
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: /hiS/pHM1Fiq4iug8yxFePE7hY7ZdiZ1mvPIvH5Wt6o=
Subject key identifier: 73:03:75:ED:E3:55:EC:94:C0:C5:F2:9E:89:A3:F6:59:C3:2B:86:08
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01A1DD9523B00F5E0CD783665C09DEAC6632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 093E
Signing time: Sun 15 Nov 2026 05:01:40 +0000
Manifest this update: Sun 15 Nov 2026 05:01:40 +0000
Manifest next update: Mon 16 Nov 2026 05:01:40 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: OduvFGqyz5Tzpf8ohMm4ezS/LmgzdoJ3/IYQcazuT+w=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:23:b0:0f:5e:0c:d7:83:66:5c:09:de:ac:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Nov 15 05:01:40 2026 GMT
Not After : Nov 16 05:01:40 2026 GMT
Subject: CN=730375ede355ec94c0c5f29e89a3f659c32b8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:ee:48:7a:6e:92:9a:4e:13:f6:31:fb:8b:
00:08:ba:00:95:ec:e5:dc:5e:40:a3:a5:44:72:67:
98:66:57:e8:ac:4a:93:f9:b4:44:7d:4e:c4:06:b3:
ef:c9:82:76:50:1a:62:26:42:6e:20:68:39:84:16:
d4:38:13:17:91:ba:70:95:1d:e6:45:04:bf:03:3b:
ea:71:c3:2e:02:7c:24:b4:68:ab:d8:6f:81:e0:93:
dd:5d:2d:74:d1:74:bb:73:39:73:b5:a1:94:6c:af:
3c:71:6a:38:c7:59:c0:24:b1:5d:1a:b3:4b:c8:fb:
c9:32:32:66:7e:37:07:57:b5:fc:df:80:08:f7:4e:
d9:d4:06:10:ae:a4:76:c7:a1:aa:33:e5:95:26:f6:
68:81:be:f1:ef:e8:de:9c:d4:ea:08:4f:53:63:3a:
43:b0:1b:e8:69:6f:86:4a:25:64:50:f2:e2:4b:3d:
9c:ab:00:34:b5:e4:bb:c9:b7:4d:e6:0a:09:08:db:
21:d3:95:bf:65:b8:10:c2:b3:58:8f:3c:6a:44:97:
d0:81:7d:de:d9:f6:92:ee:3c:df:9c:ac:8c:c1:a9:
c1:02:e5:b9:34:68:68:d8:fd:08:56:2b:5f:d0:13:
30:32:d1:13:5d:51:12:40:30:2a:20:23:3e:e4:d7:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:75:ED:E3:55:EC:94:C0:C5:F2:9E:89:A3:F6:59:C3:2B:86:08
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7a:ca:8d:d1:d4:10:21:ed:02:de:29:05:e7:23:35:b0:fe:
32:e0:f1:e5:d2:5d:17:ce:0e:ef:30:71:1e:86:9b:d6:89:67:
a5:e7:9d:25:94:db:a8:26:03:8c:30:15:60:1c:d1:42:9c:3b:
de:ed:4d:1e:ba:d4:6d:7d:ea:32:26:11:16:c7:20:83:af:c0:
5b:75:01:fa:14:b8:9d:c3:5e:69:be:6a:f3:1e:7e:a1:fc:7b:
5f:1f:10:49:b5:17:23:d0:24:5a:93:1c:d5:3c:e7:86:c4:d7:
d1:f4:3e:9c:f2:e5:19:9c:af:03:b5:aa:f5:b3:45:75:0d:2d:
40:ae:27:72:f8:b2:7b:70:76:42:65:62:0b:34:33:76:f1:ef:
7d:66:f3:1a:d7:73:65:96:f3:6a:8e:81:10:eb:78:9f:ed:9b:
fc:ca:a9:71:39:40:e0:10:e0:63:bb:f6:ea:5f:a0:fc:cd:ee:
b3:38:29:8d:01:b3:9b:b7:24:22:ae:da:93:94:cd:20:98:2e:
d6:3b:50:21:c4:9c:b8:34:ec:4f:48:ef:ae:40:15:a1:ea:71:
cf:91:d7:ae:a5:4c:f8:e5:80:0d:3e:6e:de:5f:b4:b6:3a:7e:
a2:12:e7:54:9c:13:b5:40:ce:d6:a5:8b:67:c4:92:ab:aa:6c:
ba:0d:5c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlSOwD14M14NmXAnerGYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjYxMTE1MDUwMTQwWhcNMjYxMTE2MDUwMTQwWjAzMTEwLwYDVQQD
Eyg3MzAzNzVlZGUzNTVlYzk0YzBjNWYyOWU4OWEzZjY1OWMzMmI4NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHruSHpukppOE/Yx+4sACLoAlezl
3F5Ao6VEcmeYZlforEqT+bREfU7EBrPvyYJ2UBpiJkJuIGg5hBbUOBMXkbpwlR3m
RQS/AzvqccMuAnwktGir2G+B4JPdXS100XS7czlztaGUbK88cWo4x1nAJLFdGrNL
yPvJMjJmfjcHV7X834AI907Z1AYQrqR2x6GqM+WVJvZogb7x7+jenNTqCE9TYzpD
sBvoaW+GSiVkUPLiSz2cqwA0teS7ybdN5goJCNsh05W/ZbgQwrNYjzxqRJfQgX3e
2faS7jzfnKyMwanBAuW5NGho2P0IVitf0BMwMtETXVESQDAqICM+5NeMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMDde3jVeyUwMXynomj9lnDK4YIMB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3rKjdHU
ECHtAt4pBecjNbD+MuDx5dJdF84O7zBxHoab1olnpeedJZTbqCYDjDAVYBzRQpw7
3u1NHrrUbX3qMiYRFscgg6/AW3UB+hS4ncNeab5q8x5+ofx7Xx8QSbUXI9AkWpMc
1TznhsTX0fQ+nPLlGZyvA7Wq9bNFdQ0tQK4ncviye3B2QmViCzQzdvHvfWbzGtdz
ZZbzao6BEOt4n+2b/MqpcTlA4BDgY7v26l+g/M3uszgpjQGzm7ckIq7ak5TNIJgu
1jtQIcScuDTsT0jvrkAVoepxz5HXrqVM+OWADT5u3l+0tjp+ohLnVJwTtUDO1qWL
Z8SSq6psug1cjg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:39:31 2026 by rpki-client