Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: FKOb7xEi/sOUs7c7jHqk694p/LJdOM/io1rgAx7irv8=
Subject key identifier: C8:59:9D:F6:21:00:E6:18:E2:7C:17:CD:A4:73:F9:BC:BC:B6:E6:06
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019F93FF909B1DF345487439F0A03D0157CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1789
Signing time: Fri 24 Jul 2026 12:00:27 +0000
Manifest this update: Fri 24 Jul 2026 12:00:27 +0000
Manifest next update: Sat 25 Jul 2026 12:00:27 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 5pWG4YZaYJsFSqUvKnIPxkJ+SYFQmkJOW3szHR2SK+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:90:9b:1d:f3:45:48:74:39:f0:a0:3d:01:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jul 24 12:00:27 2026 GMT
Not After : Jul 25 12:00:27 2026 GMT
Subject: CN=c8599df62100e618e27c17cda473f9bcbcb6e606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:d2:38:61:72:60:2a:8c:2f:40:e4:f3:51:
8d:24:c7:5f:58:42:3c:d0:83:1f:3b:9a:12:6a:62:
55:df:0a:a1:65:cd:d1:f0:c3:a1:45:09:e2:48:24:
6e:eb:5e:df:39:20:b9:1a:ae:b4:ad:57:3d:ee:90:
6f:5f:72:22:b0:be:eb:ac:44:d5:88:37:b7:b1:fa:
ef:11:55:55:10:d9:ea:5e:16:fd:f5:21:ac:bc:52:
12:81:38:25:dd:ab:7c:41:43:f8:e9:2d:ea:28:f6:
af:0c:c8:52:32:52:2a:81:9e:66:4c:5c:83:61:38:
1b:6e:7b:af:a9:61:80:8f:5d:1b:1e:3c:e5:93:0c:
0c:9a:9a:37:cc:a0:cc:d6:b5:5a:ae:92:54:f1:e8:
79:95:bd:eb:c5:56:04:47:5e:4d:6b:a4:48:c0:94:
24:fe:e4:ac:64:fc:dd:43:12:e6:6d:db:c1:f0:8a:
58:bf:f9:d2:41:1f:61:86:ef:06:ed:a7:aa:69:4f:
a0:b9:28:27:2e:59:31:aa:19:2f:51:72:f6:74:3c:
60:9b:73:b2:9e:46:0b:1e:6a:3d:e5:4b:45:7a:04:
56:92:e7:2a:80:c5:37:78:09:f8:57:c2:4c:0e:0b:
46:37:b8:91:b0:40:69:47:f0:fe:a4:34:16:41:62:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:9D:F6:21:00:E6:18:E2:7C:17:CD:A4:73:F9:BC:BC:B6:E6:06
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:e6:5b:d8:36:b6:0e:49:b9:72:2a:51:81:b1:f3:5e:09:
94:36:6f:41:0f:e5:c0:7d:79:a1:c6:de:e2:87:29:f2:73:88:
1b:0e:81:82:3f:fb:82:47:cc:1a:85:e7:31:55:76:7e:cb:4a:
6e:f8:63:65:12:be:68:83:d6:c0:81:ce:23:06:b7:5f:7d:56:
f8:9b:7a:40:43:31:55:f5:f5:2b:e3:8f:dd:f2:d0:3d:b2:cd:
67:34:6b:66:b7:40:60:fa:b2:28:1d:ea:8f:39:1b:aa:1c:60:
06:5a:af:ff:f5:1f:ff:61:e6:c0:27:e9:46:ce:5a:56:4a:91:
07:88:24:ec:99:a9:15:d5:fe:5d:55:6a:c3:42:46:50:3e:d4:
05:44:57:a2:86:cf:0a:36:00:59:2c:07:be:7b:dc:a8:48:e2:
65:5e:1b:9f:45:ce:6c:e4:ac:ed:97:4a:7d:8d:55:33:76:36:
b7:06:94:92:d0:4e:40:61:4f:01:61:40:bb:bd:74:d0:52:3b:
2e:57:33:80:85:32:88:a5:f3:00:56:32:67:56:eb:0e:07:59:
87:04:f4:86:f4:47:e5:30:b2:6a:fe:98:62:37:d1:fb:85:7b:
7a:ec:d2:e1:38:52:fa:b7:24:63:f2:4f:1f:10:4a:7b:a5:48:
ea:f7:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:14 2026 by rpki-client