Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: N9XnZtlC8aVFGGjyx3Pp22wKqD81ijid8JKtllB9lfg=
Subject key identifier: 86:18:2D:23:9A:98:93:61:4B:4F:2E:A0:43:8C:40:E4:8A:08:B0:76
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019E20FF54DE100EAFF4CC35C28DBC755380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 11BE
Signing time: Wed 13 May 2026 11:01:04 +0000
Manifest this update: Wed 13 May 2026 11:01:04 +0000
Manifest next update: Thu 14 May 2026 11:01:04 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: 4aH+hMEFSrEk3Y5V/dtVMj/SVPmLwXoYWg33nA4okgE=)
2: eZKiMQzWjnLSNUhPLCHXtLoY7-g.roa (hash: QDiTQOusWt82z3mM8hhlc6NxV/ZNj/KHfUZESocyJ6k=)
3: tuXw29v5vK7QAMRKGI125TsbCbc.roa (hash: MRuL7z/iQ/MmbkZTVJT0wZjjfZN5DbocT9jk1GLBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:54:de:10:0e:af:f4:cc:35:c2:8d:bc:75:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: May 13 11:01:04 2026 GMT
Not After : May 14 11:01:04 2026 GMT
Subject: CN=86182d239a9893614b4f2ea0438c40e48a08b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:2f:ab:16:0c:24:74:19:a9:f9:bc:b3:15:
93:e1:2e:e2:fb:52:5b:64:a4:d2:ec:d3:83:45:71:
22:e5:c6:e8:d3:7e:f9:24:67:05:33:36:bc:3f:cf:
85:ce:61:e7:dd:16:83:37:18:df:16:54:62:cd:04:
a1:4d:18:92:16:e0:db:25:ff:a6:b5:07:77:29:07:
4c:5a:16:df:34:01:c7:70:7c:21:55:86:db:9c:60:
1d:ce:ae:e0:72:8f:54:d1:4b:55:58:1b:35:42:88:
38:88:2d:46:59:3a:a9:38:f5:d9:81:23:30:16:31:
35:25:37:e3:5c:a8:00:af:2a:83:bc:5d:73:aa:40:
6d:8a:6b:6e:3d:9b:b0:67:28:6a:e2:36:05:57:6c:
71:e4:cf:8a:30:18:9b:c0:2e:e4:ea:04:9d:35:42:
c6:fa:92:5a:0c:e2:07:fb:10:27:3c:bf:3f:fb:7b:
5c:37:8e:2d:59:3d:20:22:39:d0:39:6b:c9:c5:2e:
cd:5d:e7:3a:e3:40:21:48:3e:4a:9a:79:76:f0:c1:
b2:8f:e9:6d:47:a3:59:f2:25:07:90:50:e9:4e:6d:
ed:a0:18:c1:77:c7:b3:77:f1:a2:bb:05:aa:ba:e6:
f3:b0:72:2c:07:43:c8:08:75:4d:c9:9e:ec:60:fd:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:2D:23:9A:98:93:61:4B:4F:2E:A0:43:8C:40:E4:8A:08:B0:76
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:1e:0c:47:17:3f:d6:6b:79:89:c3:d4:07:de:75:38:2e:
58:31:d7:2c:99:ec:0c:74:92:2d:53:7d:b9:df:41:3d:29:3f:
b8:5f:e2:78:87:de:34:25:ab:cc:22:c2:9a:d2:9e:a2:64:d4:
bb:38:db:a8:80:5f:36:f8:0d:fc:34:37:2f:b8:4d:58:77:db:
40:00:27:8a:a6:26:0a:96:bf:95:0b:d7:e1:a3:ce:ce:0d:7f:
da:e3:52:8f:68:fb:b3:77:bd:9b:68:2d:e2:f5:fb:5a:00:4c:
19:d4:ca:85:17:36:b7:6d:58:82:9c:fc:0d:86:e9:db:e5:b8:
fa:d6:14:aa:64:27:7f:90:e0:90:8e:d4:71:16:12:2f:6f:88:
17:73:3c:4e:3a:6e:b3:86:79:9d:95:1c:54:60:ae:a3:bb:1d:
c8:b7:21:70:09:30:e8:3c:cf:e9:c0:85:7d:a9:22:64:79:30:
79:1c:39:9a:34:48:7e:ff:38:2c:d9:da:d1:26:ae:0c:5d:e7:
e0:94:af:4e:25:b1:04:7e:9b:f3:c3:13:a3:27:1d:1b:1b:6f:
ec:35:46:6e:09:54:61:89:d7:e8:fb:3b:d1:d3:6d:50:e0:6d:
32:3e:d0:4e:17:51:c7:28:37:fa:a1:d5:a6:b6:29:65:ae:82:
13:dc:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:32:40 2026 by rpki-client