Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: eL2SZnMQkjFxevWUDud2DP/dOROfnAz5BZKnBECLpZA=
Subject key identifier: A5:78:51:B3:09:07:93:9E:1D:81:87:AF:F7:45:BD:5A:15:CE:76:B9
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019F927F0D3689DD2A2C3E4A6DB80A3BBDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 080E
Signing time: Fri 24 Jul 2026 05:00:27 +0000
Manifest this update: Fri 24 Jul 2026 05:00:27 +0000
Manifest next update: Sat 25 Jul 2026 05:00:27 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: T/p5ulGAa8Xh5jbVmDsYLU/hTervbmaXlfEoYdPdnvs=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0d:36:89:dd:2a:2c:3e:4a:6d:b8:0a:3b:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jul 24 05:00:27 2026 GMT
Not After : Jul 25 05:00:27 2026 GMT
Subject: CN=a57851b30907939e1d8187aff745bd5a15ce76b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:4f:cd:80:ac:c0:34:3c:7d:f4:37:67:b7:
c2:3f:f4:4b:eb:f0:af:fb:76:97:03:cf:a0:d5:ad:
b1:85:f5:d7:9b:60:44:84:7e:bd:05:f1:ce:19:fa:
bf:2e:fd:76:bf:f0:23:5f:56:5b:07:8b:95:72:36:
1a:b9:f6:4a:e7:d2:45:95:f3:6f:36:89:66:d0:03:
a1:c9:f1:1a:a0:cd:7a:63:3f:7c:8e:17:11:dd:65:
8f:54:8c:6e:c4:d9:86:79:53:b1:22:f0:5c:dd:d3:
e8:84:ed:71:05:59:57:0f:c9:7f:d2:db:90:be:ee:
54:80:98:90:6b:f3:b9:d5:14:26:71:84:b2:c4:b1:
83:94:64:c9:65:d5:9c:0a:ca:e1:a0:a3:01:49:45:
aa:f1:53:a4:00:41:df:2e:0a:6b:e2:61:12:25:4f:
e3:c8:eb:b0:76:d7:e5:4e:9b:da:8c:e0:97:65:09:
c5:83:bd:6d:81:fe:0f:0b:ff:43:8c:f0:ff:19:e9:
88:66:76:5f:4e:68:54:15:14:6f:5a:ef:a0:ea:2c:
da:45:12:81:60:5f:a8:f3:02:17:d1:b1:c6:a4:b9:
ca:53:46:a8:08:15:1c:c5:69:3d:bb:a0:e0:96:51:
50:09:3b:b2:80:7c:dd:3d:c2:66:2d:bb:34:18:5c:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:78:51:B3:09:07:93:9E:1D:81:87:AF:F7:45:BD:5A:15:CE:76:B9
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3c:6e:6d:24:71:ca:50:45:6a:db:19:b1:49:24:aa:a6:a4:
42:3d:54:ba:ab:80:6c:b6:eb:b8:ed:50:c9:b1:9f:76:30:bc:
5b:6d:25:bd:0f:d4:8b:48:0b:05:39:4b:c0:61:7c:35:7a:b1:
b5:d1:32:07:60:3d:16:46:b8:78:73:de:f0:40:f6:f3:ef:51:
36:a4:99:97:5f:8a:80:e0:87:07:3f:1c:5a:23:f6:28:9f:be:
a4:9c:30:35:04:0e:71:4c:e9:09:77:8e:a8:e4:e3:c1:96:4c:
c2:f6:82:44:5d:b6:92:5b:6a:3e:f2:06:22:ab:6f:da:1d:0d:
69:1e:b5:b7:54:2f:b5:14:5c:07:2c:87:df:c6:a0:50:1b:94:
e4:65:63:06:83:04:25:6c:c7:44:14:25:3c:97:d0:79:51:1a:
cf:ee:2d:18:19:7a:02:e3:8c:9e:55:c6:68:1d:b4:6d:1d:9e:
a4:b9:be:4d:77:03:48:10:48:00:de:a0:f1:f3:c6:37:ae:cb:
e7:3a:be:be:8b:2c:b4:31:e7:ec:e9:5f:8e:dd:1e:2b:2f:9e:
41:aa:09:9f:15:8d:5b:b2:1d:61:58:87:12:e6:cc:3a:03:de:
9a:a6:ff:1f:51:22:b9:d6:4d:23:88:b3:9a:df:88:37:28:4f:
e7:4c:5b:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sfw02id0qLD5KbbgKO73iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjYwNzI0MDUwMDI3WhcNMjYwNzI1MDUwMDI3WjAzMTEwLwYDVQQD
EyhhNTc4NTFiMzA5MDc5MzllMWQ4MTg3YWZmNzQ1YmQ1YTE1Y2U3NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D9PzYCswDQ8ffQ3Z7fCP/RL6/Cv
+3aXA8+g1a2xhfXXm2BEhH69BfHOGfq/Lv12v/AjX1ZbB4uVcjYaufZK59JFlfNv
Nolm0AOhyfEaoM16Yz98jhcR3WWPVIxuxNmGeVOxIvBc3dPohO1xBVlXD8l/0tuQ
vu5UgJiQa/O51RQmcYSyxLGDlGTJZdWcCsrhoKMBSUWq8VOkAEHfLgpr4mESJU/j
yOuwdtflTpvajOCXZQnFg71tgf4PC/9DjPD/GemIZnZfTmhUFRRvWu+g6izaRRKB
YF+o8wIX0bHGpLnKU0aoCBUcxWk9u6DgllFQCTuygHzdPcJmLbs0GFz/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV4UbMJB5OeHYGHr/dFvVoVzna5MB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjxubSRx
ylBFatsZsUkkqqakQj1UuquAbLbruO1QybGfdjC8W20lvQ/Ui0gLBTlLwGF8NXqx
tdEyB2A9Fka4eHPe8ED28+9RNqSZl1+KgOCHBz8cWiP2KJ++pJwwNQQOcUzpCXeO
qOTjwZZMwvaCRF22kltqPvIGIqtv2h0NaR61t1QvtRRcByyH38agUBuU5GVjBoME
JWzHRBQlPJfQeVEaz+4tGBl6AuOMnlXGaB20bR2epLm+TXcDSBBIAN6g8fPGN67L
5zq+vosstDHn7Olfjt0eKy+eQaoJnxWNW7IdYViHEubMOgPemqb/H1EiudZNI4iz
mt+INyhP50xbdg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:10 2026 by rpki-client