Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: vv5NExdrJqF4OCUZx7oMoCa9LWa9c++ClJKOOW6Cdi4=
Subject key identifier: 61:D4:7B:1F:0B:27:C7:C4:36:97:17:39:B1:22:A5:19:CF:7B:75:EF
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019D3940D3591580FFA5C44C41C2A792F9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 08A1
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: Bidh4DW6JUfjMj1YnxZDSbmvSC+s9OzV3TmvIrpMCo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d3:59:15:80:ff:a5:c4:4c:41:c2:a7:92:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=61d47b1f0b27c7c436971739b122a519cf7b75ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:29:80:f6:6e:2e:3d:a4:55:55:d8:3c:5f:
62:29:d6:75:6f:9b:56:a1:e3:f5:c2:61:7c:81:99:
66:a7:f1:27:3e:ba:f6:57:b0:73:bb:ee:79:3a:88:
4e:8d:85:47:26:9d:13:05:22:8d:d2:8d:c8:55:6e:
7a:87:ce:b6:ce:04:75:18:d2:bd:58:b6:9f:f3:24:
ca:76:fc:36:56:5b:29:6f:10:39:93:2a:6c:f3:88:
85:06:91:12:91:5a:e6:0e:b4:e5:80:d8:59:0c:11:
05:e6:6d:6a:4e:46:87:23:8b:96:31:e4:37:24:2b:
d9:64:0d:fb:03:f9:f4:49:40:f5:3c:1f:61:ab:10:
72:33:5a:2e:b2:62:4f:16:b4:da:d8:a8:35:3e:d0:
ed:dd:25:cf:33:92:43:41:e4:d4:43:ee:b0:d1:c6:
82:d7:45:9e:bd:2b:ec:61:21:09:c3:22:16:77:cb:
b5:3a:f3:96:86:a9:4c:35:6d:8b:26:ca:bf:54:d1:
31:ae:e1:9d:a3:6f:d6:da:ec:61:56:09:2c:b8:d9:
a1:db:c4:73:e9:73:a7:9b:64:b3:b4:c2:f2:df:e5:
e8:49:76:43:8a:70:d3:af:d4:58:bd:82:b2:9b:36:
2f:50:bc:f7:a4:01:da:4b:b3:e4:28:87:78:b3:db:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:7B:1F:0B:27:C7:C4:36:97:17:39:B1:22:A5:19:CF:7B:75:EF
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:58:ac:ee:48:fc:8c:2f:5b:19:6b:05:d7:1a:d5:a5:1d:
39:a1:06:45:56:93:a5:c8:75:ce:39:ca:03:c0:5e:22:91:54:
ce:2e:23:d9:4b:e8:80:2e:2d:c2:e1:c8:9e:2e:01:a4:bd:d4:
fe:36:f5:d9:e5:9b:8e:78:af:ca:be:f4:a5:de:a5:c1:31:12:
01:9c:65:21:bb:ed:e7:17:f7:a4:84:55:12:4a:e4:d4:39:61:
d2:70:2c:ac:73:27:d1:ad:d1:08:0f:32:23:a6:ff:3a:33:45:
1c:f0:32:3e:53:5c:21:82:03:91:9b:78:5e:93:b4:0d:a4:8c:
05:3b:a0:3a:8a:e8:a9:06:f7:48:76:45:05:97:05:5e:8f:11:
1f:0f:97:d3:b8:93:de:86:2c:f1:60:39:30:64:fb:b2:f6:de:
b5:ec:b7:29:60:73:c6:2f:fa:3e:6b:bb:fa:9d:f2:5c:46:5c:
4f:70:4f:e6:6c:ef:c3:6f:1d:d6:3c:8a:1a:a1:19:01:60:7a:
17:b8:cc:59:7e:c3:42:8f:a6:20:74:0d:76:8b:04:5b:19:10:
3a:58:25:b2:51:8a:1a:25:5d:eb:27:9b:dd:93:20:13:78:4c:
d4:33:7c:12:d9:c8:c6:55:8e:2c:6c:d6:64:73:2d:98:aa:9d:
65:0f:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:33 2026 by rpki-client