Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: fKdsr+E0rDFOmRnQsyjjrxZOKaB1+1ioV9S0ejJOA/Y=
Subject key identifier: 0A:7F:EF:62:AF:E1:00:30:E3:9B:BC:52:C7:8A:34:19:8D:73:6D:1C
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019D25F111E9DA12877B57A8FCE377B87BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 113C
Signing time: Wed 25 Mar 2026 17:00:48 +0000
Manifest this update: Wed 25 Mar 2026 17:00:48 +0000
Manifest next update: Thu 26 Mar 2026 17:00:48 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: sMol1PDBlffktb/r8jyPawCt9cZ8X3D9OcF2GnCyJ/o=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:11:e9:da:12:87:7b:57:a8:fc:e3:77:b8:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Mar 25 17:00:48 2026 GMT
Not After : Mar 26 17:00:48 2026 GMT
Subject: CN=0a7fef62afe10030e39bbc52c78a34198d736d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:0a:0e:07:9a:75:c6:b8:05:02:c3:a4:85:
8f:bc:2f:3e:f6:e6:f7:5b:d5:5b:06:90:cf:1b:7f:
7d:34:d1:4e:c2:66:d2:39:4f:7b:c5:25:1e:7f:c5:
c9:0b:cb:7a:46:e2:ba:24:58:37:c7:83:20:ef:96:
4c:b9:9a:5e:8e:db:ff:25:be:a3:25:f2:34:68:7e:
f5:f7:66:2b:20:95:98:39:7b:1b:60:f4:5e:1a:7c:
27:53:ce:27:fc:a1:09:ea:3a:70:c6:c8:9d:ef:18:
9a:bb:c7:2b:11:79:3e:94:ff:d7:40:07:51:52:f4:
34:fb:69:e5:37:05:70:30:cc:dc:45:4f:b4:7d:3a:
a8:a2:76:15:91:31:4d:63:83:60:7a:75:e5:0f:b2:
4c:6c:35:75:d3:4f:d2:81:39:09:ce:a8:36:9a:e2:
31:69:97:38:4d:49:cf:4c:8e:67:82:e6:e8:ba:c4:
43:d2:d8:91:80:60:7b:f7:6c:86:7f:b1:2f:72:b9:
24:ce:bc:db:b8:27:4b:f4:29:81:c2:96:92:34:73:
5a:a7:fd:72:0c:c3:da:30:a2:01:c4:31:96:83:fa:
c4:69:01:78:3b:d4:7f:a9:d2:73:4e:2d:2b:74:03:
87:3d:5f:59:30:f7:7f:9d:38:d3:f1:5a:52:55:0f:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:EF:62:AF:E1:00:30:E3:9B:BC:52:C7:8A:34:19:8D:73:6D:1C
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:49:c6:d0:a8:e4:a9:32:ed:0a:52:13:53:c8:0e:a4:96:
2c:11:75:33:da:05:c2:5c:90:d0:1a:bb:36:6f:50:cb:0b:9c:
64:e9:6c:e5:39:0c:14:47:9c:c8:5f:1c:00:e4:b3:34:26:96:
72:99:7d:39:ae:b5:ad:7b:16:0c:4f:e9:b6:f1:8c:42:52:5f:
69:04:11:99:f6:86:9d:02:36:b0:1b:10:51:41:9e:0d:9b:7d:
6c:4f:79:92:e0:7a:54:66:05:ad:cb:28:35:fd:84:cc:e8:97:
a5:20:62:4d:d6:f5:b9:6a:f9:92:62:67:f6:18:a2:b0:41:7c:
1d:24:a0:fe:a7:f1:d9:33:43:5a:4a:ca:fa:79:e8:8f:ab:5f:
09:d8:b2:16:b4:b7:ed:5a:d3:43:43:50:d4:37:28:c3:de:cf:
2b:06:c0:be:0f:35:3b:e4:20:03:ac:52:7d:0f:6a:f5:0c:31:
98:11:c3:32:3b:c9:d0:81:d6:6c:85:da:5f:85:40:b3:7a:23:
ce:fc:0a:6a:64:05:2c:ae:fd:e8:f8:6b:26:0c:cd:71:fe:ea:
85:61:cf:a1:f2:49:f9:e8:db:5a:5a:a8:e8:83:4c:9a:fe:d7:
1b:26:84:c3:1a:98:4f:0d:3e:26:eb:19:ea:64:88:a3:00:93:
95:1f:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:36 2026 by rpki-client