Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: g2KcWrTn4/yVM5kIPh+8PNU/Bfkc0SUAiHSmyZ9xEX8=
Subject key identifier: A1:4C:72:B1:AB:41:56:87:BD:26:79:4C:77:AB:22:F4:32:E9:7A:FE
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019D265EE7D3362EEFF3DD05A612DBBF1247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0EE1
Signing time: Wed 25 Mar 2026 19:00:46 +0000
Manifest this update: Wed 25 Mar 2026 19:00:46 +0000
Manifest next update: Thu 26 Mar 2026 19:00:46 +0000
Files and hashes: 1: BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa (hash: XPAzl9bkrz2kxf/zVv1dmu57yasth2+5TX42SAtg2YE=)
2: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: arkmGW3OFFmo9lgaXaikNEgWih9pSrRwbqSPOC3bglg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e7:d3:36:2e:ef:f3:dd:05:a6:12:db:bf:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Mar 25 19:00:46 2026 GMT
Not After : Mar 26 19:00:46 2026 GMT
Subject: CN=a14c72b1ab415687bd26794c77ab22f432e97afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:12:30:cc:19:dd:86:5b:78:7b:83:2e:66:
40:63:45:1f:22:67:84:a9:86:c7:a8:44:ca:82:5e:
b4:fd:7e:ed:1f:d9:ee:00:6d:16:fd:c0:e5:ab:3c:
4d:bc:0e:f3:30:95:4d:28:9b:b9:6e:fa:8a:f1:02:
fb:7c:75:e4:d4:5d:3c:78:72:8e:5b:00:7d:8c:a3:
42:71:85:0a:ea:8c:63:45:af:4d:f5:6f:60:16:f1:
01:ce:4a:75:50:c0:e9:49:b8:18:3c:b1:44:39:a6:
74:8d:cb:6d:41:cd:d2:3b:b6:08:a4:6d:af:92:65:
32:35:8a:bd:b0:90:97:99:c2:f4:2a:ea:56:1f:cd:
ce:17:e3:b0:23:11:d1:68:8d:e1:8d:35:94:da:6f:
1e:e7:9d:4f:5e:91:52:ce:6e:a1:cc:14:36:95:98:
5c:11:44:27:f3:c2:36:fc:cb:48:e0:b1:ad:a6:a6:
27:d5:0a:82:33:bf:66:1f:b5:08:50:08:dd:db:11:
9a:87:7e:56:43:0a:db:bc:4e:71:d8:7a:61:af:f1:
47:98:94:c3:ba:1b:b9:dd:bd:10:b5:16:c8:39:3f:
1a:b0:c5:c1:87:53:fc:de:88:74:7f:83:d7:05:82:
60:8b:fe:b9:6e:bf:0b:0e:46:72:d0:c7:cf:3f:00:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:72:B1:AB:41:56:87:BD:26:79:4C:77:AB:22:F4:32:E9:7A:FE
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:6c:b5:43:cc:6b:f1:1c:53:ca:da:0f:ec:81:91:fe:4f:
e5:5f:b8:52:62:f5:03:9d:90:9e:3e:97:3f:de:16:d5:d9:52:
ea:4a:d2:a8:bd:92:b1:fb:8c:bd:fd:91:4a:f8:c6:98:f4:34:
4e:ad:1d:b7:69:73:5e:45:3f:68:a1:0e:3a:a5:f3:35:8f:ef:
aa:aa:c1:91:9b:de:93:86:d6:15:1a:5b:eb:58:a1:c7:cc:3a:
8c:73:cb:13:3e:43:6e:02:4b:46:57:ac:20:26:9b:29:9e:3a:
5a:8c:73:f3:a0:11:37:a0:9b:0c:3b:0e:d7:a8:35:7f:51:90:
09:fe:50:a8:67:79:49:ed:a2:47:d9:a2:2f:2a:ca:66:ba:8d:
94:91:92:15:cd:3b:0e:01:53:46:d4:64:11:de:5c:93:95:0d:
2a:b9:e1:5d:a0:96:b7:bf:f4:8f:1c:7f:f0:bd:c8:e7:71:e3:
fb:9f:33:23:21:46:b4:49:91:5d:71:f2:2f:6c:af:59:33:63:
5c:50:c0:89:ba:58:98:8d:4d:ca:25:9a:5f:6c:69:8a:60:72:
c4:08:96:77:a7:a0:a1:16:74:df:a2:bc:1a:2c:cd:84:8d:ab:
6f:08:e7:4a:9f:fd:e5:a2:e1:6e:d9:f9:03:94:a9:ce:83:cc:
54:87:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:50 2026 by rpki-client