Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: DXrCaJkRDXiekkOwsvz1g4gVu77Htki80hvpJbclZek=
Subject key identifier: 83:3E:F9:76:47:A5:B4:73:6B:4A:91:A4:9D:A1:2C:08:2C:1C:B3:1D
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01A13222A00AB1DCEFFBCB59FE40EBB2DD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0AB0
Signing time: Mon 12 Oct 2026 22:01:32 +0000
Manifest this update: Mon 12 Oct 2026 22:01:32 +0000
Manifest next update: Tue 13 Oct 2026 22:01:32 +0000
Files and hashes: 1: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (hash: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=)
2: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: 5sftbjrXJrNnZYX5pqspN9lgMJwufmYOgf0950WNsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:a0:0a:b1:dc:ef:fb:cb:59:fe:40:eb:b2:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Oct 12 22:01:32 2026 GMT
Not After : Oct 13 22:01:32 2026 GMT
Subject: CN=833ef97647a5b4736b4a91a49da12c082c1cb31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:93:fb:f8:20:50:42:27:db:cb:b4:71:84:
a5:ab:0a:23:4c:bf:14:8b:32:5a:82:2d:9d:56:64:
20:3b:5c:57:bb:9e:dd:4a:e9:fb:6a:92:a1:a6:b6:
85:aa:bf:96:8b:88:03:32:27:69:3e:d4:29:21:f7:
03:a1:ad:0e:3c:21:c7:43:2c:9a:2f:8a:4e:9c:9e:
44:ad:a1:28:5a:dc:f0:b5:cf:2d:e3:cb:12:32:d1:
02:6c:01:6f:fe:70:80:e7:b8:01:35:96:b2:c9:c2:
ce:b6:5c:85:82:ce:c6:1d:47:dc:1f:9f:f8:3a:61:
41:66:89:0d:7b:6d:34:6c:a6:16:96:94:30:9f:d7:
ff:ce:08:c1:25:0c:34:eb:74:97:ec:32:39:97:ec:
75:e3:01:2e:4d:bb:3f:e7:81:42:ac:7e:e9:82:77:
8b:44:22:ce:32:77:ec:bb:72:31:9a:cb:ab:f1:9f:
70:b5:cc:97:61:93:a6:f8:3a:cd:47:d3:1e:51:c4:
e0:87:b9:21:86:95:ac:6f:9c:47:82:05:43:ce:fe:
24:24:f2:1b:f4:cc:a0:ce:7f:a8:ed:15:41:f7:44:
af:cd:38:f0:ac:dc:b0:6f:bd:f1:2c:eb:a3:82:1c:
19:bf:95:7a:fb:17:e1:91:86:9e:68:97:cb:e7:8c:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:F9:76:47:A5:B4:73:6B:4A:91:A4:9D:A1:2C:08:2C:1C:B3:1D
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:25:7f:33:41:e6:ab:28:34:30:d3:ae:90:47:b0:09:7c:
db:1b:83:64:37:ed:2b:0e:e9:97:9d:a5:c8:87:d7:d3:a5:19:
6a:10:4b:2a:47:b4:86:dc:48:2f:12:fa:5a:86:61:1e:e0:29:
bb:d3:70:a8:24:3a:00:54:12:26:ed:7e:f1:44:a3:0d:8a:7f:
53:2f:96:29:9a:a7:06:82:0c:a6:9f:e3:25:03:fb:de:b0:1d:
c7:4c:32:16:ea:8e:30:62:f3:21:f3:64:60:b2:b3:15:ba:a8:
cd:6e:16:b2:11:96:68:2d:8f:62:5b:61:53:c6:dc:9f:0a:a9:
fc:46:37:b8:a7:b3:ef:70:c1:3a:80:7d:c5:e3:44:50:ab:aa:
ae:15:0b:e5:69:1c:29:17:26:c7:07:de:3d:d0:88:0b:73:56:
d7:95:47:61:5f:91:6b:14:d4:06:3b:ad:e2:1c:86:68:50:56:
b5:53:42:c0:c2:7b:bc:b3:9e:37:da:d0:6f:52:d0:21:c5:79:
73:4e:8a:b4:5f:d9:a5:be:73:88:a1:df:80:bd:18:e8:3d:ba:
ed:ea:53:e0:2f:77:ed:60:55:c1:85:e7:40:1a:b1:d8:1c:95:
8e:4f:0d:8a:6a:b0:d2:c2:69:cb:d2:0e:fc:1a:22:90:0d:c6:
ef:da:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:39:43 2026 by rpki-client