Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: Cr+6ifIsKDzA7muLOW+Lp2RVU/2h7x7URzCKgpc5pKY=
Subject key identifier: 8E:F9:91:EE:97:39:9A:0F:24:F1:4B:22:12:66:74:9F:92:51:6E:E6
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 01A1DCB8EB997EAA9333262CFAC815922BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0E06
Signing time: Sun 15 Nov 2026 01:01:08 +0000
Manifest this update: Sun 15 Nov 2026 01:01:08 +0000
Manifest next update: Mon 16 Nov 2026 01:01:08 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: 6V/P4I9t0XN/GPysXFVuDhqug49E32rMV6/dC5Cm+Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:eb:99:7e:aa:93:33:26:2c:fa:c8:15:92:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Nov 15 01:01:08 2026 GMT
Not After : Nov 16 01:01:08 2026 GMT
Subject: CN=8ef991ee97399a0f24f14b221266749f92516ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:c6:d4:5e:0c:72:f3:c7:3a:8a:8d:30:99:
0e:b2:fe:e3:0a:7d:73:ac:41:cd:9a:89:57:4a:2a:
4d:7b:78:9d:05:d8:7e:bb:bb:47:6c:c2:c9:53:6f:
18:a0:e9:b0:a9:50:3f:57:be:d9:c6:e3:35:16:c4:
01:64:09:98:05:94:24:51:86:2e:5c:bb:e6:91:fb:
07:1b:7e:75:01:0e:1e:ba:6e:85:6b:e0:fb:35:2b:
18:49:2e:6e:d8:00:66:3f:fc:79:80:25:25:51:d2:
87:83:26:dc:ba:15:e3:0a:c5:a4:67:50:93:16:e0:
c2:85:e1:ea:ae:79:19:8d:13:7a:42:e1:be:cc:f1:
cb:84:af:4b:f6:09:d1:7e:b4:37:81:d8:b3:47:f8:
90:78:2c:6d:0c:29:0c:b5:62:de:ed:22:ec:bc:d4:
4f:d6:5c:1e:c3:f8:5d:2c:55:db:86:85:bc:14:ee:
90:ce:e1:93:53:20:41:4a:5d:2f:c9:cb:47:f1:b5:
b4:5e:7c:3d:4c:f1:d6:d7:bb:c2:b3:48:e2:4d:53:
88:90:16:0c:e8:60:3c:aa:30:6f:cc:a1:d3:b2:27:
52:d4:31:a4:70:65:a4:46:83:7f:66:82:0e:d7:b4:
e9:69:d3:61:2e:78:20:c2:f1:ce:d0:17:32:18:a6:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:91:EE:97:39:9A:0F:24:F1:4B:22:12:66:74:9F:92:51:6E:E6
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:e2:79:2c:e8:53:ff:db:1e:ca:40:d8:c3:96:e1:96:87:
94:74:a5:89:be:c9:a4:90:2a:92:ec:e2:58:55:25:5b:a3:50:
c4:43:97:c6:bc:53:79:7e:33:ad:68:92:8c:8d:02:2e:a6:83:
2a:4a:91:52:ad:9b:ce:fa:65:ef:4f:ae:ef:c9:a8:1e:41:60:
e7:1b:d9:e1:1b:da:8c:b4:a8:c5:93:e7:76:cb:be:ee:b3:b4:
77:d8:b4:a8:84:14:63:f1:a7:89:e9:04:37:42:f7:58:72:31:
74:a3:7e:fc:45:85:8d:4a:52:6e:f2:4c:74:56:a7:73:63:23:
66:78:db:39:65:4f:9f:cb:e2:b2:e1:f0:d3:dc:3d:ff:aa:3c:
cc:39:7f:ca:31:9b:8a:e6:26:6d:a9:ad:3b:34:55:76:83:18:
67:a9:d0:87:16:14:33:44:e8:e1:c7:b9:0a:2d:9b:ac:51:34:
68:d0:38:83:22:50:82:f9:db:a5:b0:69:9e:74:50:6c:bc:ca:
9d:24:c7:9b:02:05:e2:e4:e1:ad:4c:a9:17:58:22:54:72:6f:
9d:5d:b6:5a:a7:60:7d:91:36:ae:30:c2:42:e0:ee:70:81:37:
2f:0d:be:dd:8b:21:bb:ae:52:ab:d9:cf:ca:87:90:d4:58:00:
65:c2:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:52:46 2026 by rpki-client