Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: TphVTul+0X/EPejGU67Bj2NGiiLX0zkKiLDqMJ3u0eo=
Subject key identifier: 08:DD:60:12:40:56:24:55:27:D9:4E:C8:C5:B3:19:1E:F9:E4:3E:E0
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 01A1893FE97F4FF62A6408B3EE061D152756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 0286
Signing time: Thu 29 Oct 2026 20:00:29 +0000
Manifest this update: Thu 29 Oct 2026 20:00:29 +0000
Manifest next update: Fri 30 Oct 2026 20:00:29 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: zUjyU0/F86RouetNU51bj4nhrt0PL+skHrLHpXXKE08=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:e9:7f:4f:f6:2a:64:08:b3:ee:06:1d:15:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Oct 29 20:00:29 2026 GMT
Not After : Oct 30 20:00:29 2026 GMT
Subject: CN=08dd60124056245527d94ec8c5b3191ef9e43ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:bd:5a:eb:10:00:34:75:c1:68:23:44:53:
85:58:e9:1d:0d:d6:0f:89:ae:bd:1d:0b:9a:80:31:
32:db:13:05:b3:93:6b:99:b3:ac:9f:b6:f6:b0:07:
dd:48:a6:3e:53:ff:8d:df:39:8f:c4:29:2e:5c:8c:
5d:eb:60:45:db:63:38:45:d3:9a:af:02:77:41:1c:
77:2b:a3:8a:7e:2f:84:3b:c9:24:bf:15:83:6f:41:
50:03:6d:e1:1b:a6:b5:e5:8e:a1:39:49:db:12:54:
d4:db:1e:61:fc:f2:0b:27:06:d9:e5:c1:7b:8e:ed:
a6:4b:b3:90:a0:09:f0:66:b8:74:15:89:41:d1:85:
9d:ad:3a:0f:8f:40:1f:ec:3f:1b:ff:1e:36:29:be:
e2:c4:35:4a:a5:ff:1b:c8:53:d0:ac:10:22:89:e7:
bd:db:1d:fd:55:5f:18:87:f3:44:64:27:3e:8c:e1:
e6:81:22:f4:07:67:05:12:3f:be:0e:06:c8:70:95:
c7:73:a6:93:09:6f:18:d2:2d:61:a6:2c:1d:2e:5f:
b5:57:17:71:1c:6c:e3:0c:6c:f9:00:75:40:d8:dd:
f5:e3:49:02:ed:1a:76:97:41:13:98:d0:b7:0d:3b:
d6:7e:67:1f:76:be:8f:72:21:6c:73:e3:a0:3e:09:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:60:12:40:56:24:55:27:D9:4E:C8:C5:B3:19:1E:F9:E4:3E:E0
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:95:90:ed:9d:79:12:29:d0:8d:7b:3c:d7:81:fa:ab:de:87:
a2:b0:77:f3:9f:8e:34:71:b9:15:07:78:0f:2a:44:e4:16:10:
2e:86:69:e2:a3:c8:7e:70:12:c5:73:f9:57:47:58:4e:40:ac:
75:b6:4b:4e:49:76:58:47:8f:76:e7:ba:97:f8:74:fe:75:77:
69:a4:0d:60:ca:18:1a:ed:0e:9f:01:73:a5:61:98:6f:1d:81:
67:4a:6e:ce:d3:24:6a:00:e7:4e:81:fa:26:a8:ea:de:25:ed:
87:4a:88:df:5c:68:cf:64:e4:62:e9:52:7a:57:24:ef:4a:97:
7c:a2:d8:35:65:44:c9:27:83:17:f0:0e:46:cf:75:2d:41:5d:
4b:ae:d7:cb:f9:77:65:55:6c:d7:ac:40:f9:09:f6:60:7f:71:
1f:c7:1e:85:48:d6:74:ab:36:2a:14:d2:b0:86:65:c7:21:be:
12:46:97:31:da:d1:f8:07:7a:c0:24:3c:51:99:e4:02:f6:d2:
85:f3:f5:40:24:a1:00:ad:1d:b5:b6:18:63:6a:2c:70:4f:12:
60:20:5a:8d:1c:2d:cb:51:4d:46:b7:0b:73:f5:90:14:e8:f5:
fb:94:e6:3a:d1:3a:46:f9:7a:f5:7d:76:91:d3:09:99:ff:17:
ca:57:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:59 2026 by rpki-client