Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: aAOePE/PdndbugRIbl+B9KDgGGkwKp3kLlGCZC/5KJM=
Subject key identifier: 96:9D:BC:52:B0:25:5E:25:B8:5E:2B:92:EB:53:6F:A0:B6:E8:56:03
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 01A129FB1DDB78BCCE47B82ADD818FDE7A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0FF4
Signing time: Sun 11 Oct 2026 08:01:25 +0000
Manifest this update: Sun 11 Oct 2026 08:01:25 +0000
Manifest next update: Mon 12 Oct 2026 08:01:25 +0000
Files and hashes: 1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: yn7WzcSk6iThtp6fkIbg7bYBRD8ahWtkd12iVQWyb4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:1d:db:78:bc:ce:47:b8:2a:dd:81:8f:de:7a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Oct 11 08:01:25 2026 GMT
Not After : Oct 12 08:01:25 2026 GMT
Subject: CN=969dbc52b0255e25b85e2b92eb536fa0b6e85603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:49:ac:5f:39:08:d5:2d:fb:3e:7f:6a:fd:
e1:ce:ae:c5:0d:30:28:11:81:53:48:9a:13:4e:7a:
a3:09:be:cd:65:48:9c:d9:9f:eb:91:c7:ae:ed:e1:
6f:46:2e:00:6f:4a:db:e8:2f:1e:2d:78:d2:f4:f7:
2d:cd:45:93:54:d9:35:0e:8c:db:7d:0f:d8:54:6c:
42:71:34:8e:6c:d4:c8:6d:bd:c6:71:2f:2d:3d:0b:
59:ec:eb:16:c9:27:4d:70:f3:85:ce:84:3e:1e:8a:
cf:77:83:e8:87:3f:f6:0e:43:b1:51:3a:59:9b:3e:
e5:4c:63:2b:0c:ed:aa:ae:7b:cc:c7:d1:12:00:3f:
c8:3e:ed:f6:a8:45:21:92:37:bb:3d:f0:46:3d:69:
06:9f:52:b8:19:81:8b:d8:f8:d3:99:ba:54:bf:75:
c2:76:d0:a9:6f:9e:63:92:b2:b2:f6:32:bb:4d:3d:
ae:d6:a9:b0:31:cb:0b:ce:6a:be:ed:65:1c:22:fc:
b3:84:68:c2:1e:a0:66:a7:00:0b:1d:6f:fc:17:d2:
ab:18:39:e7:90:67:ce:d1:b7:4e:0d:d7:59:71:e0:
26:f8:af:6e:d1:25:14:18:e3:e9:c6:41:f5:a4:92:
12:6b:09:c6:4d:7d:78:03:52:8e:da:77:d9:6d:10:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:BC:52:B0:25:5E:25:B8:5E:2B:92:EB:53:6F:A0:B6:E8:56:03
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f7:bd:70:1f:8b:65:5d:02:09:5b:80:c0:29:7f:84:09:f8:
e3:79:33:f8:65:d3:a7:8f:90:dd:9f:93:ce:8d:a3:73:3a:61:
5a:8d:a0:e7:f7:2d:57:61:5b:77:ca:ab:66:57:1b:65:c3:29:
a2:d0:b0:39:31:10:b0:4a:06:97:90:ec:e7:4d:4f:68:6f:33:
a2:2f:50:a6:e4:5b:7f:2c:ca:8a:77:03:eb:0a:37:34:ff:ab:
a1:84:4d:18:56:7e:a5:5c:e6:3b:04:ea:7a:41:66:73:be:1e:
c3:f9:14:09:bb:f9:5f:9c:24:5f:ba:fc:9f:ca:71:1c:1f:03:
b2:14:8e:db:12:ca:02:4e:b5:07:9a:c5:40:65:9b:f0:97:2c:
05:ed:44:0d:1b:66:64:5f:9f:f8:d0:f1:ff:6e:92:cc:ed:d8:
ae:a7:08:f5:aa:49:3a:5d:47:f9:fe:11:78:fe:33:3d:9e:97:
b8:88:9c:67:03:67:6d:4f:73:6d:58:c6:f0:a0:b0:5e:37:fb:
7b:1e:7f:5f:fc:42:19:96:ea:e1:fe:45:d5:b9:13:9e:4c:ea:
37:78:5e:84:f5:65:4c:cf:43:79:8c:b8:e7:2c:95:7d:11:c9:
62:dc:89:3a:26:4d:23:1c:02:cd:21:4f:b1:13:c0:80:fb:f1:
ed:3c:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:02:46 2026 by rpki-client