Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: tus4NrfHjfMKUXKd3NDO9uQ/NGrSlTIxp5LK1b7VvBw=
Subject key identifier: 08:7A:B1:22:6C:75:39:39:B1:4F:73:52:C1:A1:61:6F:C3:37:77:0B
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01A1871ADDFA1216B1F361E8C700CE02328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0ADC
Signing time: Thu 29 Oct 2026 10:00:47 +0000
Manifest this update: Thu 29 Oct 2026 10:00:47 +0000
Manifest next update: Fri 30 Oct 2026 10:00:47 +0000
Files and hashes: 1: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (hash: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=)
2: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: uiJOvBzO1CSYoje1tTyvrljUDbAflhxYpmtmRzg2KIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:dd:fa:12:16:b1:f3:61:e8:c7:00:ce:02:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Oct 29 10:00:47 2026 GMT
Not After : Oct 30 10:00:47 2026 GMT
Subject: CN=087ab1226c753939b14f7352c1a1616fc337770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:e7:d3:17:c7:b4:73:91:bd:ee:42:3d:06:
d0:0e:52:43:8f:33:34:de:8d:80:71:59:a2:e3:db:
db:eb:8d:1e:f9:c1:10:f4:92:d7:51:66:d9:01:43:
7d:b8:40:2a:99:6b:84:72:02:2d:2c:d4:36:6d:8f:
27:f5:bf:64:ca:71:f8:b1:da:7e:7b:dd:68:15:c2:
6d:22:8e:60:b1:a7:84:bc:5d:7e:f4:f0:e1:1a:74:
57:8b:e5:95:b4:89:f9:c5:dc:a2:df:31:f6:04:ab:
24:c8:86:bf:82:bf:4f:51:a8:55:f2:06:0d:6f:a9:
96:f1:a7:c9:6d:8f:99:fc:99:bc:a9:fa:95:97:52:
5c:1a:d6:f6:f2:05:c0:8a:bb:d9:47:1d:de:d0:a4:
22:f3:0e:07:05:f4:29:bd:63:b4:55:2d:43:85:06:
70:0c:34:a3:7c:80:24:6f:cf:4b:ae:c3:ac:e1:d1:
ec:90:48:b4:92:ca:36:15:33:08:df:8f:58:da:7e:
2c:8d:ee:1b:75:b7:09:ac:e9:28:83:62:f0:23:9c:
b1:b3:37:bf:c8:00:6b:8a:df:a6:60:8c:b9:6a:8e:
22:64:54:7d:cd:69:50:82:f4:4d:c2:9e:75:f1:ce:
46:22:60:cb:b7:0f:d4:a2:90:ad:0f:86:38:40:99:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:B1:22:6C:75:39:39:B1:4F:73:52:C1:A1:61:6F:C3:37:77:0B
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:9f:eb:55:64:92:bc:d2:f5:f3:9c:3b:08:d7:22:13:56:
6b:b6:ed:1d:32:c6:82:24:01:bf:07:0c:77:c5:a1:00:ba:63:
2e:de:57:f6:6e:cc:68:ff:86:d7:e2:9a:df:65:dd:e0:21:ab:
c1:e2:85:30:da:09:17:8e:92:e9:f3:22:f2:df:f3:1a:1b:09:
5a:43:72:9a:f1:5d:04:ff:57:cc:33:10:42:0d:82:d1:a1:15:
ca:f6:13:47:91:d8:a4:99:ec:3d:e7:08:71:43:e7:eb:22:22:
ce:14:8b:9a:5c:a8:cf:cb:04:b3:de:0f:0b:a6:96:ab:dc:db:
40:8a:13:e2:ed:aa:38:c5:a1:56:41:02:02:2b:be:04:64:5f:
d0:f3:46:bf:67:08:1b:64:e1:7d:f1:aa:81:63:24:03:e1:57:
86:22:38:dd:e8:18:84:16:88:6d:de:09:4a:40:13:27:3f:5e:
92:ec:41:ff:4b:c9:c5:7c:95:eb:82:34:06:b8:df:18:06:22:
93:db:fd:2d:a4:19:46:45:19:56:d7:42:86:0c:85:95:a3:80:
df:ba:f1:e3:2a:7a:9a:ee:3e:09:15:28:c0:ef:53:ee:f8:6e:
1b:d1:40:4c:be:5a:c4:d9:c1:57:14:5a:03:5a:1e:90:18:9e:
08:87:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:35:56 2026 by rpki-client