Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: tL81kbDrxhThB3TGNNpgca4YmwtigKwIKhMtPp7egCk=
Subject key identifier: 54:A4:96:06:94:F5:07:B7:CB:1F:0F:3F:B0:E8:9B:EC:C5:CB:15:6F
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 01A08B9EEF121875527A53672CEEF6FD75F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 174B
Signing time: Thu 10 Sep 2026 14:00:43 +0000
Manifest this update: Thu 10 Sep 2026 14:00:43 +0000
Manifest next update: Fri 11 Sep 2026 14:00:43 +0000
Files and hashes: 1: PmSCD4wgzFyU2AqXpshqRaKIPuc.asa (hash: 25QFICONcsuYG4Rf1aqXoo/9TTjRkFuSaxU7izwH5pM=)
2: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: CMLhDkvFTyMsvrNmEAS13K30UaSj9TKxxFMgk/8kCpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:ef:12:18:75:52:7a:53:67:2c:ee:f6:fd:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Sep 10 14:00:43 2026 GMT
Not After : Sep 11 14:00:43 2026 GMT
Subject: CN=54a4960694f507b7cb1f0f3fb0e89becc5cb156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:9c:a1:06:b0:9d:b4:8d:d0:bf:3e:26:a4:
0b:a8:5c:e8:a9:78:11:27:9a:d8:4a:8e:73:87:6e:
6c:4d:0a:ba:ec:7e:23:82:b3:a9:41:f8:c2:5e:11:
f7:75:e4:85:be:cb:9a:83:20:82:4a:8e:e7:ad:80:
3e:5f:35:ac:88:1d:4c:7e:3c:8f:5a:f0:ec:4d:a2:
ea:27:a4:5c:79:68:a9:52:ec:49:0d:7d:72:80:c6:
bc:89:98:7f:f2:f3:c8:0f:43:c3:18:7a:e8:c1:9f:
c1:53:0b:ee:54:4e:a3:cf:9c:a4:ac:5f:17:59:29:
c1:5e:b4:9c:35:88:cf:54:12:3b:45:69:e1:51:f6:
55:bd:bb:09:c8:cd:a3:60:d0:66:5b:f9:6e:1a:02:
20:c8:77:b2:0f:c5:30:20:af:5b:f8:7b:d9:ba:43:
47:0b:1f:2a:7c:b5:d9:e6:34:b1:e5:0c:b1:b9:de:
c2:fc:29:92:e0:f0:50:e1:8d:88:40:aa:22:94:ed:
b4:18:4d:f4:ac:1b:dc:75:b3:1f:3b:e7:89:da:60:
fa:54:27:2e:9f:0b:51:12:fe:e2:e2:9d:fa:62:49:
a3:63:f3:e2:a1:b3:2e:7f:c0:43:b1:6c:29:7a:66:
9c:5c:9a:8d:df:2b:ab:d3:21:60:d3:e3:84:cb:56:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:96:06:94:F5:07:B7:CB:1F:0F:3F:B0:E8:9B:EC:C5:CB:15:6F
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:35:5b:db:58:2d:a5:6a:b6:19:f2:7c:79:3c:bc:71:ee:
b2:bb:c7:ad:1c:68:5f:43:a0:f3:b2:96:ce:cc:49:18:02:f7:
7c:ed:91:6f:5a:a5:39:2b:a8:ce:cd:bb:0e:09:09:3d:bf:16:
6e:55:17:a5:91:d5:cc:93:17:11:d6:31:7f:b0:99:88:44:0c:
f4:11:8a:7f:d5:a7:d8:c8:54:7a:0f:bb:63:af:65:9a:86:8e:
83:db:b5:c8:87:b0:6c:45:37:e0:7f:90:d9:86:93:51:52:ce:
19:27:95:bc:ef:56:74:8d:ea:50:b7:27:2e:6e:ea:66:20:f3:
ba:58:26:a6:c2:7f:fc:a9:1b:d4:4b:a0:07:10:45:38:d4:2d:
cc:b4:cd:17:3b:4b:62:f5:ee:21:c2:a7:99:9d:d3:de:73:b8:
90:b2:db:f0:44:00:5f:f9:ec:76:98:6b:77:37:33:27:dd:f1:
fc:a4:4a:9a:9f:f8:e2:13:a7:b4:cc:88:76:ac:3e:db:49:55:
74:2e:76:13:5f:7d:9b:51:1c:70:80:b8:65:69:ac:c8:94:9a:
17:8a:82:84:c5:42:54:4d:01:49:c4:49:b0:eb:ff:9e:1e:81:
30:17:e4:05:8e:fe:b9:f2:df:97:2e:4d:75:f9:c3:c2:c7:d9:
a2:79:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:11:39 2026 by rpki-client