Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: s8JWDBBU7aVGkav+E4hOQYfZsX7+3eyCZnox5kZjHqo=
Subject key identifier: 21:8D:D5:3E:F4:0D:E4:50:1C:A6:59:11:06:CB:67:7D:EB:0E:BA:51
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01A0DB3B8CFD64D72489AE806AEA0BB062AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1A57
Signing time: Sat 26 Sep 2026 01:01:48 +0000
Manifest this update: Sat 26 Sep 2026 01:01:48 +0000
Manifest next update: Sun 27 Sep 2026 01:01:48 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: mnriAW4ru+bNN4aeylTgIHgBbWabFbEaH1/CT4hR/1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:8c:fd:64:d7:24:89:ae:80:6a:ea:0b:b0:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Sep 26 01:01:48 2026 GMT
Not After : Sep 27 01:01:48 2026 GMT
Subject: CN=218dd53ef40de4501ca6591106cb677deb0eba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:00:eb:e0:aa:7f:09:ca:6e:a3:53:15:7f:
78:c0:76:5b:09:0f:6a:90:b6:02:1f:0d:8f:db:4a:
3d:77:b2:2b:d7:4e:98:b3:4a:99:12:93:ea:3e:e9:
a0:28:fe:6d:4e:57:0b:6e:e4:c6:04:48:44:83:7a:
f2:df:e6:cd:9f:5f:d9:57:ce:28:0b:f4:15:d3:03:
8f:ae:87:ce:8c:02:da:12:ad:14:88:eb:08:5f:9a:
92:b5:07:9c:c3:73:a9:6a:86:74:51:9c:53:cb:ad:
27:f2:2c:c6:b7:37:78:f6:ee:b5:5a:18:59:a6:75:
4e:3f:76:1c:72:9b:62:88:14:7f:3d:3a:7c:b5:c5:
96:5b:c9:c8:50:af:d6:30:d0:6a:b4:83:a6:89:e2:
5d:be:d9:db:97:bf:41:9f:fb:a1:69:5c:ad:45:8a:
94:ac:e4:fc:d5:3a:85:ce:07:2c:8f:23:15:25:f7:
14:06:c3:df:78:76:f7:31:2e:c5:1e:12:0e:d8:87:
e6:05:b8:b1:7d:ac:9a:7d:fd:e4:67:68:f9:26:e8:
8a:9e:79:2e:c9:24:ba:13:dc:7f:de:02:50:8f:13:
93:10:06:9a:74:6d:0c:d8:c5:25:69:fc:b7:23:6c:
3f:32:de:dd:c1:64:23:9d:86:a8:31:cd:48:11:c2:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:D5:3E:F4:0D:E4:50:1C:A6:59:11:06:CB:67:7D:EB:0E:BA:51
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:51:1f:77:04:c4:52:83:2f:5c:1d:34:45:fa:ec:0c:28:59:
1d:ba:9a:f9:b5:87:c5:4f:e4:4b:e9:70:15:04:77:e8:ff:6f:
a6:1e:cc:b5:39:79:6c:82:74:fe:84:ac:ec:17:60:71:d3:e3:
89:bf:63:f0:ff:15:cd:b8:1e:35:9a:c1:3f:5a:8c:fe:35:1b:
83:63:74:9a:1c:ee:61:cf:87:a2:4e:04:83:7c:37:78:14:6c:
f3:80:9d:b3:df:29:c1:fe:47:7d:ba:b9:dd:3d:7f:69:4d:bc:
b1:c7:77:fa:6b:4d:95:47:02:90:5b:11:71:80:06:a1:cb:4e:
d6:e7:41:2d:a9:5d:d8:66:7c:7f:d3:31:e8:d6:aa:37:72:e7:
73:63:f6:72:54:1f:1f:91:32:ea:f9:96:20:93:41:b8:7d:12:
f2:4e:98:c3:fa:9f:1a:55:f8:8b:1b:35:90:86:cd:35:e2:1f:
ac:b4:94:da:03:d8:ca:6b:1f:17:60:89:b1:9a:4d:15:46:53:
fc:88:c8:33:74:f7:85:eb:c4:d4:03:d5:a9:d6:e3:f8:55:f0:
dc:3c:d1:37:1e:3b:d9:d4:5c:77:fa:ee:74:9f:57:8c:19:8d:
b5:cc:f5:ba:26:57:b9:74:e5:78:2b:29:d0:c2:dc:8e:b0:60:
3e:ba:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:31 2026 by rpki-client