Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: CbON1MJ8XMsNfuLx15EekBa9rF/OoCkGp/SWkjJifWw=
Subject key identifier: 30:7A:E2:29:8E:4B:9F:82:D4:FD:9A:FE:83:21:A2:B0:1B:11:26:31
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019F94DBBE025DFC076579D878CEC6F1615C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 09DA
Signing time: Fri 24 Jul 2026 16:00:56 +0000
Manifest this update: Fri 24 Jul 2026 16:00:56 +0000
Manifest next update: Sat 25 Jul 2026 16:00:56 +0000
Files and hashes: 1: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (hash: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=)
2: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: o0QqpQsQi3S0yNU3SOYXna1qVnziPZnp8mSSw+kA6aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:be:02:5d:fc:07:65:79:d8:78:ce:c6:f1:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jul 24 16:00:56 2026 GMT
Not After : Jul 25 16:00:56 2026 GMT
Subject: CN=307ae2298e4b9f82d4fd9afe8321a2b01b112631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5b:9f:ea:23:57:24:36:12:c8:e0:69:ec:17:
c4:bd:15:8e:59:2b:a0:c5:ba:e5:4c:82:74:62:cb:
5b:a0:72:ef:c1:98:cb:82:b3:59:f2:b6:80:33:76:
50:89:f6:86:38:74:47:4b:38:45:e2:18:a5:0e:00:
f4:a2:b8:eb:37:88:18:9a:52:f2:c7:9d:26:61:10:
bd:6a:a7:fa:44:74:5c:e2:f6:93:ae:27:c4:e4:91:
ef:be:49:e7:7c:33:0a:52:1f:ba:1b:74:a6:a0:9d:
fa:24:39:e8:80:1b:fd:7e:22:e7:80:a0:c5:7e:b8:
dd:a0:7e:fa:7e:b9:f2:f3:df:1c:e9:20:fb:ea:ad:
df:90:fd:a5:6a:c5:67:b7:b5:a1:4c:39:ee:97:70:
14:e0:b6:f0:30:3f:b1:9c:0d:52:fb:71:47:24:b3:
d2:82:27:a1:84:65:18:63:9b:bb:e0:cf:0a:79:1a:
54:da:cb:c8:5b:23:8c:46:27:9c:8e:af:42:48:6b:
0a:81:c7:7d:f8:ef:4e:89:30:50:de:6f:0c:7d:3c:
e5:46:99:60:b9:99:05:b2:4f:06:af:c0:70:f0:cb:
21:85:8c:e4:a2:e9:60:0c:c6:dd:7d:17:09:2a:7a:
3a:25:b5:18:f7:43:92:11:98:ee:c0:25:00:39:9c:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:E2:29:8E:4B:9F:82:D4:FD:9A:FE:83:21:A2:B0:1B:11:26:31
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:53:3e:8a:6f:91:81:65:9e:a4:70:9d:63:2b:bd:ac:37:
d8:0f:28:8a:57:10:a5:3e:ec:86:36:3f:b1:e8:d8:5a:68:65:
ba:4f:c2:e7:de:08:ee:c8:9f:b9:cb:22:17:bc:30:59:71:48:
1d:21:23:7b:5c:06:71:a9:68:7d:59:a3:92:50:34:ab:82:94:
49:c7:25:dc:20:6b:28:98:27:72:64:21:56:34:38:e8:2c:99:
28:59:15:9b:73:a8:c5:31:d7:71:7d:5e:38:9e:49:66:20:fe:
65:c7:4a:10:bb:45:5d:c4:53:0e:c9:3d:65:15:56:9d:fd:1a:
9f:ae:b4:48:d1:48:ff:77:6e:46:ba:07:87:34:c8:dd:95:47:
60:3a:5b:ba:28:55:51:61:e9:c2:f7:bc:e1:19:53:11:48:45:
96:1b:19:2f:f2:8b:0a:16:2e:57:6e:9e:f8:e3:73:51:f6:e6:
9c:3d:56:e0:74:e4:a1:f8:55:86:43:de:05:e4:d8:77:f4:6e:
34:e5:23:5c:60:45:70:79:f3:ed:25:53:61:a8:e0:78:d5:38:
3d:78:84:a7:eb:ab:ab:a1:17:c1:ba:4a:b2:8c:e1:d7:10:ea:
8e:40:c4:12:8e:47:9f:6a:01:c1:a0:8a:6a:96:a3:b4:c7:70:
6e:9a:54:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U274CXfwHZXnYeM7G8WFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi
YWIxYjYwHhcNMjYwNzI0MTYwMDU2WhcNMjYwNzI1MTYwMDU2WjAzMTEwLwYDVQQD
EygzMDdhZTIyOThlNGI5ZjgyZDRmZDlhZmU4MzIxYTJiMDFiMTEyNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91uf6iNXJDYSyOBp7BfEvRWOWSug
xbrlTIJ0YstboHLvwZjLgrNZ8raAM3ZQifaGOHRHSzhF4hilDgD0orjrN4gYmlLy
x50mYRC9aqf6RHRc4vaTrifE5JHvvknnfDMKUh+6G3SmoJ36JDnogBv9fiLngKDF
frjdoH76frny898c6SD76q3fkP2lasVnt7WhTDnul3AU4LbwMD+xnA1S+3FHJLPS
giehhGUYY5u74M8KeRpU2svIWyOMRiecjq9CSGsKgcd9+O9OiTBQ3m8MfTzlRplg
uZkFsk8Gr8Bw8MshhYzkoulgDMbdfRcJKno6JbUY90OSEZjuwCUAOZwcOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB64imOS5+C1P2a/oMhorAbESYxMB8GA1UdIwQY
MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt
YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji
LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3NTPopv
kYFlnqRwnWMrvaw32A8oilcQpT7shjY/sejYWmhluk/C594I7sifucsiF7wwWXFI
HSEje1wGcalofVmjklA0q4KUSccl3CBrKJgncmQhVjQ46CyZKFkVm3OoxTHXcX1e
OJ5JZiD+ZcdKELtFXcRTDsk9ZRVWnf0an660SNFI/3duRroHhzTI3ZVHYDpbuihV
UWHpwve84RlTEUhFlhsZL/KLChYuV26e+ONzUfbmnD1W4HTkofhVhkPeBeTYd/Ru
NOUjXGBFcHnz7SVTYajgeNU4PXiEp+urq6EXwbpKsozh1xDqjkDEEo5Hn2oBwaCK
apajtMdwbppUbg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:07 2026 by rpki-client