Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: oY9Ql8MiR/rE5Nuhnoe0/FJI/jaOAd0WniPxJgrE7Gs=
Subject key identifier: 0A:2A:AA:CD:A9:ED:0E:1E:51:D3:95:2F:17:F9:85:95:72:86:64:79
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019F91A43CA7839428C9ADB2CDC1856DA728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 1124
Signing time: Fri 24 Jul 2026 01:01:27 +0000
Manifest this update: Fri 24 Jul 2026 01:01:27 +0000
Manifest next update: Sat 25 Jul 2026 01:01:27 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: iKpBoICDpEszBqe1Q7G6p6M2+Ite8vSdVrSGYxMmd7g=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:3c:a7:83:94:28:c9:ad:b2:cd:c1:85:6d:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jul 24 01:01:27 2026 GMT
Not After : Jul 25 01:01:27 2026 GMT
Subject: CN=0a2aaacda9ed0e1e51d3952f17f9859572866479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:de:03:e4:49:0e:36:14:b0:00:d5:e9:3e:
3a:31:98:f3:15:19:65:e2:40:46:cf:ef:7b:3a:13:
a3:24:54:7e:fb:5f:26:7f:a1:f5:12:a1:b6:b4:8b:
d9:f7:c5:06:6f:4d:02:5f:fc:28:43:e7:2a:5e:d6:
69:d5:f3:be:c3:88:cc:9f:cf:30:08:dc:0e:70:d9:
90:66:6a:3f:53:f6:78:5f:86:84:30:dc:4a:2f:4a:
8b:81:14:f9:59:29:1f:7f:0e:4d:87:0d:b0:8a:4a:
e0:12:3a:5e:26:e7:43:de:ab:6b:77:c5:97:f3:16:
f4:3d:03:86:81:09:ef:da:52:97:63:58:95:0d:06:
7f:20:cf:da:aa:68:3b:b0:55:35:09:fc:c7:1d:d2:
01:ab:00:b7:73:aa:51:ac:43:72:99:47:cb:e5:3a:
f5:c2:bb:6f:5a:be:d0:55:96:20:b1:af:71:4c:60:
eb:77:7a:97:82:3c:6e:86:a2:49:5a:0d:b9:4f:c9:
96:72:d8:1f:89:15:00:48:7b:96:2b:23:fa:fe:79:
60:c6:f9:1f:be:2c:53:4e:8c:ce:d5:35:0a:43:4d:
5d:eb:2f:ff:f9:45:0c:9a:8d:79:dd:2a:d6:f3:82:
1a:1d:68:13:6f:00:9b:29:21:9f:82:bc:9c:58:64:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2A:AA:CD:A9:ED:0E:1E:51:D3:95:2F:17:F9:85:95:72:86:64:79
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d7:10:5c:68:ef:f7:ea:ac:fb:f0:57:f7:36:e1:22:08:84:
f9:d6:48:d4:04:cb:8e:97:7d:66:28:ca:ae:46:3d:f5:6b:8b:
a2:ed:2a:bb:0e:9d:35:fe:23:45:13:b3:fc:c1:18:b9:88:81:
37:c4:55:bf:e9:8d:e0:8d:02:e5:6d:f8:c6:53:ce:3e:de:5e:
14:26:5a:47:62:e6:69:d5:bd:1f:32:50:82:2e:fa:de:c6:3f:
41:be:bd:eb:0b:51:b9:3c:94:0c:5a:75:d7:44:73:ce:0e:c0:
ff:da:8f:2a:1e:5e:97:0b:78:69:86:0f:d2:18:ec:70:eb:0a:
7d:14:d5:bd:41:7f:ab:3e:23:b4:9e:ec:ee:12:b0:db:6b:98:
82:ef:6a:54:8a:d6:6e:b9:4e:cd:89:9d:54:35:b9:42:d4:61:
38:41:52:65:4e:9d:da:e4:0a:9d:69:d6:b9:a2:ba:03:4a:28:
81:f1:a7:4a:a5:20:f8:89:cf:53:be:ef:62:3f:b0:eb:73:4f:
39:7f:f6:b8:61:70:28:e6:6f:67:1c:6d:8e:4a:d4:20:16:39:
e5:28:97:ef:42:90:15:73:b3:07:80:e6:39:e5:5a:57:7c:9a:
09:c6:bc:dd:91:82:fd:7c:c0:82:d1:36:f9:59:a2:7d:93:75:
36:6f:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:37 2026 by rpki-client