Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: VGNlYvjLvw1qsoeAdZ0lLZ02iOOyEFaG2cT4uVttPLY=
Subject key identifier: 4F:31:15:04:6C:12:EA:D1:62:D1:D8:19:68:BF:30:E4:82:AE:5E:65
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019E5712E91921C45B8E5C3209A79919E87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 11DA
Signing time: Sat 23 May 2026 23:01:57 +0000
Manifest this update: Sat 23 May 2026 23:01:57 +0000
Manifest next update: Sun 24 May 2026 23:01:57 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: LUPprXwU3jMLqeUV3MwsBhMbT9g/GCJ3Dmbr6LtoBQY=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:12:e9:19:21:c4:5b:8e:5c:32:09:a7:99:19:e8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: May 23 23:01:57 2026 GMT
Not After : May 24 23:01:57 2026 GMT
Subject: CN=4f3115046c12ead162d1d81968bf30e482ae5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:bf:2a:59:30:78:f7:1f:df:79:6a:57:af:
31:a3:e3:dd:a5:45:a8:a7:cd:21:6b:1a:32:48:17:
26:9b:f0:d7:9d:bd:a6:e7:37:c8:3f:57:51:ca:a4:
38:03:83:6f:18:af:22:69:c2:5d:5c:af:c6:c1:f2:
ed:98:d1:b0:9b:0f:df:c5:98:a7:0c:10:a2:00:61:
73:e9:ee:90:1d:c5:bc:6a:82:9b:a2:f6:a3:cb:31:
7b:98:15:c7:39:c0:02:a6:b0:d9:8d:79:ef:bc:47:
7e:8d:f7:03:bc:e2:a9:18:f7:d0:83:48:40:32:6e:
27:7b:12:1c:9f:f6:28:d2:41:1e:89:65:8c:31:5d:
99:c7:e7:64:38:a0:97:c5:57:28:81:ff:b7:1c:dd:
2d:c3:c3:d6:db:74:0f:20:e2:4a:0f:a9:73:5a:2a:
05:9b:cd:bb:2c:ee:7f:a7:f8:f0:0f:32:4d:1a:d4:
03:10:25:28:15:67:ef:f9:7f:0b:ef:c0:e4:55:2d:
92:d8:f6:1e:b7:aa:86:c4:ff:aa:6d:94:ce:2f:02:
3a:4c:29:aa:86:c2:22:ca:2d:0c:ac:a5:7d:dd:c9:
2f:20:ec:0f:e8:ee:8e:c1:74:64:69:3c:85:4a:f9:
1a:2b:0d:00:3b:5d:1b:5c:ec:cf:de:9d:27:0c:46:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:15:04:6C:12:EA:D1:62:D1:D8:19:68:BF:30:E4:82:AE:5E:65
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:c9:82:38:50:2f:c4:89:c8:76:d4:2c:db:af:ed:e1:2d:
da:42:f2:d6:90:2f:3d:ab:57:4f:71:7f:01:19:25:eb:8a:99:
da:bc:bc:21:58:c6:79:37:cb:ad:24:48:32:9c:bc:4e:d7:6d:
75:5d:b8:63:33:9b:d9:8c:44:fc:49:37:1e:f9:f9:de:80:76:
b9:df:ed:d3:4a:d4:32:1e:2b:79:ab:b0:76:83:b4:00:d3:d7:
22:23:9d:73:8b:07:e9:1b:cc:41:d3:9f:8a:c0:35:68:fe:e0:
85:ce:ab:05:8d:58:d7:8e:75:bd:d7:13:af:91:f7:c5:2e:03:
96:48:5c:0c:70:f3:70:8b:d4:6c:0b:08:51:63:10:89:49:3d:
31:e9:a3:96:80:ce:f1:4f:08:27:e5:03:1a:1a:df:78:dc:84:
52:c0:b8:58:ab:79:29:cc:e6:9b:1a:61:20:e1:33:01:2e:64:
2f:de:52:b3:13:f9:13:8e:ac:63:5b:d0:6c:d9:80:79:34:cd:
8d:03:d3:24:b6:29:78:31:e5:a5:96:02:d0:ba:ee:68:9f:94:
cc:20:a6:25:b0:98:2a:de:b9:49:de:95:1e:68:ad:62:45:4c:
59:dd:1c:25:00:d9:c8:11:16:bb:15:b0:6d:92:41:f7:7b:cf:
76:47:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:33 2026 by rpki-client