Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: f2NG7Kwl5eGqNMIHmtyE04874NBNT8HbKnXOAkWFNlA=
Subject key identifier: 13:D4:FA:2F:43:50:A7:17:A9:03:A6:FB:0D:89:E6:0D:90:3A:15:F7
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 01A002140C9066B96F37EA5122B23BB92E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 09B7
Signing time: Fri 14 Aug 2026 21:01:03 +0000
Manifest this update: Fri 14 Aug 2026 21:01:03 +0000
Manifest next update: Sat 15 Aug 2026 21:01:03 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: NMaGuxcwLOvWoWBJ5rnxWjscQjswcBqXV6e8XPPBwT8=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:0c:90:66:b9:6f:37:ea:51:22:b2:3b:b9:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Aug 14 21:01:03 2026 GMT
Not After : Aug 15 21:01:03 2026 GMT
Subject: CN=13d4fa2f4350a717a903a6fb0d89e60d903a15f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:d1:fd:c0:8e:b0:83:2a:de:ac:27:aa:67:
9e:ab:86:a5:38:7c:07:12:ca:76:2c:9c:c0:76:e0:
30:fd:79:23:ee:bd:64:c8:09:3f:c2:79:0e:85:1d:
26:13:df:0e:65:b8:86:d3:f1:f0:68:eb:9b:6e:1e:
02:60:a4:bc:f4:1a:73:de:86:52:d1:48:f9:e5:95:
94:26:84:fe:dd:9b:22:a3:7e:a9:23:d6:68:7a:0e:
d5:b4:cd:5c:a4:38:1b:c0:b7:3b:e6:dd:b6:ce:23:
67:97:7e:7e:0b:21:76:67:cb:5e:b8:0b:1b:a1:71:
e6:01:63:63:c1:d1:b9:5c:54:de:3f:8f:8b:db:37:
3f:0f:b2:30:ee:6e:75:2b:0c:de:00:e3:6d:a8:f9:
84:6d:03:bd:b4:5d:1f:75:a1:b3:51:9b:a2:d2:4b:
e5:89:32:12:f0:88:a2:b6:35:66:59:62:c4:26:38:
b6:16:09:02:4f:3b:aa:9d:30:85:e0:fc:d8:6d:62:
ec:f7:62:f6:f0:d1:de:73:07:23:1e:bd:3a:75:73:
69:1a:59:0b:ee:a3:51:fb:4a:51:0c:42:80:19:11:
a6:ce:35:14:cd:7a:e9:95:63:72:98:9a:0b:b2:68:
3b:69:0f:37:47:f7:40:84:5a:5f:68:43:5c:82:2f:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:FA:2F:43:50:A7:17:A9:03:A6:FB:0D:89:E6:0D:90:3A:15:F7
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:49:aa:12:e2:cc:f9:cb:9f:ca:27:79:c5:65:d8:f1:5c:
eb:2d:e5:f0:89:bb:e1:30:4d:7a:be:a6:28:6e:64:79:ee:7d:
4d:1b:b1:e2:c9:9b:34:d1:78:20:ed:b0:59:00:64:c8:a9:20:
75:55:1d:40:74:10:19:94:31:34:6b:05:ec:c4:3f:82:2e:a1:
9f:96:7a:e7:ef:e3:6e:19:23:8e:88:f3:e8:87:49:4d:26:f3:
27:89:5b:52:7e:35:20:fa:fb:45:a9:4f:17:23:b7:ed:25:da:
1b:9b:3d:fa:cb:87:57:05:32:ca:25:8c:0b:fb:be:d7:7a:aa:
f0:51:19:73:a9:bc:74:93:6c:e8:c9:39:a3:ac:06:38:29:6f:
f3:0c:41:d2:49:a4:84:b7:25:4d:d2:53:c3:a3:88:f1:96:d6:
7a:2f:a9:0f:f0:cf:dd:84:4d:ee:24:6a:78:5d:f1:91:cf:c9:
c4:2b:a1:f7:a3:14:0e:f9:b5:99:4e:dd:8b:f8:4e:f7:d9:72:
e0:de:ed:35:18:f0:eb:6d:41:6f:69:1e:e6:b8:17:67:5b:60:
29:78:bd:ad:51:60:59:8a:bf:46:61:12:4b:5a:1e:a1:3e:41:
7b:16:4c:53:d7:7e:f6:9f:63:4f:c9:b3:8d:f1:a1:5c:84:d4:
c6:6b:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:13 2026 by rpki-client