Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: ONY5hFMMwTwa/CRiaPPwmVOawNXpzlf8X6ATnKbamBA=
Subject key identifier: 60:E7:EC:81:9C:98:43:2E:19:65:C7:A1:FF:29:66:4A:E8:07:63:8C
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019D27A8F7FF195E9EDDB830774534517D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0FE4
Signing time: Thu 26 Mar 2026 01:01:18 +0000
Manifest this update: Thu 26 Mar 2026 01:01:18 +0000
Manifest next update: Fri 27 Mar 2026 01:01:18 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: g5sHY4Hhem3YwHe9DWbrrDj24ZqM6WyuzOhbBinRN5I=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f7:ff:19:5e:9e:dd:b8:30:77:45:34:51:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 26 01:01:18 2026 GMT
Not After : Mar 27 01:01:18 2026 GMT
Subject: CN=60e7ec819c98432e1965c7a1ff29664ae807638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:e8:50:a0:e9:5b:4b:dc:e4:98:65:1e:75:
1b:5e:48:92:df:09:9d:ad:c8:1e:25:7b:e1:ed:0b:
05:1e:57:3b:27:0f:ca:13:3f:ab:94:6d:a5:15:a3:
ad:27:65:3e:5d:7a:20:da:43:76:32:77:d7:87:38:
be:74:c7:40:aa:c7:47:3c:ed:df:7e:62:59:ae:c9:
62:b3:af:6d:39:23:68:19:f6:be:8b:4f:eb:f4:ef:
e1:c7:16:34:26:b6:51:99:22:40:31:fd:2e:57:df:
cd:06:54:dc:61:dd:bd:a3:ab:d9:78:1a:a5:5b:d8:
18:18:4b:85:23:d5:07:15:9f:09:86:e0:1e:f0:82:
46:f5:86:1a:90:2a:b2:9d:97:6e:de:e9:83:09:24:
90:4b:f8:62:5d:b0:83:88:98:af:f1:d7:e7:b0:02:
04:b8:71:c4:20:f4:7a:5e:0b:43:0b:7f:c4:f6:4e:
e8:ce:3c:33:a9:a1:39:af:a1:18:0f:dc:3d:c6:3d:
32:fd:eb:70:66:27:09:54:d0:71:b3:3b:fc:7c:d4:
5f:b8:08:4a:60:d0:1e:11:ba:51:f6:bf:8c:d6:1c:
6d:12:b5:73:8d:29:f7:70:22:0b:f2:4d:1b:55:8f:
d3:b0:be:88:d1:09:73:f1:b9:a5:6b:16:7a:d5:4e:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:EC:81:9C:98:43:2E:19:65:C7:A1:FF:29:66:4A:E8:07:63:8C
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:59:f6:39:44:1d:96:06:9f:81:99:e3:ad:88:30:95:f3:09:
9f:af:93:20:63:76:1a:68:f6:d2:90:b9:79:71:b1:14:81:f4:
a9:af:b9:67:50:d5:8b:84:0c:11:91:ee:87:31:61:53:6f:75:
a1:2c:0f:d3:fb:10:62:4d:56:28:79:64:94:42:da:a5:2f:26:
ca:8d:90:d9:f9:4b:dc:9b:93:40:da:b3:a7:8e:68:a8:0b:6c:
ec:63:73:32:e7:9a:c7:b3:ac:21:c3:51:33:ae:5b:28:81:06:
14:2a:11:f9:7e:62:e7:92:c1:c8:cd:64:fe:6c:f4:31:cc:eb:
77:b0:c6:73:c3:7d:7c:2f:a7:c9:33:18:e8:73:8b:32:8b:04:
97:bc:6c:d1:10:5a:00:d3:02:df:74:71:82:d4:48:26:36:1e:
e0:0f:07:a1:3b:68:a3:ab:cf:3c:50:eb:eb:35:68:16:ef:82:
fc:d1:47:1f:c4:93:42:55:d4:6d:07:e1:4b:f5:f9:49:18:25:
ce:36:5b:91:6f:80:ce:bf:32:3b:ed:7a:e3:74:5f:02:7e:28:
4b:ea:1f:27:e1:27:0a:07:c6:ec:4c:31:78:c2:60:23:31:9c:
62:ac:f2:ae:74:19:3c:d8:ec:88:de:9b:9d:17:c9:89:44:90:
d6:72:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:45 2026 by rpki-client