Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: z261Lm+rXgZwVTrSTYo3sG5ZJzuR/Xk8H4QlzAmIc9s=
Subject key identifier: A6:66:1C:09:7C:93:A1:39:2E:24:3D:34:DE:E2:C3:D5:48:C8:87:D3
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01A0EF2FE91B4B53D27C27BB11B3F8226934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 11D9
Signing time: Tue 29 Sep 2026 22:01:29 +0000
Manifest this update: Tue 29 Sep 2026 22:01:29 +0000
Manifest next update: Wed 30 Sep 2026 22:01:29 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: WOAtEt1uH8Tv39XJXXajxWC7lbSjeFvs62WSFw0Zneg=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:e9:1b:4b:53:d2:7c:27:bb:11:b3:f8:22:69:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Sep 29 22:01:29 2026 GMT
Not After : Sep 30 22:01:29 2026 GMT
Subject: CN=a6661c097c93a1392e243d34dee2c3d548c887d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:4a:a8:bb:21:d4:60:8d:7d:df:59:39:ab:
f7:ae:40:44:b1:c3:c1:c4:81:74:7d:27:97:6c:3d:
05:17:6c:b3:3d:45:d3:2a:47:c6:10:fb:b2:ff:9b:
ec:39:50:3a:d7:c1:68:82:b9:b8:89:4b:07:af:66:
4f:a6:41:4e:f6:5f:31:43:95:ec:de:04:8f:e3:3c:
d1:d6:fc:63:6d:52:6f:80:96:dd:36:c7:bb:84:e7:
65:33:d6:f1:dd:89:56:91:2e:82:5c:91:81:4d:42:
4b:4b:70:b7:39:21:a0:cb:69:fb:43:4f:6d:aa:32:
ea:eb:f6:17:84:c3:5c:f4:8d:17:2d:0b:39:cd:7d:
b5:84:ff:ab:47:e5:6d:5b:dd:5b:49:e2:53:1f:99:
36:16:54:4a:81:01:49:83:f1:98:0c:b1:92:82:21:
69:6a:b6:d4:01:1d:34:52:cb:1f:49:11:df:2a:6f:
cf:ef:d3:a1:8d:68:e9:7d:8f:5a:a9:ac:80:f3:89:
83:9a:08:85:ca:c8:69:b8:3a:f4:06:63:2c:dc:5b:
d3:14:7e:c5:a9:e5:79:0d:4f:6f:61:cb:db:bc:1d:
b1:87:32:24:3d:13:c7:7e:7f:1e:8d:ed:6c:7f:97:
21:5d:3a:fe:10:bd:5c:68:3a:cb:cb:87:9b:37:74:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:1C:09:7C:93:A1:39:2E:24:3D:34:DE:E2:C3:D5:48:C8:87:D3
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:72:41:74:fa:77:17:13:d0:08:fe:42:1f:22:d9:61:7a:1a:
86:a8:f3:db:8f:56:65:a7:ad:a4:8c:7f:c8:b5:6a:49:bd:77:
da:37:fd:d5:80:16:37:7c:f0:12:c2:89:cd:52:61:c4:9d:00:
bd:ca:30:ed:f2:ed:c7:f7:9b:3a:2c:60:b5:0e:4a:0d:e6:80:
b5:f0:a0:5f:58:97:e5:51:c7:4c:91:f3:ba:8f:9a:ad:02:a5:
80:a7:85:a9:5e:10:c9:c1:7a:85:3e:0b:34:8a:1e:a9:c5:7a:
43:45:3a:a0:01:99:ab:ad:0f:b7:e4:a6:44:84:7c:91:0c:f0:
e7:f2:5b:e8:02:c3:25:4a:85:0d:12:aa:c6:60:62:c2:5c:a1:
ff:bb:0b:26:32:5f:4e:ce:29:89:28:b5:ef:e3:53:1c:67:da:
0a:a6:71:65:13:66:29:f9:da:45:ce:a3:6f:bb:6b:a6:90:fc:
26:13:62:8e:99:a9:bb:4c:7b:3b:d8:3a:01:ef:65:41:25:3d:
46:9f:63:36:f9:05:db:d0:6b:a4:9a:47:f1:49:98:59:84:df:
4c:6f:7e:e8:fb:26:d9:40:82:0e:9d:95:e3:30:a5:17:93:ba:
ef:5f:68:7f:c3:c7:e4:5a:bd:cf:e2:70:eb:70:57:04:ce:05:
77:9b:e7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvL+kbS1PSfCe7EbP4Imk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk
ZTgxODkwHhcNMjYwOTI5MjIwMTI5WhcNMjYwOTMwMjIwMTI5WjAzMTEwLwYDVQQD
EyhhNjY2MWMwOTdjOTNhMTM5MmUyNDNkMzRkZWUyYzNkNTQ4Yzg4N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTZKqLsh1GCNfd9ZOav3rkBEscPB
xIF0fSeXbD0FF2yzPUXTKkfGEPuy/5vsOVA618Fogrm4iUsHr2ZPpkFO9l8xQ5Xs
3gSP4zzR1vxjbVJvgJbdNse7hOdlM9bx3YlWkS6CXJGBTUJLS3C3OSGgy2n7Q09t
qjLq6/YXhMNc9I0XLQs5zX21hP+rR+VtW91bSeJTH5k2FlRKgQFJg/GYDLGSgiFp
arbUAR00UssfSRHfKm/P79OhjWjpfY9aqayA84mDmgiFyshpuDr0BmMs3FvTFH7F
qeV5DU9vYcvbvB2xhzIkPRPHfn8eje1sf5chXTr+EL1caDrLy4ebN3R1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZmHAl8k6E5LiQ9NN7iw9VIyIfTMB8GA1UdIwQY
MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt
YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh
LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHJBdPp3
FxPQCP5CHyLZYXoahqjz249WZaetpIx/yLVqSb132jf91YAWN3zwEsKJzVJhxJ0A
vcow7fLtx/ebOixgtQ5KDeaAtfCgX1iX5VHHTJHzuo+arQKlgKeFqV4QycF6hT4L
NIoeqcV6Q0U6oAGZq60Pt+SmRIR8kQzw5/Jb6ALDJUqFDRKqxmBiwlyh/7sLJjJf
Ts4piSi17+NTHGfaCqZxZRNmKfnaRc6jb7trppD8JhNijpmpu0x7O9g6Ae9lQSU9
Rp9jNvkF29BrpJpH8UmYWYTfTG9+6Psm2UCCDp2V4zClF5O6719of8PH5Fq9z+Jw
63BXBM4Fd5vnMQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:50 2026 by rpki-client