Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: IgaMRnSRFzvRv8Re7M+ssl0xz9lnfLisb0YSqje1kck=
Subject key identifier: D0:19:6C:93:DD:9E:C1:7C:D6:D6:AC:0D:E2:06:8C:C4:D6:E3:26:2E
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019D2A051BF5409D9BCA2A43D10E96F24BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1649
Signing time: Thu 26 Mar 2026 12:01:11 +0000
Manifest this update: Thu 26 Mar 2026 12:01:11 +0000
Manifest next update: Fri 27 Mar 2026 12:01:11 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: HkJKshprbOnmgVfOgMne3MEkJ0E/f2hwnwJBiN2dMbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:1b:f5:40:9d:9b:ca:2a:43:d1:0e:96:f2:4b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Mar 26 12:01:11 2026 GMT
Not After : Mar 27 12:01:11 2026 GMT
Subject: CN=d0196c93dd9ec17cd6d6ac0de2068cc4d6e3262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:4a:85:60:d8:a1:c8:66:2a:3b:c1:74:61:
b4:7a:ac:91:68:e1:15:2f:34:88:82:9a:4d:e1:a3:
6a:c6:07:47:da:f7:3b:9b:1c:57:5c:52:c0:4f:bc:
3a:4e:e2:a8:26:3a:b9:c0:46:27:ea:ab:6d:c4:0b:
27:c8:a8:08:b5:df:82:13:b2:2f:06:eb:6b:ad:f1:
e9:b2:1a:bb:84:9b:49:24:15:70:c5:59:e0:19:ce:
a4:0c:00:65:04:49:02:e4:bf:76:fd:35:78:cb:c4:
c0:9b:c8:a6:bd:b4:fd:a4:72:29:17:3d:f8:d2:9a:
c8:61:c3:ce:1d:d2:4b:1f:e2:32:ce:a2:d1:37:0b:
9a:5a:d8:67:2a:21:d5:e2:36:3a:0d:66:eb:1e:7b:
d9:dc:eb:f0:e2:ab:e7:2d:10:5b:cf:4f:87:87:f3:
a4:ff:e3:b9:05:09:2c:f3:17:77:23:54:07:09:62:
40:9d:0f:6f:77:09:d2:55:a0:84:84:0e:ef:55:9b:
fc:67:31:17:af:63:34:94:3c:dc:dc:01:df:f7:ac:
3c:5f:c1:0a:cb:11:f3:51:3c:c1:6d:dd:d1:e9:94:
11:6d:32:fc:a3:28:33:bc:82:af:56:c4:20:04:a7:
c6:75:05:e1:b8:fb:8c:f1:be:8c:c7:41:5e:5d:b4:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:6C:93:DD:9E:C1:7C:D6:D6:AC:0D:E2:06:8C:C4:D6:E3:26:2E
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:d8:8b:4a:a8:ae:7f:b2:9c:7e:8a:33:5e:6c:e4:50:a6:
83:71:9c:d7:ec:0d:c7:d1:ae:3f:b1:a7:db:84:57:e1:5e:6c:
7e:61:ab:98:77:af:c2:6b:f6:bc:37:ac:7d:e9:ea:26:e1:fa:
b4:a4:89:f4:0d:c7:43:4e:5e:bf:87:9c:d8:22:3b:6a:6a:0b:
c2:8c:d9:d4:e8:b4:65:b5:3b:20:66:df:c8:ae:42:94:15:ed:
8e:7e:1b:1b:95:bf:88:5c:39:a5:10:8d:99:0f:35:6e:65:a8:
d0:08:8c:53:79:2f:78:73:53:7a:54:3f:d5:5a:e4:bd:72:16:
e8:de:a7:b0:2a:2b:df:a2:ea:ca:a6:aa:ed:49:22:d1:0a:30:
b3:62:53:e1:af:39:7f:c9:64:64:bf:05:28:5c:27:d5:3f:36:
24:b1:62:29:cd:64:91:b2:88:42:7a:26:57:98:92:15:1c:41:
46:b9:f2:8a:eb:98:69:a5:82:6a:4a:ba:00:f9:63:a6:39:48:
7d:58:97:13:2d:05:b5:f9:41:f8:51:d8:75:96:fd:a8:49:00:
d5:4b:72:d7:0b:95:27:6e:f8:b1:01:eb:59:24:07:17:b6:c9:
36:45:41:bd:24:25:fd:2f:33:18:40:34:7c:70:0c:55:7a:e6:
e2:3d:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:34 2026 by rpki-client