Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: qrtvMlrwVw4rlhxxVK3uoDkuUbVxC5d8qPufQvVjW4Y=
Subject key identifier: DA:BD:99:15:59:31:8B:D4:10:1A:B6:1A:15:93:FB:60:E3:7C:ED:E6
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019D37523B06397ED2F7EFD62F28472434F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 1145
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: ziTCk8koU00lClaAdvE1VDThOKxmOuteplCD6DcFAaQ=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3b:06:39:7e:d2:f7:ef:d6:2f:28:47:24:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=dabd991559318bd4101ab61a1593fb60e37cede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:58:1c:42:6e:20:96:5a:b2:23:44:8a:7e:
be:66:08:88:7f:19:7a:4c:5a:94:f4:56:fe:00:57:
71:8d:3c:8d:ac:47:68:5c:2c:45:47:8a:1f:ce:76:
2d:cb:7a:a1:07:35:43:73:75:5f:11:6a:76:c1:bf:
bd:ce:67:38:b8:1d:f5:84:95:44:bc:f0:1f:e7:a7:
e6:2d:4e:0f:5e:a4:1b:57:aa:02:6d:08:04:51:4a:
6e:e1:88:0f:d4:ba:55:42:c9:bf:51:ea:f3:01:3e:
c2:e7:3b:5f:e2:8a:87:c2:67:1d:e8:71:41:ed:e3:
31:83:37:7a:c3:16:a6:b1:b3:10:c7:18:cd:a6:00:
7f:51:5c:31:44:45:3c:7a:40:1e:5b:c8:d4:b6:2a:
3c:55:96:09:7c:53:29:0a:09:85:2f:fe:50:1b:b7:
af:23:ea:9d:69:7d:e6:94:dd:b7:44:2c:bc:5a:21:
d9:91:c3:49:27:c2:82:59:7a:10:72:20:c3:33:a1:
eb:c0:20:90:dc:d9:97:e6:5f:6b:2b:6f:da:33:ad:
21:88:cf:9c:49:c7:40:7e:e9:ee:c6:26:29:b1:7c:
4e:12:5d:28:5c:97:68:03:6a:0a:e2:f5:34:1b:ba:
07:4a:73:c2:15:52:ae:de:31:a3:1b:9e:a2:e1:10:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:99:15:59:31:8B:D4:10:1A:B6:1A:15:93:FB:60:E3:7C:ED:E6
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:e8:67:52:1d:6b:7e:ec:80:31:ae:ae:ce:6f:e9:93:c9:
44:bd:30:bb:a0:35:57:10:7f:cd:e0:7a:ff:bd:98:8d:96:e9:
29:c6:28:7f:de:4d:9c:6e:de:a3:71:56:04:d8:a7:74:34:d8:
c7:04:78:20:3d:9b:63:9a:35:b4:c1:d9:4b:5d:54:9b:e3:c7:
49:88:60:89:cb:80:43:78:15:50:d9:74:2d:76:61:7d:66:53:
08:9e:83:08:7c:0c:40:76:62:43:33:9b:ac:6c:e1:0b:4d:e6:
ab:31:dc:6d:67:ee:c2:a1:2f:06:db:8e:5b:88:f4:21:67:92:
0b:8d:78:ad:fc:1c:b0:61:e0:16:7b:b6:8a:d0:99:d0:0c:65:
62:d6:17:ba:5b:15:53:ca:68:db:64:92:7f:97:db:27:68:04:
82:23:97:3d:74:f6:c9:12:b7:3d:12:3b:15:e6:0f:7c:11:23:
2f:58:7b:e1:ed:cb:32:b6:6d:77:b9:b4:24:73:06:c4:e3:ff:
11:56:b7:0b:02:62:ff:5d:33:d2:81:56:66:25:23:a8:bd:da:
70:40:3e:60:41:1e:7c:12:e3:a4:ac:d7:ca:13:2d:82:96:0f:
78:47:3d:9f:15:72:4d:0c:bc:4f:50:f4:dc:60:b0:52:4d:c9:
a5:64:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:11 2026 by rpki-client