Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: lkXVVETzEkmDo27ppr1wNGh/t1vcRxH+9x+ix4nNd7g=
Subject key identifier: 45:42:79:CB:A7:A8:9A:5A:A4:58:38:A2:95:39:DF:2A:34:3A:C2:50
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019E1ED99DD89C8226E8227A0443F46337E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 1064
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: 39r7zETloHg6uKaIY0TxvIJUcGLRJsTuPFJwVS5kiuM=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9d:d8:9c:82:26:e8:22:7a:04:43:f4:63:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=454279cba7a89a5aa45838a29539df2a343ac250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:a6:64:3e:f4:d8:92:1d:2f:10:6b:04:f4:
1d:e4:8f:bb:5c:a5:ea:7f:af:11:62:3d:d2:cb:56:
ef:93:d1:93:22:e7:7d:fc:7d:7f:26:d6:2d:98:13:
08:cf:68:e3:25:98:b1:67:7e:9b:75:ea:98:7c:e8:
c2:e6:73:11:68:05:5f:cf:69:2b:a3:f9:50:97:5c:
a0:67:26:ed:e1:cb:7c:ab:12:4d:b5:28:66:0c:52:
cf:e8:0d:63:00:68:d1:a0:e3:19:2e:35:bf:15:a0:
53:c5:fa:5e:a1:8e:8e:ed:b3:dd:7b:8c:d9:0c:14:
4f:10:a7:64:a3:2f:7e:c4:c0:88:97:8f:00:25:00:
60:a0:55:cc:25:03:41:9c:65:26:a6:78:49:95:4d:
8f:c7:d1:47:b5:84:cb:57:02:24:6d:ff:14:09:cb:
cf:e7:35:00:09:44:4d:8d:38:1d:f8:b6:78:5d:50:
e7:43:e3:5f:18:58:ad:d2:5c:77:3c:01:c9:9d:6e:
57:3a:71:7c:19:a7:96:1d:f9:ad:ed:e8:22:b4:d1:
86:3b:37:5f:61:9c:55:84:bc:c8:f8:ef:cd:fb:6c:
9c:f7:e3:59:31:79:ea:01:fc:24:a4:9c:cc:28:96:
1e:a3:c1:42:e4:a6:ab:e6:e5:76:e7:a6:73:57:23:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:79:CB:A7:A8:9A:5A:A4:58:38:A2:95:39:DF:2A:34:3A:C2:50
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:92:5f:83:03:79:e1:78:5c:32:fe:dc:53:bc:b0:ff:c9:d1:
bb:08:6b:13:a5:27:2d:70:63:b5:5f:7b:bb:d3:81:cc:ab:1c:
fc:bd:43:4a:d4:20:6a:f9:7e:82:81:11:ae:8e:45:80:c6:7f:
0a:bc:20:7b:ca:45:49:e9:c5:0f:42:9f:a6:fa:73:bc:24:21:
07:72:b7:1d:cc:20:4b:d0:4a:67:47:95:b5:6b:2c:6c:22:f8:
5f:ac:05:07:2a:8c:92:31:a8:95:7b:72:34:19:c1:6a:ee:f9:
d2:2e:cd:55:39:ad:4e:86:5c:a8:e5:41:8c:52:ed:98:e4:5f:
45:57:cf:02:e2:1d:d4:00:97:03:b2:a8:a7:d7:29:ff:35:12:
e5:7a:43:95:73:51:bb:80:cd:43:50:a9:ff:3f:52:13:83:92:
96:a9:fd:b8:a1:31:dd:cf:a4:6a:d1:c7:28:a9:ba:ab:5b:75:
38:7a:37:d8:01:d3:4d:e8:90:e7:6c:ef:70:6a:ba:5c:21:3f:
23:24:1a:55:6f:ef:78:3e:76:46:7f:53:da:2d:b0:7c:a1:15:
b5:2c:94:1e:48:ad:7a:ea:70:db:19:2d:d3:16:9b:47:ae:a9:
24:08:b2:3b:de:27:4f:93:9b:74:3b:96:e9:80:0f:ca:66:4d:
cb:96:1b:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2Z3YnIIm6CJ6BEP0YzfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk
ZTgxODkwHhcNMjYwNTEzMDEwMDM4WhcNMjYwNTE0MDEwMDM4WjAzMTEwLwYDVQQD
Eyg0NTQyNzljYmE3YTg5YTVhYTQ1ODM4YTI5NTM5ZGYyYTM0M2FjMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSGmZD702JIdLxBrBPQd5I+7XKXq
f68RYj3Sy1bvk9GTIud9/H1/JtYtmBMIz2jjJZixZ36bdeqYfOjC5nMRaAVfz2kr
o/lQl1ygZybt4ct8qxJNtShmDFLP6A1jAGjRoOMZLjW/FaBTxfpeoY6O7bPde4zZ
DBRPEKdkoy9+xMCIl48AJQBgoFXMJQNBnGUmpnhJlU2Px9FHtYTLVwIkbf8UCcvP
5zUACURNjTgd+LZ4XVDnQ+NfGFit0lx3PAHJnW5XOnF8GaeWHfmt7egitNGGOzdf
YZxVhLzI+O/N+2yc9+NZMXnqAfwkpJzMKJYeo8FC5Kar5uV256ZzVyORVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVCecunqJpapFg4opU53yo0OsJQMB8GA1UdIwQY
MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt
YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh
LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5JfgwN5
4XhcMv7cU7yw/8nRuwhrE6UnLXBjtV97u9OBzKsc/L1DStQgavl+goERro5FgMZ/
Crwge8pFSenFD0KfpvpzvCQhB3K3HcwgS9BKZ0eVtWssbCL4X6wFByqMkjGolXty
NBnBau750i7NVTmtToZcqOVBjFLtmORfRVfPAuId1ACXA7Kop9cp/zUS5XpDlXNR
u4DNQ1Cp/z9SE4OSlqn9uKEx3c+katHHKKm6q1t1OHo32AHTTeiQ52zvcGq6XCE/
IyQaVW/veD52Rn9T2i2wfKEVtSyUHkiteupw2xkt0xabR66pJAiyO94nT5ObdDuW
6YAPymZNy5YbjQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:07:10 2026 by rpki-client