Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: ArbMNGs8PChv3oaZCGnEL5fk14J1WCZZ4RdRZiovRck=
Subject key identifier: 19:8C:A8:F3:CC:64:4F:54:79:0B:DC:DB:84:3E:27:03:DE:3C:F3:25
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019F93C940965DBB3B937FC70A138B92DB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 127E
Signing time: Fri 24 Jul 2026 11:01:07 +0000
Manifest this update: Fri 24 Jul 2026 11:01:07 +0000
Manifest next update: Sat 25 Jul 2026 11:01:07 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: o/M/61HKlUcAL1kKyDfrP5T4PBZEcNgvBPvhQ+cX+l0=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:40:96:5d:bb:3b:93:7f:c7:0a:13:8b:92:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jul 24 11:01:07 2026 GMT
Not After : Jul 25 11:01:07 2026 GMT
Subject: CN=198ca8f3cc644f54790bdcdb843e2703de3cf325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:56:72:8d:e2:1f:90:c0:9a:98:45:bc:c1:
5d:5f:82:70:ab:23:28:51:d1:1d:7f:da:7e:fa:3e:
54:87:c6:92:6b:b3:b2:16:6c:fa:44:a6:a6:fa:31:
88:7d:56:18:ca:33:d1:a8:33:ba:98:58:63:bb:dc:
f3:ed:25:e5:3f:09:4d:da:19:d2:61:d3:c4:b9:ba:
d7:04:3a:d7:5e:95:08:66:8b:ff:1a:6a:6f:47:78:
3b:26:af:2d:6c:87:68:75:41:5c:9f:e6:32:bd:fc:
a8:9c:ed:d6:ec:a7:42:d1:27:f9:30:48:cd:d0:8c:
87:e0:8a:ed:f4:52:bc:b0:a8:55:9f:6c:1b:5c:2d:
46:46:a0:9b:da:24:ea:ca:c0:a6:00:49:d9:62:e9:
1d:89:53:a0:7b:c6:01:a2:91:06:d4:97:76:cf:ef:
c7:95:fa:45:0d:c1:ac:a2:f7:c2:8f:0e:e4:fe:d8:
67:be:f0:68:6e:b4:5c:e5:26:c9:32:85:8e:c2:71:
90:45:d1:f1:21:46:0a:c3:62:81:7f:ca:33:16:db:
32:3c:ce:ff:86:2c:a7:41:ae:e7:b6:59:14:bc:48:
82:cd:b4:8f:50:6e:00:cf:e5:7a:92:e7:e3:ba:8e:
04:7d:d4:bd:99:4a:96:db:b9:44:b6:1a:15:aa:62:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:A8:F3:CC:64:4F:54:79:0B:DC:DB:84:3E:27:03:DE:3C:F3:25
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bf:f4:f9:9c:03:30:a9:e0:6a:6b:0f:b0:85:25:5a:d3:16:
10:92:98:4a:94:60:b3:18:ca:06:2e:bb:8d:81:a4:9b:8a:7a:
13:ed:49:11:86:96:a0:fd:63:d5:a0:f5:7f:98:4d:ee:d5:f4:
f0:e6:7f:66:58:66:e8:0a:4c:2f:49:9f:c5:3c:ba:04:81:e5:
5d:d7:02:1a:54:86:e9:0a:66:b2:57:18:da:06:58:80:f4:64:
d1:da:2d:a4:a2:46:8e:e7:d0:91:51:5c:89:d7:1c:89:52:b7:
4c:bf:79:da:d3:8a:b2:7c:aa:33:e9:f9:2f:1c:cf:fc:78:dc:
6c:9c:4c:33:45:ea:34:81:4f:67:5b:1a:97:d6:e4:46:59:1e:
ff:d7:00:a4:b2:61:2f:5e:3b:f3:12:dc:b9:f5:3a:9c:19:c8:
6d:2a:2e:de:af:4d:e4:ce:d1:08:dd:eb:e5:dd:a6:81:f6:3f:
53:68:bc:f4:92:7e:f8:b7:69:88:39:a4:2d:c7:31:cc:cb:1c:
73:82:1a:d5:dd:c0:f6:a3:1d:a1:f1:f8:f5:2e:6b:8c:43:66:
c0:52:cb:80:95:5a:54:42:61:79:51:d8:cc:fd:62:1e:d9:cb:
8e:d3:56:e3:13:87:66:f4:bb:e9:55:b9:db:08:4b:4d:e1:c8:
7b:ff:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:49 2026 by rpki-client