Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: V8zfP/8A7dTjY3bZo8YmKYhKe0OSG+hRxezS5ceVue8=
Subject key identifier: 54:B4:37:78:41:0A:3D:EA:AB:0F:67:60:D0:FE:0B:99:EA:EC:61:99
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 01A0DD60CA6440FD47D88D33E1BE2EAAD0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 022D
Signing time: Sat 26 Sep 2026 11:01:42 +0000
Manifest this update: Sat 26 Sep 2026 11:01:42 +0000
Manifest next update: Sun 27 Sep 2026 11:01:42 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: DmGJHCO25RfywjTELlPJjcmVPTKL+sDACS7xQP+Br18=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:ca:64:40:fd:47:d8:8d:33:e1:be:2e:aa:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Sep 26 11:01:42 2026 GMT
Not After : Sep 27 11:01:42 2026 GMT
Subject: CN=54b43778410a3deaab0f6760d0fe0b99eaec6199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:3f:49:3c:a7:59:b4:b2:5f:4c:97:c8:91:
05:cb:24:dc:3a:42:ad:2e:a2:75:f8:03:b4:da:98:
f8:ca:11:ae:25:09:a7:0b:54:32:c9:c2:af:5b:ea:
de:24:0c:04:e0:d9:41:e0:25:c7:53:bc:c6:28:36:
d5:e3:12:9c:a9:95:93:97:4a:a9:a7:e2:d6:30:f2:
60:20:2c:48:d3:84:0e:cb:95:1a:67:ea:14:cf:a3:
eb:fc:81:3f:a2:b4:df:c8:99:63:00:70:bb:0d:0c:
b3:ab:79:1d:94:1c:1e:6e:76:91:5a:a8:7d:28:fb:
3d:02:2d:1c:71:76:03:31:99:c9:a5:bb:2d:fc:79:
5e:51:3f:77:2f:69:fd:79:d0:9a:76:62:a1:26:1c:
cf:69:07:69:e3:85:a4:7b:6b:3b:cb:f1:ab:ab:fe:
54:d2:04:76:ed:09:1b:77:52:52:ed:7c:1a:66:6c:
ce:a9:ad:98:25:40:3b:5d:44:64:48:94:8e:46:70:
e6:54:49:c5:9c:0c:44:7a:bb:e5:9d:36:46:d6:ef:
04:b3:cf:de:da:eb:3d:c5:ae:b1:fa:de:f6:50:67:
1f:39:3e:93:13:fe:6b:cb:38:5e:b6:5f:19:dd:c4:
f1:73:49:1b:9a:7e:de:4e:84:52:c2:37:f3:89:74:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:37:78:41:0A:3D:EA:AB:0F:67:60:D0:FE:0B:99:EA:EC:61:99
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:31:54:27:80:dc:f7:b1:9c:d8:c2:9a:e4:0e:88:92:a9:
f3:5b:e5:96:92:77:72:ad:db:28:9e:b9:ee:00:22:11:43:46:
47:7f:6e:12:ad:14:40:04:82:84:ed:25:0d:ce:41:a3:77:ad:
f9:cf:e5:c0:ad:c2:d3:25:8e:16:57:65:98:9f:e9:e3:80:a9:
1a:96:e1:97:43:a0:f2:7b:ef:c6:0f:fc:ef:8d:52:26:b1:0e:
da:20:25:bb:2c:c0:5a:31:52:34:95:57:81:ad:08:e5:97:01:
90:a8:6d:29:6c:6b:5e:36:23:6c:02:74:05:b3:c6:05:d2:27:
a9:a3:78:36:46:13:24:ef:77:82:47:6f:cb:66:38:cd:fd:ef:
99:e2:07:a0:8d:99:c0:92:ba:21:9c:33:b8:90:23:14:30:5f:
9a:db:b7:01:8c:1e:48:cc:02:4c:26:db:38:7c:fc:fe:34:dc:
92:c3:a1:6f:d2:d8:cd:c2:a2:b2:52:d6:d6:8e:35:cb:96:3d:
51:c9:b1:30:a4:13:1c:a4:84:1c:fa:c8:18:15:c9:f6:5d:8e:
58:35:32:7b:56:39:01:73:42:6e:e0:54:3e:0e:d1:e4:a7:bb:
04:6c:61:17:f4:a7:06:e9:51:64:44:d4:eb:87:42:12:b2:d7:
8b:d2:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:13 2026 by rpki-client