Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: 7gudFgPlxhGEOCJrj3VUiTT+5quvhcVHvB8EznwHf2Q=
Subject key identifier: EE:D7:25:77:C0:A5:38:C0:03:C8:49:1C:4D:F7:0D:6C:F4:7C:B4:22
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019E1DC75857B2D76A9321722DC898343401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0ED9
Signing time: Tue 12 May 2026 20:01:04 +0000
Manifest this update: Tue 12 May 2026 20:01:04 +0000
Manifest next update: Wed 13 May 2026 20:01:04 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: oLJ2hKQrR0BSXBmlyQXN8kQGrPsu65V1g0+2ITapXiw=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:58:57:b2:d7:6a:93:21:72:2d:c8:98:34:34:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: May 12 20:01:04 2026 GMT
Not After : May 13 20:01:04 2026 GMT
Subject: CN=eed72577c0a538c003c8491c4df70d6cf47cb422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:a7:1b:1b:56:84:83:0f:42:c7:5d:e0:c4:
9f:2e:44:ba:74:58:ec:f8:8a:d2:62:41:d0:e2:3f:
44:6c:b0:2d:c9:e4:6d:eb:92:3b:57:51:4f:13:a6:
81:78:0c:fa:12:a2:2c:08:ba:da:80:9f:74:84:e4:
5b:cb:70:67:1b:c0:60:4e:5e:85:ce:70:4d:10:6d:
b3:a0:8c:53:ef:c2:a1:4d:01:71:1c:9c:b9:59:f2:
e2:7d:1e:54:a3:7c:58:4f:43:11:d8:e0:97:ce:d5:
fa:3b:60:b3:5e:05:aa:47:cb:94:60:4c:3b:ca:68:
48:b5:4c:c0:3d:f6:62:e4:18:52:5f:76:f3:82:22:
92:f8:2b:94:2c:62:7b:52:16:6a:d0:f8:66:5a:f6:
ff:00:40:94:e9:ee:21:ab:9b:3b:87:5e:d4:99:d4:
32:56:0a:11:d2:4d:c6:ca:d3:30:cd:d7:0a:fe:cd:
71:0f:59:ec:7c:9c:39:44:4d:dc:61:30:85:3b:33:
d2:24:9e:cd:d5:17:f7:72:ff:98:73:d2:32:43:4e:
06:53:65:64:a1:fb:14:7c:6d:fc:59:6b:4b:21:5e:
22:85:60:d0:28:e4:f4:8f:91:90:7e:d4:b3:fd:c6:
7b:b0:6f:1d:d8:d2:6c:1c:dc:11:a9:a9:dd:94:43:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:25:77:C0:A5:38:C0:03:C8:49:1C:4D:F7:0D:6C:F4:7C:B4:22
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:92:2a:a4:63:f8:b1:0c:cd:d6:fc:32:1b:45:60:d1:53:0b:
a0:83:c7:3c:3b:d6:36:b4:c8:ed:0a:84:62:ca:5a:8a:08:de:
f7:61:13:6e:6f:ab:f7:1f:0f:6a:b4:41:14:85:e0:f4:bf:30:
d6:68:56:3f:5d:47:1d:04:68:dc:1e:eb:b5:ba:74:ad:8e:f2:
03:2f:d8:20:96:85:d3:06:ec:c5:6b:e1:df:c0:d0:79:b7:16:
99:b4:fd:ae:46:81:dd:5f:6f:22:80:44:57:a1:18:01:01:50:
28:69:1d:21:99:89:44:d5:b7:6d:b7:ea:a3:5f:81:e5:06:f5:
5a:30:e4:c4:5d:02:1e:ae:83:71:ba:88:d2:09:0c:e4:a2:ac:
cc:a4:3e:20:27:e2:a0:77:aa:42:be:9d:be:f4:53:ed:50:63:
82:ac:48:ea:0f:b1:fc:a3:8f:c8:c3:0c:4d:35:45:e5:37:8c:
a3:a5:b7:43:eb:8a:64:61:e6:c8:8b:80:81:37:50:61:a9:ea:
5d:62:99:82:18:2c:83:35:13:37:3d:33:7e:61:c7:49:7f:43:
28:01:54:6a:2b:6b:53:55:7e:18:0e:c3:aa:9b:c6:a4:d7:8c:
9f:88:94:84:5a:f6:9a:d8:ca:a2:80:a8:27:0e:eb:8c:88:5b:
ac:24:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:35 2026 by rpki-client