Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: pIioLIaKHntevt5LleXk3ylULB+59AbpPwfKvJVZ61U=
Subject key identifier: 9C:76:DC:10:82:A7:9E:E5:EC:28:47:5C:66:84:B6:86:66:1C:A2:FD
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019D38665237ACD999D3B27339688AA7F297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1875
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: M7uLrwXf0ViaAZfHZiJsicAu4QJS5btIYQclrmXBj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:37:ac:d9:99:d3:b2:73:39:68:8a:a7:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=9c76dc1082a79ee5ec28475c6684b686661ca2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:f8:ee:fc:fd:ea:f3:3a:be:89:e8:b0:52:
a1:a3:3b:c6:1a:cd:77:f4:f6:b2:71:2b:0b:e4:c4:
4a:85:10:18:5c:6d:f8:6c:17:70:32:25:bf:24:14:
6b:29:3f:41:f2:68:e6:49:0f:27:ff:e5:09:b4:88:
c3:56:fa:eb:2c:b5:f8:3a:64:67:ab:09:84:77:e1:
97:66:b1:05:69:28:8f:52:d0:f0:33:4e:86:d7:7f:
c2:f6:77:d1:ef:4c:92:b9:b8:0b:73:44:e7:fc:dd:
4f:b4:64:d5:bd:5c:9d:14:02:82:6c:72:4d:ac:57:
0f:ad:d6:80:fa:ba:47:fe:a7:64:db:f9:df:b8:25:
08:b3:2f:f3:c2:43:1e:db:7a:e1:5e:f1:b1:13:56:
ec:73:7f:ed:78:fe:8f:de:b3:65:ac:ba:1a:55:22:
cb:7c:ec:74:af:52:a3:83:cd:54:3c:8c:eb:ef:7f:
6d:98:0a:0a:03:88:a8:89:28:86:de:5a:2a:22:5e:
79:64:44:5c:30:ca:78:32:5b:47:f7:a5:ab:17:61:
f7:61:27:6a:67:c9:67:01:8a:d6:20:fc:e8:11:58:
45:1c:fc:f4:3f:6c:10:6f:1f:74:fd:bb:c4:0e:c7:
c2:d6:82:d2:55:10:44:55:56:89:74:87:5d:8d:fe:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:DC:10:82:A7:9E:E5:EC:28:47:5C:66:84:B6:86:66:1C:A2:FD
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:57:20:9c:19:ef:9d:05:fa:ca:65:c8:6d:52:3b:63:04:
a7:32:ad:f3:14:87:e7:40:8e:bf:24:8c:c2:15:78:26:c0:14:
c0:61:c1:a6:4d:03:b1:89:99:df:53:a5:e4:5e:4b:aa:e9:fe:
2d:76:90:cf:68:50:69:b6:a6:56:25:24:14:0c:fe:97:56:b0:
48:8c:4d:07:15:3e:f6:3d:48:02:74:08:69:a3:53:ca:d5:c4:
32:15:95:d9:2d:fc:1b:83:00:15:20:40:71:a9:ce:ff:6e:af:
04:0b:1f:ca:a0:5e:e4:77:d3:1b:29:79:69:71:9a:85:4e:f6:
7f:7e:09:1c:a7:1e:2b:f0:29:de:9e:02:66:7e:23:52:14:31:
e9:25:80:e6:da:86:5c:8f:37:1d:40:2e:94:f3:71:9c:87:0a:
55:d7:97:58:17:73:e8:6d:a6:b0:49:98:f8:d5:77:98:33:4f:
aa:d7:8c:a3:df:00:84:f7:74:18:9b:80:19:cb:fb:b7:f9:42:
14:6f:4b:4c:06:95:ce:e8:57:6e:ac:d9:1d:a8:c5:cf:c0:f1:
da:de:c5:20:0a:0f:4a:77:86:e8:20:08:0c:0a:83:16:e8:15:
1b:e1:46:7c:cd:e2:2f:80:8c:8c:44:dc:89:69:2a:7e:ac:d9:
c0:ae:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:00 2026 by rpki-client