Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: 9B2kEJg6TdLVejxK3xAtHHVw+OLpn38V4K1GB3XrARo=
Subject key identifier: 22:E0:B6:77:F5:5D:F7:75:2C:5F:CC:E7:2C:CE:8C:1A:B4:7C:E8:4A
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019D28842600F7F7519DA998ACD95EC13DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0E5A
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: DhRdoaVDTbpv2Nric/dFC698/FtWl4SIxJu+9YPAa6g=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:26:00:f7:f7:51:9d:a9:98:ac:d9:5e:c1:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=22e0b677f55df7752c5fcce72cce8c1ab47ce84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:23:fd:00:38:01:f8:6e:f7:7a:1a:49:fd:
11:52:f4:69:3e:56:08:04:8c:d6:59:d7:5b:f8:76:
aa:b3:ee:41:34:2a:e5:4c:24:ef:b8:53:28:02:10:
e7:bb:92:a1:8b:03:69:ab:06:30:3c:c4:54:cc:43:
59:5a:19:5c:64:7f:e3:34:51:98:16:63:e0:a8:cc:
da:ea:c3:24:63:4e:0a:f6:24:95:54:14:1d:5b:e5:
c8:42:9f:bb:32:56:f6:08:b2:97:d8:97:f0:b7:81:
01:65:f6:e4:6a:72:4b:64:4e:2d:51:58:c3:a9:ca:
ac:cd:96:39:30:09:51:1f:0b:27:15:8b:4e:70:4b:
38:f3:fd:4b:ca:4b:a1:11:45:ac:e4:88:24:b4:d6:
ce:4d:9b:50:7f:0a:70:ad:5c:09:69:ce:41:e2:06:
e5:f5:aa:4c:e2:5f:40:4b:31:f6:ee:34:1a:57:fe:
2f:c2:4c:6c:df:d2:91:90:93:90:98:da:17:3a:42:
29:89:0d:fc:09:89:e4:77:a1:06:88:17:09:fc:ba:
84:53:4b:3a:96:bc:46:54:82:a2:db:ed:39:e4:2d:
db:7e:1e:dd:d0:16:b6:60:7f:4c:3c:e1:19:dc:a3:
f9:ac:5f:1a:a5:da:7d:da:f0:10:21:4a:69:fb:f7:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:B6:77:F5:5D:F7:75:2C:5F:CC:E7:2C:CE:8C:1A:B4:7C:E8:4A
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:74:d4:1f:53:44:a8:d9:6c:67:c3:fc:b8:3b:6f:69:b4:
7b:b7:b1:9b:ee:b8:a5:9e:31:04:ce:34:35:ce:05:28:c7:63:
b3:2f:48:97:92:06:15:28:25:f6:05:57:16:cb:d8:51:98:c6:
51:f1:c8:79:da:29:15:00:ed:66:b3:82:94:e2:6d:4f:20:42:
9f:5c:ed:b2:4f:e2:27:4e:f7:d6:7a:b1:a0:06:09:b4:60:3c:
84:1a:96:ec:eb:fb:78:a4:57:4c:31:92:a7:ac:ad:c7:4a:18:
8e:a6:ea:dd:6d:3e:50:70:98:5a:c3:ab:df:c1:d9:8b:ac:4b:
c6:55:23:72:1b:0c:6d:93:1d:9c:9d:a8:6b:e3:9c:a5:94:1d:
87:e1:47:dc:d3:0e:bb:0b:10:e1:ba:ad:6e:5c:0f:1b:af:6b:
be:6f:fb:e3:b4:03:75:18:d4:c4:59:43:8f:52:1b:e6:16:12:
3c:e7:c3:55:bc:cb:4d:fa:31:56:17:ba:6d:00:db:ff:d6:6c:
37:01:77:4c:1a:e6:d2:f0:b1:b8:37:4a:2b:49:c3:96:1c:34:
69:db:02:80:98:c8:fd:ea:a6:c3:df:63:36:84:54:44:3a:94:
f3:fe:8e:88:05:47:f0:06:6c:da:fc:f3:0a:9a:d3:d5:72:ec:
e7:1f:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:07 2026 by rpki-client