Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: OFPQ/OmwlMIeuotX0syO5v1HyPwCUXiIsDyJQdL2KHk=
Subject key identifier: E3:C7:FA:6E:3C:A4:93:74:9C:22:28:24:CB:9A:16:66:CA:09:D0:5F
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019D26961660E7FC022A231D8F4FEE196661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 06CD
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: PmYgytvOaCnrKBxxl3K81sFawjivRN2QWPm1wjS/lu0=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:16:60:e7:fc:02:2a:23:1d:8f:4f:ee:19:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=e3c7fa6e3ca493749c222824cb9a1666ca09d05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:2b:71:4e:bb:42:dc:ea:07:3b:cd:9f:0a:
63:b9:40:3a:78:67:b7:d2:4d:34:65:66:21:a7:9e:
da:37:a3:b6:72:ba:55:05:41:0c:bf:c4:13:6e:41:
87:b5:44:3a:19:d8:dd:d2:64:9f:43:26:9d:ea:bf:
88:0e:29:97:1b:ee:45:e4:a3:4b:b4:fb:1a:3e:0a:
7d:70:45:af:ec:ae:d4:22:2c:ad:21:67:75:5c:34:
d0:9f:db:be:d5:ee:da:39:6d:ec:98:bd:f1:85:49:
48:82:4a:92:5d:4c:6a:f7:b3:c6:e9:20:ae:1b:7b:
fe:cb:c3:9a:23:a9:bf:a4:35:3a:3e:1a:9a:3e:8c:
b2:eb:e3:3b:ff:ca:cd:ec:8b:0a:9f:48:4b:76:d6:
0e:4b:b8:42:12:66:f6:5f:3c:32:d0:b4:31:53:d6:
55:85:c6:7b:6a:43:fc:cc:8a:2a:7c:2e:11:80:66:
20:b6:dd:7d:f3:48:72:17:a0:49:fe:0a:e4:f1:7b:
35:d6:be:2a:a0:6a:47:7a:8e:8b:9b:b2:0f:f7:66:
aa:18:8f:14:88:25:f4:5c:3b:a6:89:40:7e:cf:01:
7c:c8:c8:fb:07:44:04:7e:f4:1a:7d:f7:c5:f2:fd:
c4:08:18:4a:67:fc:33:a3:bc:8a:c8:a9:80:84:1c:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:FA:6E:3C:A4:93:74:9C:22:28:24:CB:9A:16:66:CA:09:D0:5F
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:20:70:01:6b:25:c3:53:90:cc:38:a7:58:fa:ce:7d:07:
80:3d:ca:80:9e:3e:c7:7b:71:3c:81:e9:88:2c:7d:5f:35:57:
7b:8b:9a:5d:49:24:d6:46:26:32:96:b0:bc:80:93:0f:2b:aa:
b4:02:05:81:59:e9:a1:4e:37:e0:5b:e2:79:5b:8e:f8:a1:2e:
50:7a:18:02:1a:e1:65:9b:09:b1:4c:bb:a4:87:2e:50:b6:83:
bf:31:45:9c:30:b9:fc:a9:bb:77:d7:5e:70:fe:9a:16:7a:0e:
99:89:c3:75:6d:71:29:90:d0:6f:5f:1c:c2:d0:97:f1:79:c5:
e7:26:7a:5e:cb:b8:ce:e9:08:59:07:bc:7a:b2:46:9f:bc:4e:
b3:3f:5f:6e:2f:ec:ab:b4:f4:f6:17:6b:cb:7a:bc:19:7e:05:
09:51:ac:ec:f0:3a:43:c4:be:3e:b9:57:db:37:0a:6e:f8:95:
db:d6:05:82:54:bf:ba:2a:30:03:78:09:86:2e:79:c3:95:4d:
77:88:6e:31:fb:6d:a9:c0:15:93:f1:d5:4e:b5:dc:8b:58:5e:
d3:56:7e:4f:06:38:19:ec:83:78:10:eb:76:06:18:1b:60:8b:
64:d8:71:d0:28:4c:0b:bf:0e:11:60:6f:c8:71:4b:be:f3:39:
22:11:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:39 2026 by rpki-client