Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: fmzlJaowAV3ruXcsx28qZbSD43eDr2ax3gPzWxU0GKQ=
Subject key identifier: F4:DC:B3:D8:44:E6:B3:E0:C8:50:61:8F:AA:A4:02:2E:5E:FC:6F:79
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01A1103B7B32F675E9C2251CCD7660109A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 1343
Signing time: Tue 06 Oct 2026 08:01:35 +0000
Manifest this update: Tue 06 Oct 2026 08:01:35 +0000
Manifest next update: Wed 07 Oct 2026 08:01:35 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: O1xRQzF/vzeHFEm6+Hx1UHjXHhqfoaJim8RFGpHfitw=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:7b:32:f6:75:e9:c2:25:1c:cd:76:60:10:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Oct 6 08:01:35 2026 GMT
Not After : Oct 7 08:01:35 2026 GMT
Subject: CN=f4dcb3d844e6b3e0c850618faaa4022e5efc6f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:b5:bf:9a:b0:c3:01:31:d2:29:16:54:1c:
04:33:89:59:a8:e3:61:23:d6:3d:9d:6b:fe:f3:f3:
27:34:3e:80:77:cc:58:94:4e:e2:4a:36:5b:dd:64:
98:31:8d:d3:45:e3:4e:fa:b4:81:e9:67:4c:56:cf:
39:a6:cf:f3:f5:a0:04:a6:12:1a:75:16:fc:4a:f3:
be:89:b8:c7:9b:2f:df:06:67:6b:d0:b2:d5:5d:4e:
bc:e9:26:12:47:b1:da:e2:9d:a6:2b:71:2f:bd:a2:
83:76:58:be:95:8e:bc:54:39:af:5f:c1:db:81:25:
7a:c3:6e:a0:f1:ab:15:91:b1:b1:30:24:35:58:9a:
b6:1b:63:96:9b:3c:ba:7c:e2:9e:6a:fe:0a:45:f9:
7f:b3:f3:39:b6:a4:02:91:4d:ce:c5:ad:df:a8:f9:
88:1f:b0:13:35:98:4d:c2:6f:ea:f1:d8:a9:f1:26:
4d:03:05:3b:09:b7:3a:34:80:dc:dc:21:4e:80:f9:
86:81:2f:30:57:42:35:41:02:f5:16:6f:a7:90:3f:
7b:4c:5b:13:da:ba:f1:1c:59:c2:39:7f:76:f1:54:
22:92:90:72:19:a6:24:ad:8c:cf:c7:bd:0c:cc:8d:
53:36:27:ab:f7:3f:b0:e5:d8:77:38:71:03:48:85:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:B3:D8:44:E6:B3:E0:C8:50:61:8F:AA:A4:02:2E:5E:FC:6F:79
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b0:e1:fe:57:92:ab:bc:f2:0e:77:b6:f3:2a:9c:2e:0e:be:
10:1e:95:88:cb:05:52:eb:e4:20:5f:dd:52:c2:a5:4d:8d:ac:
9e:d2:62:c6:05:bb:b4:13:97:b1:16:26:87:e7:fd:05:19:d5:
29:a7:f5:0c:c1:94:a2:ee:0a:dc:d1:bc:79:72:1c:1d:20:e0:
d9:ff:c3:6a:9e:6f:5e:31:b8:d3:3f:56:84:83:c2:b0:d7:28:
16:4f:6d:c8:4a:46:ab:6c:64:9d:63:38:1d:1d:08:14:e2:d9:
0f:68:39:d4:55:56:c9:f0:fb:13:fd:0b:89:93:de:70:d8:76:
fd:7a:a3:b4:ca:84:94:1e:cf:db:90:bb:c9:09:e1:30:da:8b:
9b:85:29:9e:0e:6d:ab:a4:63:41:77:14:98:61:71:22:3e:66:
b6:e1:f8:9d:92:f9:a7:8e:d7:d6:dd:65:b8:64:64:a1:e9:db:
2f:0e:34:40:78:1d:4a:0a:2e:5c:02:3c:ff:ed:7e:7a:26:64:
23:f4:57:81:44:7d:54:ed:c2:8d:9f:3c:df:ab:49:e3:14:08:
84:11:1a:8e:f8:05:c6:99:fb:73:ed:8c:2d:d9:9d:83:2d:3e:
cb:db:ec:42:d2:6e:22:2a:02:94:d4:f1:9e:29:8a:31:11:c3:
0c:7e:00:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:46:53 2026 by rpki-client