Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: D9F835ZDWSsnwAKptqyt+kV535yUllM1U/gkq/WvLGA=
Subject key identifier: 22:24:81:0B:F4:DF:7A:0E:22:36:9B:41:95:70:16:22:28:6F:72:27
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 019D37F7AB7DD339B87E4D0B441C42CD41B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0DE9
Signing time: Sun 29 Mar 2026 05:01:11 +0000
Manifest this update: Sun 29 Mar 2026 05:01:11 +0000
Manifest next update: Mon 30 Mar 2026 05:01:11 +0000
Files and hashes: 1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: P2MaE6HGuL5CFBbvrTpGRQg1PWU34qHjWMOjar3zgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:ab:7d:d3:39:b8:7e:4d:0b:44:1c:42:cd:41:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Mar 29 05:01:11 2026 GMT
Not After : Mar 30 05:01:11 2026 GMT
Subject: CN=2224810bf4df7a0e22369b4195701622286f7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:8f:c5:a6:ed:d0:7f:c2:15:ee:a8:00:85:
30:b6:dc:41:49:89:ed:a8:bb:37:d6:d2:e5:d1:ba:
48:10:c6:4e:c7:ad:b1:51:cd:19:58:d0:e4:49:1e:
f3:e3:c8:92:47:05:3b:b7:0a:e7:e9:6f:60:e5:08:
ad:bf:eb:02:f8:5d:12:01:b6:5c:40:fb:1a:f1:f0:
b3:16:4c:95:9d:72:24:62:db:f3:13:cb:4d:db:c1:
8c:e9:13:91:3a:b9:39:f5:72:df:50:d7:24:86:5e:
0e:a9:bd:d0:a4:a1:14:b7:43:1e:60:6e:17:1c:c4:
10:5b:1a:7b:9c:1d:c4:ab:34:b5:8d:90:87:bc:6c:
db:85:eb:8a:cd:b5:19:97:12:4e:32:f6:4d:17:e1:
0e:4f:55:f2:df:ec:fe:cb:93:3d:d4:63:d2:3d:8e:
e9:56:fe:24:29:cf:f7:1c:c8:a6:ab:9f:bc:4a:1b:
f8:19:72:15:0f:4f:f1:a6:c4:39:3a:3a:a1:24:05:
e6:99:e9:30:f3:d6:ea:39:d3:37:b6:9c:21:93:56:
d1:65:27:17:33:7a:f7:e7:7b:c1:2b:d4:bd:b6:8c:
87:84:62:f1:4b:06:b3:08:6d:55:46:03:31:6d:38:
60:74:76:4d:5b:fe:b8:47:28:b6:22:76:a5:04:87:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:24:81:0B:F4:DF:7A:0E:22:36:9B:41:95:70:16:22:28:6F:72:27
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:b6:4d:cb:b5:ed:0a:33:ad:84:be:e8:97:ba:5c:d0:0a:
f5:86:fa:ad:1d:0e:10:a4:2b:84:a5:97:03:86:1e:6f:1d:48:
6a:78:a6:d9:7c:b0:56:ab:da:dc:cf:76:f2:dd:f2:5e:1d:98:
8e:9d:96:74:84:0a:eb:9c:37:77:39:11:ef:14:c3:47:ae:b2:
49:dd:e3:25:a1:23:07:4e:54:c4:22:93:34:46:9c:6a:6a:94:
28:da:59:aa:69:3e:63:8f:b5:0e:73:5a:86:07:59:c4:13:07:
5c:ac:b9:5a:06:da:41:36:4f:5c:e9:4e:0e:84:d4:ef:c0:5b:
3f:45:c6:75:34:53:70:79:48:07:cc:90:db:41:08:58:10:07:
f9:a9:e7:b0:e6:ac:a6:3c:52:13:32:a4:4f:2c:3b:af:68:63:
0c:25:47:1a:89:ac:fe:81:46:bb:9e:58:2c:e2:f7:80:cb:b2:
7a:c8:49:c9:94:d2:97:62:bf:a3:33:7c:12:e0:3c:f3:f2:eb:
6b:dc:9d:94:dc:a5:be:76:5b:1b:a7:5e:6d:17:05:02:b9:d3:
df:6a:d1:a3:65:ef:ec:8e:aa:24:d9:f5:07:97:b0:93:56:7b:
1e:cd:ec:d7:f3:1e:ff:45:4b:b1:b4:64:f4:04:71:91:69:13:
da:03:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:43 2026 by rpki-client