Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: 1r6PoIFI9iNIYIo0iMof6MVr5PnbK4PqehQVKpcLEtU=
Subject key identifier: 76:D1:77:3C:B9:7F:AE:BA:BB:3B:84:48:0F:8F:E3:35:3A:6D:83:FC
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019F927F1422AB550C5713057F1BA5F8CFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0F9A
Signing time: Fri 24 Jul 2026 05:00:29 +0000
Manifest this update: Fri 24 Jul 2026 05:00:29 +0000
Manifest next update: Sat 25 Jul 2026 05:00:29 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: H1wA3QOeC9ujZ5VKURbDQXapAXKHnfYtNRFdxtzbpW8=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:14:22:ab:55:0c:57:13:05:7f:1b:a5:f8:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jul 24 05:00:29 2026 GMT
Not After : Jul 25 05:00:29 2026 GMT
Subject: CN=76d1773cb97faebabb3b84480f8fe3353a6d83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:32:6a:c7:ba:fa:f4:0f:29:50:ce:c5:be:
8a:7d:0f:ec:b2:34:ec:2a:b2:56:b7:b6:b9:bd:24:
3d:9a:18:7a:60:f6:fa:7e:30:db:51:95:e9:65:03:
b2:9f:b3:58:8e:c4:73:09:d8:e8:0c:ea:91:72:bd:
f7:a1:3c:fc:36:39:b2:88:a0:ee:f9:84:da:12:84:
41:55:12:d3:f5:a0:31:b3:f3:08:c1:bf:5c:90:d3:
84:bf:3b:38:4d:d2:f4:eb:2e:7c:1f:0d:cb:a6:eb:
ee:df:65:e0:b8:38:91:f7:c0:f9:a2:2a:4c:4f:ea:
1f:4f:6d:a4:3b:25:2a:08:f3:74:a7:0a:e3:40:1f:
3e:5f:15:56:01:c4:d5:84:80:6d:49:52:38:4d:90:
cd:d3:9a:d5:b0:0e:a2:8e:bf:aa:fc:24:32:c8:55:
c7:b8:74:bf:34:d9:3e:4c:55:6d:dd:0e:50:eb:a3:
30:8d:97:da:98:c9:09:91:69:29:08:eb:e2:7c:7e:
ff:b9:e7:c9:70:fc:9a:1c:cc:ab:13:4c:be:97:d6:
28:f5:7f:34:d0:10:37:b5:c7:6b:f9:9e:78:3a:eb:
7c:71:68:dd:46:1f:96:4c:85:ee:ba:2e:ad:ed:30:
44:cd:7f:b2:3b:1d:cb:58:7d:e8:28:57:a5:0a:d7:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:77:3C:B9:7F:AE:BA:BB:3B:84:48:0F:8F:E3:35:3A:6D:83:FC
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:87:91:16:38:09:a1:5d:7d:8e:d5:6e:cf:45:0e:7b:38:c3:
33:bf:65:6d:84:a5:7a:06:e7:d5:3e:b3:bf:a4:b4:54:4b:a2:
2c:9d:85:6c:46:ed:6c:ee:31:21:1d:c9:db:d3:d6:0e:d6:16:
44:3a:49:01:c3:05:b2:ba:bc:24:61:55:e6:fa:cb:e8:64:4c:
58:9d:89:b6:b2:3d:9f:48:6f:0c:22:07:02:56:5c:a5:9f:d0:
88:b2:d2:13:4e:ee:3f:55:26:74:ad:51:ef:16:2e:55:37:1f:
bd:75:8a:da:c4:ec:97:ba:e9:9e:e4:dd:b6:36:b2:39:58:79:
15:93:43:38:fa:c7:63:0a:b2:87:4b:fb:99:de:7e:03:03:10:
93:72:69:25:00:c3:22:c7:a4:a3:9c:ce:37:b7:79:96:a9:60:
28:eb:2b:85:f0:5b:6b:7c:2f:b9:9f:98:68:72:14:54:23:60:
d2:59:20:9d:7d:50:5a:ac:e7:60:ed:53:1d:26:c1:00:aa:78:
f9:bc:4c:3d:03:cc:4b:8e:06:2e:e4:82:a3:e8:77:ba:d9:51:
b4:9a:84:49:6b:29:dd:30:b5:02:a0:bb:4e:52:66:04:be:e7:
5a:68:6c:53:98:69:14:99:3b:b7:4b:cf:9e:c2:cd:45:e8:30:
dd:78:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:05 2026 by rpki-client