Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: qF4DbrRjV/ld3PiYcaquoInBB/4EUicXo+37K/UFzeU=
Subject key identifier: 0C:02:7C:E7:4D:75:B3:5D:D1:E8:AD:02:0D:99:75:95:40:19:BE:A9
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A1DCB8EDCA5AE0C5F6E73AC4E54D3AB804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 10CA
Signing time: Sun 15 Nov 2026 01:01:09 +0000
Manifest this update: Sun 15 Nov 2026 01:01:09 +0000
Manifest next update: Mon 16 Nov 2026 01:01:09 +0000
Files and hashes: 1: Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa (hash: Yf29YV0BbQQtiRrP1gHJzaYdNv3Dn8ojz+UE6LkKdVc=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: swYNnsbffo0CptuKVF21hRMfoJCf26bxcG5MMBcK79g=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:ed:ca:5a:e0:c5:f6:e7:3a:c4:e5:4d:3a:b8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Nov 15 01:01:09 2026 GMT
Not After : Nov 16 01:01:09 2026 GMT
Subject: CN=0c027ce74d75b35dd1e8ad020d9975954019bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:f3:69:ec:0d:48:b6:2b:0d:46:a2:90:43:
2a:be:3c:dc:f9:9e:f4:40:de:9f:a9:75:75:4f:56:
07:16:46:5a:36:b0:a1:bf:1f:ad:70:36:c4:e9:a5:
1d:3c:de:11:bd:e9:10:ff:8e:99:f7:b7:d0:0c:b8:
f6:e4:48:f8:9b:b8:bd:9a:c8:48:37:b6:3c:d9:37:
27:b0:e6:51:2d:22:a7:0e:0f:ef:64:e3:db:76:65:
e4:52:54:75:a2:ca:8b:5a:06:2c:f3:a6:77:38:33:
d4:46:19:0e:ec:05:3a:52:39:da:ac:6a:f4:fd:1e:
c6:ae:be:d0:0f:df:f9:dc:94:ce:f0:7e:bf:98:fe:
c3:3f:a2:c0:ba:0b:59:b7:2e:0c:d4:aa:3c:f8:d2:
5d:fe:e1:32:1d:43:ee:44:16:5f:bb:ed:54:92:95:
21:da:62:5f:9f:6f:1e:ea:24:ec:d5:5c:7f:c1:9b:
36:a6:e9:34:d7:9d:23:09:32:1a:b3:68:73:5e:c7:
f9:43:9d:fe:2c:04:4d:41:63:ec:4f:2d:82:21:0a:
a3:05:6a:5f:8e:3a:d6:0b:e9:ec:5e:7e:dd:29:60:
21:48:aa:99:f3:1c:e6:00:31:e7:24:32:b4:6d:b6:
c6:42:09:51:bc:db:da:6c:d7:bd:f2:01:03:e0:fa:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:7C:E7:4D:75:B3:5D:D1:E8:AD:02:0D:99:75:95:40:19:BE:A9
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d8:6a:d2:62:5c:eb:b0:43:63:25:53:10:93:e3:c4:74:c1:
20:db:6f:27:72:a7:44:fa:e9:7b:5f:3c:af:51:fd:3c:e1:c3:
ed:f6:0b:eb:e3:7e:5e:38:cf:6b:13:28:b2:29:f6:da:82:db:
5e:d6:ed:a5:ca:d9:fe:82:7f:9a:c7:cd:56:91:ba:3f:b6:ce:
2e:cb:a4:d2:14:49:e8:6b:76:9d:04:fa:1a:e8:69:0a:39:c1:
85:2a:b3:d5:d7:b4:56:84:84:d9:23:9a:87:4e:16:22:b3:1d:
68:51:d2:7a:ef:ac:65:90:ae:22:02:a7:b4:a6:09:7e:7b:59:
d0:7f:e7:4c:3b:c9:4a:92:fa:fd:ed:af:54:39:f0:21:e3:03:
da:0e:3a:c4:0e:9a:a8:e6:78:9c:04:2d:0e:1d:7e:ee:21:b1:
8f:13:45:bb:1c:5b:aa:a2:d6:f1:53:71:c8:96:16:41:57:09:
08:b7:44:04:23:e5:8b:c0:a7:f6:63:9b:aa:df:26:f7:b2:48:
10:5f:49:f8:b1:ac:ee:15:51:70:c7:dd:eb:08:bb:53:f5:75:
6c:a3:28:e8:f5:ac:35:36:2f:a6:66:9d:11:fc:d5:c5:a7:d5:
e1:7c:53:51:e6:45:bd:2f:79:a6:f5:76:28:de:5e:4d:07:88:
15:22:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:50 2026 by rpki-client