Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: 8ZDtnOAvefWz8L4s6HHYJc0GOIufG1rh4TQT6sR+fGM=
Subject key identifier: C3:39:B9:C8:C9:F6:41:6B:9D:B6:5B:2A:17:29:6A:E2:5A:5A:C1:F9
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01A0DACD0E573E12046069B09482CD71664D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 08B8
Signing time: Fri 25 Sep 2026 23:01:06 +0000
Manifest this update: Fri 25 Sep 2026 23:01:06 +0000
Manifest next update: Sat 26 Sep 2026 23:01:06 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: NAZ9aHFFImoV8D9vOBtnEC/UtmZs9dBjV1tEIhlMIfE=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:0e:57:3e:12:04:60:69:b0:94:82:cd:71:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Sep 25 23:01:06 2026 GMT
Not After : Sep 26 23:01:06 2026 GMT
Subject: CN=c339b9c8c9f6416b9db65b2a17296ae25a5ac1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:15:cf:6f:db:16:94:2a:48:36:bc:64:1e:
70:95:21:63:ce:96:97:c2:1d:99:c7:93:08:1f:2b:
66:9c:08:0c:6a:16:71:ae:ce:be:e2:88:78:67:0f:
3f:a3:96:50:21:98:70:d1:6b:2f:ad:11:7f:62:d4:
10:bf:86:55:75:47:f2:12:88:aa:32:4a:0a:04:69:
52:b4:63:ab:9a:f4:b4:51:91:d6:58:4f:32:be:38:
4d:cf:46:54:50:c3:a4:66:ea:7e:e1:96:6b:f2:75:
aa:f4:3d:13:4f:23:73:fe:53:0d:25:af:21:8f:b7:
f0:07:dc:6f:6a:f5:d1:c7:6e:26:fa:eb:32:3e:b8:
9e:54:de:82:31:6b:ed:8a:20:bb:a8:73:70:e4:6f:
a6:22:61:17:49:44:34:a0:17:a1:04:51:5b:c4:e2:
5f:98:29:83:1d:a3:a2:cc:98:29:6e:71:7f:a5:fc:
4e:15:a7:cf:ed:51:e6:2d:6a:72:5f:9c:f7:33:a2:
80:56:04:9e:3a:44:79:d6:be:42:44:ad:89:d4:d6:
c0:bc:90:1f:ab:b3:c0:97:cd:f6:e7:8b:d8:97:e1:
b3:07:70:13:ed:50:1a:66:65:98:83:dd:27:10:6f:
6c:1f:18:ce:50:ab:c4:36:12:79:0c:50:58:08:2e:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:B9:C8:C9:F6:41:6B:9D:B6:5B:2A:17:29:6A:E2:5A:5A:C1:F9
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:72:29:5d:47:da:df:31:0f:56:ca:05:a2:6f:61:bc:f4:
c4:1a:ad:fa:a3:08:52:bc:a3:7b:9f:a6:56:85:bb:ec:62:69:
82:1b:35:f5:90:0c:f1:40:67:4b:50:8d:de:2c:82:cf:7f:71:
dc:da:5d:79:a9:5a:e1:9e:78:0f:26:8b:75:17:e0:76:6d:c2:
10:a5:b4:b9:c1:dd:b8:76:7c:0b:c1:f6:19:90:79:08:bc:be:
d5:00:ab:8f:24:f1:0c:af:b2:1b:0c:10:b9:f7:9a:97:16:ce:
ff:6a:94:77:e5:ba:45:5b:31:a3:1e:e5:75:9e:2b:51:58:28:
4b:9b:c9:9c:bb:ca:31:85:43:14:87:f6:7c:70:23:30:1b:40:
b3:f9:86:ee:1d:bf:ea:72:de:b0:e4:93:cc:c9:87:55:8e:28:
16:69:0f:0b:81:16:69:43:3d:ff:ed:4b:61:a5:bc:58:38:27:
f6:f1:6b:15:f3:a2:46:67:ab:c4:d4:93:0c:db:a3:d6:ec:34:
78:70:cf:8f:d5:94:94:4a:82:b4:f8:ad:9e:00:02:ea:77:43:
1f:f7:d5:59:47:9f:64:33:57:a0:f7:b0:f4:e8:64:09:20:31:
36:db:de:ba:69:04:01:b7:69:e2:b6:3c:ad:d6:22:3e:2d:23:
4c:34:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:49 2026 by rpki-client