Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: ChMLvnbZa+Z8FnZi7MlRkG9O0sczHwXgwkkqOmHE41s=
Subject key identifier: 53:97:08:56:EC:A1:77:47:3E:39:1C:D6:06:EC:96:20:1E:F7:81:D1
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019E1DC7A757135A9A687A32D0444FA157EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 074D
Signing time: Tue 12 May 2026 20:01:23 +0000
Manifest this update: Tue 12 May 2026 20:01:23 +0000
Manifest next update: Wed 13 May 2026 20:01:23 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: o4zaPw0aKaX7jRifx6ymgO4CYvW8mp16qCd4o/aRle8=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a7:57:13:5a:9a:68:7a:32:d0:44:4f:a1:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: May 12 20:01:23 2026 GMT
Not After : May 13 20:01:23 2026 GMT
Subject: CN=53970856eca177473e391cd606ec96201ef781d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:bf:30:95:35:14:9b:60:1c:67:85:dc:47:
2f:db:8c:39:c4:9f:66:d1:0e:ca:b8:f4:f7:10:8d:
0b:e1:c0:db:1c:6e:83:39:24:2c:f0:cc:f9:9a:23:
a5:f7:fe:5c:cb:8a:37:6d:bd:1e:d8:27:a4:fe:1f:
73:5e:53:d6:1a:9c:8c:94:d0:f2:b2:e9:62:43:4c:
01:7d:52:44:11:6e:eb:09:f3:f1:63:2d:4e:24:f6:
3f:22:a3:68:11:11:6f:ef:1f:44:1b:15:0f:ab:a6:
35:00:12:44:c1:69:28:b0:91:5f:1a:28:57:c4:6b:
41:b8:d0:e9:06:1e:a2:ea:d5:d9:4c:df:af:7e:55:
be:ac:92:02:4b:e7:39:a5:02:c4:ed:1a:c2:53:b2:
1f:c4:31:fb:5b:aa:fb:a9:50:22:4a:9f:6b:87:86:
c9:db:e4:fa:a5:58:29:4f:27:64:e3:b9:02:14:65:
7a:a0:a5:0f:b4:c4:05:ca:12:0a:e8:00:5a:ab:e5:
59:bf:13:95:c3:3f:af:66:f8:b8:eb:11:7f:75:cb:
f5:cb:00:6d:50:f1:de:d1:52:0b:5d:95:19:b1:0a:
cb:9a:8b:03:5f:76:76:9e:24:43:df:8c:8c:e9:25:
5b:90:6a:2a:63:c9:f7:58:79:2f:c9:33:ae:39:f2:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:08:56:EC:A1:77:47:3E:39:1C:D6:06:EC:96:20:1E:F7:81:D1
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:6c:96:d0:a6:38:04:03:1f:0d:5c:b5:0c:44:48:8f:32:
16:15:bb:2a:57:71:ca:a6:a2:17:6a:79:a5:46:f3:71:1b:6c:
8b:6f:a8:40:58:82:0a:02:48:1d:54:97:21:5f:72:71:2c:28:
97:eb:ac:4f:10:df:7b:eb:c2:8b:48:a7:86:5d:6e:ee:50:10:
f2:f6:d0:15:91:11:b2:1e:85:81:30:a8:98:46:09:69:9b:10:
3a:b9:df:f2:e3:71:4b:2a:cb:2c:95:b0:e4:2d:1f:56:d4:42:
d7:e6:41:db:43:eb:31:62:e1:5c:0d:9d:78:cd:01:b5:85:3b:
3c:c3:32:dd:ac:0d:8b:07:d2:c2:7d:67:41:a8:ac:5a:2a:0e:
5b:4a:c0:18:4a:31:e8:54:f2:56:cf:95:76:c9:b0:3c:13:a5:
66:39:4f:45:11:b2:07:f4:db:8c:d8:a0:7e:01:1a:18:43:8c:
3c:f4:8a:c7:ab:76:dd:27:72:ab:c6:a6:06:9f:50:e1:ca:3e:
15:5a:67:8b:b3:ad:a3:5b:65:93:4d:06:30:81:d6:82:3f:b7:
45:78:b9:92:b7:09:51:f3:a3:c0:7e:79:ed:e5:ee:08:f0:95:
5a:7d:f7:67:b8:51:c1:35:6c:9e:26:ce:5d:92:a7:e6:43:46:
81:81:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:24 2026 by rpki-client