f9:
87:5b:3e:c7:11:48:10:a1:71:4b:ee:27:b8:bb:eb:5b:8e:86:
b2:6c:bd:e9:6b:48:d3:8f:e8:64:92:9f:74:62:0b:27:c5:ed:
eb:7c:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:45 2026 by rpki-client