Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: TxkRXVpi8xH7IaajOc9DnYs7gIyObzZzdrPBmOo19a8=
Subject key identifier: 66:45:F3:D2:D3:93:74:D3:8E:95:16:6C:89:D1:4A:35:D3:E3:56:56
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019E1D59BC463388D05C01F2BCBBD4445F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 16C7
Signing time: Tue 12 May 2026 18:01:20 +0000
Manifest this update: Tue 12 May 2026 18:01:20 +0000
Manifest next update: Wed 13 May 2026 18:01:20 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 5rhC1w+RiEsUS5hPiUA4CchQY+QmNo4cnLXQMXrcbnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:bc:46:33:88:d0:5c:01:f2:bc:bb:d4:44:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: May 12 18:01:20 2026 GMT
Not After : May 13 18:01:20 2026 GMT
Subject: CN=6645f3d2d39374d38e95166c89d14a35d3e35656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:4b:29:27:1d:51:ba:7a:d9:be:4f:d5:65:
be:9b:99:34:50:54:f6:f6:73:d3:36:df:3d:5a:97:
84:59:8a:19:83:b7:b3:b0:1a:c2:f6:eb:70:82:84:
4a:ba:5e:80:3f:8e:1b:e8:ac:19:6d:2b:0a:70:63:
77:5e:98:d7:e9:73:b6:ed:bc:e0:90:51:c3:3e:e1:
b5:85:22:3f:d1:06:db:64:38:4b:6d:80:f7:c4:b8:
e7:df:7e:14:54:87:dd:44:61:ca:0b:9b:bc:da:b7:
38:03:6f:db:74:ad:cf:4f:39:15:84:52:3c:24:97:
65:a4:45:d1:65:53:80:b8:bc:96:22:5c:06:63:d8:
b6:41:1a:1a:92:11:ca:7a:0b:9a:59:40:bc:aa:b2:
9b:6a:74:1b:36:e7:86:79:df:4c:a3:21:52:5d:78:
7d:f6:5b:84:73:69:12:3d:1f:49:67:53:17:c0:aa:
34:d6:e7:d4:bb:92:ee:13:75:ed:d5:27:20:31:36:
66:34:c1:c0:96:73:e1:78:f1:ef:8d:54:05:0b:4c:
01:83:dd:95:95:9a:85:41:0f:dd:67:13:91:f5:4b:
7d:41:bb:0d:c9:6f:a0:ca:36:8d:53:15:ef:eb:3c:
40:94:5e:91:d6:0f:b8:8c:79:b8:b8:7f:06:e9:dd:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:F3:D2:D3:93:74:D3:8E:95:16:6C:89:D1:4A:35:D3:E3:56:56
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:85:65:81:e1:a2:01:f5:85:c4:4a:65:5f:d3:3c:69:19:dd:
64:df:ce:ec:29:ce:51:31:52:18:dd:ae:6b:40:0b:28:67:65:
29:59:29:c8:0a:f8:81:03:24:9f:3e:68:5f:5e:de:c7:c7:34:
b1:d6:79:67:bd:eb:af:1a:cd:38:ec:36:57:ca:fa:96:27:e3:
31:d1:8f:41:00:09:74:1f:c9:29:63:82:a3:f9:13:35:10:b1:
43:ea:0e:8f:26:85:31:24:41:1b:89:8d:81:73:01:ff:85:fe:
1d:b7:13:d2:37:2a:1c:30:ff:83:66:6c:48:75:12:82:10:0c:
4f:d2:33:ae:fb:e7:8e:99:a6:57:17:80:a1:72:4d:88:fc:40:
0e:aa:d0:dc:dd:f2:cd:74:a6:a9:5d:b1:10:87:b1:9d:cc:40:
17:ee:fa:b1:86:1e:cf:f4:0a:28:34:2d:2c:eb:23:1e:94:88:
c1:2c:34:11:55:18:e5:83:bd:01:4f:31:0d:ee:f2:fe:44:f5:
0e:3e:35:03:33:d1:f8:39:6e:d0:e0:6f:d9:1a:85:a7:e7:5d:
eb:54:f8:00:26:c0:02:b8:82:6b:e8:1d:da:b7:2d:08:53:e5:
5d:08:63:6b:0d:61:4f:de:58:b6:5a:a6:a7:0b:36:a9:13:2b:
83:12:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:53 2026 by rpki-client