Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: F5pleu/0Ng3OHcePnbKJ9En7Py19kt+RHnwG9kh7RKU=
Subject key identifier: A9:5E:29:93:19:26:37:F2:E4:BB:50:7A:1D:23:B5:FD:66:B4:84:F4
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01A02A6BB8B5D87435112E9D587C0908F621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 12CC
Signing time: Sat 22 Aug 2026 17:01:37 +0000
Manifest this update: Sat 22 Aug 2026 17:01:37 +0000
Manifest next update: Sun 23 Aug 2026 17:01:37 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: 1oSxqP9t0d35S8H7WRIGAvdG/Hcaer6EsbI94jzfvvg=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:6b:b8:b5:d8:74:35:11:2e:9d:58:7c:09:08:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 22 17:01:37 2026 GMT
Not After : Aug 23 17:01:37 2026 GMT
Subject: CN=a95e2993192637f2e4bb507a1d23b5fd66b484f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:55:ef:cf:8a:51:94:fd:99:37:77:25:c4:
2d:9c:44:e7:1a:38:73:52:07:2a:48:7a:45:71:de:
c5:53:12:dd:94:a0:37:b6:88:40:05:46:42:4f:37:
6b:50:fb:c4:59:c7:e6:c4:fb:ad:de:62:6d:ea:df:
2e:cc:2c:c3:9c:38:b3:38:25:a4:a8:da:7e:c7:2c:
a0:10:31:8a:dc:0b:98:3a:5a:5d:3b:67:e7:18:ec:
f2:1c:32:92:02:85:7f:fd:f3:c4:d5:f2:5c:e7:34:
ae:8e:11:a9:0b:e3:3a:48:30:74:6d:34:ed:c3:0c:
c0:bd:72:10:cf:bc:b4:f9:a7:59:18:39:be:a8:0c:
e2:7d:3f:4a:0e:64:aa:81:77:a5:54:ec:25:9e:99:
83:17:b1:2d:f1:05:79:df:c0:48:cc:8b:c2:f4:5c:
9f:d1:ef:c7:09:30:c4:0b:52:09:fb:56:a1:8b:50:
fb:11:01:d6:4b:d4:00:96:5c:ef:a2:8e:90:55:f7:
10:52:dd:e6:32:8d:7f:84:cc:85:dd:75:4d:d4:28:
dc:12:bb:41:d3:90:9e:bc:e3:1c:17:2e:44:62:23:
49:74:65:1a:d6:23:74:31:a2:fc:67:a0:31:7d:00:
79:38:5d:e5:54:a0:76:c9:99:8a:4c:e9:35:62:63:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:29:93:19:26:37:F2:E4:BB:50:7A:1D:23:B5:FD:66:B4:84:F4
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:6e:d0:d5:cb:15:68:f4:38:30:49:b2:b1:56:39:e6:aa:
ca:75:ff:36:74:36:a5:4b:b5:af:f3:b5:d3:23:39:05:94:3c:
61:fe:7e:af:0b:e2:d5:66:38:3e:04:9e:62:fd:99:da:d4:87:
54:98:fe:a9:8e:26:ce:05:a3:eb:53:19:82:5a:f4:bc:de:7a:
38:c6:5c:10:5a:d0:7a:b1:3e:53:98:f6:74:26:44:7d:c0:78:
54:2c:69:40:25:66:bc:a8:d9:82:43:b0:6a:c8:02:a6:4a:5f:
b8:e0:e2:d0:e2:d1:62:7d:b9:12:1d:9a:59:de:ce:0d:ab:f5:
ac:ce:05:fc:24:9a:ee:fb:73:1e:fc:99:65:08:ce:5a:61:da:
98:45:59:db:a0:ff:02:df:70:e0:c0:7b:a2:73:f3:b7:05:bc:
82:83:3b:cc:58:05:74:84:50:86:cd:95:84:ba:af:b3:b2:0f:
cb:78:ab:a7:d0:04:39:48:cd:54:66:32:fe:8a:a4:b5:a9:1e:
84:31:08:45:a6:26:a3:c8:b2:d6:8b:bd:11:4a:69:ff:1d:62:
61:72:5a:05:8f:40:c3:9d:31:f5:59:06:38:48:24:c7:78:10:
ad:9e:5a:93:f1:41:c6:97:f4:7f:d6:d1:c6:52:4e:88:99:a3:
f0:54:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:47:55 2026 by rpki-client