Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: GSg7sVfAHhEa2GSX2mxoz4rzAqZbr1/jfGgTjryLA4Y=
Subject key identifier: F7:32:39:57:8E:99:CB:41:74:14:54:DE:2A:5B:FA:11:D1:D7:25:FD
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019F42ADC30CB031D11B63E0F80F524064A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 1254
Signing time: Wed 08 Jul 2026 17:01:51 +0000
Manifest this update: Wed 08 Jul 2026 17:01:51 +0000
Manifest next update: Thu 09 Jul 2026 17:01:51 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: FHfRx2TjLcvFSaBfChCa3g7T5AC0+NFDXeUQMbNMPvs=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ad:c3:0c:b0:31:d1:1b:63:e0:f8:0f:52:40:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jul 8 17:01:51 2026 GMT
Not After : Jul 9 17:01:51 2026 GMT
Subject: CN=f73239578e99cb41741454de2a5bfa11d1d725fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:8c:a6:7e:02:73:21:b1:5d:b8:9a:63:76:
f9:0f:78:43:13:9f:0b:7a:49:bf:17:87:24:3d:76:
32:27:2a:7d:09:73:84:cb:63:46:81:a8:60:42:3e:
c5:b4:6c:88:af:6e:e6:66:b1:57:48:1d:34:6f:a1:
2e:92:10:57:b5:44:bc:18:de:35:3b:fd:b8:47:90:
0a:ae:50:8e:ec:97:32:ec:aa:76:91:b6:f8:71:5f:
f9:5a:7f:39:e6:c9:90:1b:d3:53:27:bd:bc:08:b5:
9e:cd:a5:7b:43:18:81:a6:d5:c2:cd:77:74:bb:33:
24:2a:ed:d4:c1:7d:39:c1:61:08:b9:33:44:70:fd:
6a:e6:5f:16:2a:0c:c0:76:cf:a4:67:56:43:dd:bc:
f2:1a:dd:ed:f9:4c:6d:29:71:dd:be:02:e2:9c:84:
35:47:ca:5e:42:e2:d4:1d:4a:c0:5a:86:c1:9d:6c:
cb:df:10:e9:b1:14:02:f7:d2:01:0e:40:58:a0:14:
3e:e8:89:c2:df:8d:c2:3a:07:40:b2:99:be:c9:e4:
93:59:5d:d3:1d:a6:06:da:80:e2:6d:6e:ba:61:80:
4b:9e:58:16:25:ca:01:e2:05:8b:1b:0f:33:c5:c1:
1b:a9:93:9d:04:a8:1b:e0:52:77:04:f3:cb:2e:ee:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:39:57:8E:99:CB:41:74:14:54:DE:2A:5B:FA:11:D1:D7:25:FD
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:1e:f9:d0:87:a2:60:82:b7:47:a0:f2:6c:b2:db:64:3e:
57:3f:ee:95:6c:91:99:e0:25:a2:16:ed:ce:75:ab:c5:5e:e7:
48:0e:17:63:66:12:a0:81:e6:4b:76:ae:a5:91:c3:13:44:0c:
89:3a:e2:31:26:43:9b:1e:04:0e:49:04:a8:7d:88:3f:9f:86:
7e:35:19:97:35:18:ba:e8:8b:0d:cb:23:48:54:fa:b9:ae:60:
11:03:c1:46:59:4d:f7:25:18:3a:98:e1:85:cf:15:80:8f:83:
de:3f:14:5c:c4:67:d0:31:ba:ec:c9:0d:06:f4:32:25:d9:4a:
9b:5f:9d:24:5e:78:ec:63:e1:9d:6c:5c:de:51:4f:76:8e:68:
8e:99:d4:2a:5f:10:b6:2f:07:7b:65:c8:30:b0:d2:00:c0:17:
0e:e8:fe:81:a3:bd:92:23:fa:38:f7:df:ea:d5:41:58:d4:7d:
8c:03:19:27:b1:24:cc:52:20:8d:bc:ef:69:fe:b3:8c:60:23:
4d:fc:18:3f:55:ed:57:3e:80:b3:7e:31:42:4c:15:49:c5:8f:
0f:85:0b:96:dd:62:72:22:7d:08:3c:68:59:70:4a:6f:1c:33:
0a:e8:26:03:5a:25:1e:2a:3f:55:88:ab:07:ab:3a:46:db:e9:
b5:4d:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:38:14 2026 by rpki-client