Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: EmVTFL9o9XBEnpblfWv34YivrapoBAvPNj+ALJcXw+Y=
Subject key identifier: F4:E3:30:65:1E:9B:CC:AC:48:54:66:DC:FD:23:AD:2E:19:35:3A:C9
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 019FA0A878E51BA134FD26031DF53EDA9FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 0189
Signing time: Sun 26 Jul 2026 23:00:23 +0000
Manifest this update: Sun 26 Jul 2026 23:00:23 +0000
Manifest next update: Mon 27 Jul 2026 23:00:23 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: D2qpt+ZlGY+eQGqWQg1usiFkGRmurNCVZRj3KL5a6ds=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:78:e5:1b:a1:34:fd:26:03:1d:f5:3e:da:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Jul 26 23:00:23 2026 GMT
Not After : Jul 27 23:00:23 2026 GMT
Subject: CN=f4e330651e9bccac485466dcfd23ad2e19353ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:2a:74:c3:aa:e3:06:27:07:71:16:21:00:
31:8b:ea:1f:80:ad:51:4e:b6:d0:49:ba:85:10:74:
f6:f1:e3:14:2f:2d:8c:1e:8e:5f:2e:45:b5:9e:0e:
a0:17:fc:a2:85:6a:ef:b7:f7:b8:ea:40:12:4f:cc:
61:01:8a:b0:35:44:03:a3:40:2a:e6:06:13:e2:ec:
d0:f1:8e:c9:24:d4:7d:50:2f:8e:0f:20:ab:88:59:
91:b1:11:15:ec:70:7b:84:ee:cc:26:a8:48:d2:f1:
4e:a8:35:d5:d2:c9:76:c7:f3:91:f9:2d:63:55:f2:
2f:0c:fd:36:45:55:f4:5e:da:31:8c:7b:88:4e:88:
e4:bb:ff:ab:7b:0f:80:97:d9:98:2d:05:d6:25:e8:
42:a1:97:34:58:3f:00:6a:f8:59:12:24:62:39:7a:
3b:93:9e:f1:7d:02:32:aa:ce:c2:56:f9:88:92:e0:
c9:d4:bf:b6:bc:75:c4:32:dd:16:a8:9c:05:89:2c:
31:17:cf:c5:05:b2:3e:4c:6f:9f:62:f4:55:22:4b:
d6:15:4b:cc:46:23:94:67:40:01:39:b7:39:d9:8e:
b4:36:ab:3b:c2:5e:25:28:32:72:6b:ec:01:ad:99:
b3:2d:17:91:af:9a:32:a4:95:67:53:54:eb:75:14:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:30:65:1E:9B:CC:AC:48:54:66:DC:FD:23:AD:2E:19:35:3A:C9
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:c0:76:06:b2:b4:82:fc:7b:87:2e:35:ac:b4:5c:be:01:
cd:cb:67:a5:36:fb:54:1b:8d:02:ea:42:e2:33:1c:1e:95:ef:
1a:3e:91:dc:2d:18:b7:65:6b:f2:a0:02:31:5d:d6:03:3a:68:
de:8a:9c:1b:93:82:e8:4b:b3:d7:56:43:d0:dd:ff:a2:ff:9c:
6a:2f:a2:51:4d:ff:65:b3:05:96:6d:fc:7a:ac:e7:74:8c:fa:
c7:b0:92:09:fc:df:d9:96:6d:3f:95:95:3f:d1:9d:25:89:fa:
3d:84:41:1b:90:c7:7c:26:71:ec:62:f6:14:bf:c6:b2:01:65:
cc:70:28:25:f6:3d:3e:a6:49:f0:bd:c2:17:e0:0e:c8:8b:f7:
c0:aa:a4:51:e3:35:70:3b:bb:45:f5:16:05:45:0f:61:70:ec:
2e:ad:67:ba:86:39:55:af:87:3a:c8:6a:0c:80:54:aa:38:98:
66:8f:d9:c8:12:19:d8:54:18:22:fb:6f:00:e1:fd:12:15:45:
4a:d2:f0:1f:7f:b0:80:34:cd:f1:bd:34:a9:ff:2d:03:9a:c7:
ab:f4:85:b2:e6:a7:3b:cc:dd:c6:69:90:f9:b9:af:91:53:a2:
02:81:1f:90:9d:95:e8:80:c3:1a:87:21:7b:37:fa:dd:c1:05:
57:d1:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:41 2026 by rpki-client