Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: QsmW5ZtArOhkYGRLfjcjT1v8tE566gLGRNdeqBaAqT4=
Subject key identifier: 01:0F:58:FD:2D:DE:A7:5C:DD:AD:DC:FC:09:37:AC:B6:A4:E6:FB:97
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A0DACDF1B367F757C0B0A84DCF6481944D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 1044
Signing time: Fri 25 Sep 2026 23:02:04 +0000
Manifest this update: Fri 25 Sep 2026 23:02:04 +0000
Manifest next update: Sat 26 Sep 2026 23:02:04 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: l+0rxyfVeFWBLizBSXRtMNZ09UE/BmAa2qC2YeTaTGg=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:f1:b3:67:f7:57:c0:b0:a8:4d:cf:64:81:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Sep 25 23:02:04 2026 GMT
Not After : Sep 26 23:02:04 2026 GMT
Subject: CN=010f58fd2ddea75cddaddcfc0937acb6a4e6fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:1b:fc:d8:b1:4f:f1:d9:aa:ae:1f:58:e0:
b7:ea:d7:30:7c:fb:22:52:e1:a0:22:b5:05:57:49:
46:31:11:e9:af:9a:c0:dc:e5:16:c7:04:ba:c4:79:
4b:45:5a:a0:29:27:ca:c6:02:c4:05:8c:1f:7c:7e:
ee:6d:a7:3e:46:d3:13:6d:af:b2:6c:10:c7:ca:14:
f6:bc:1d:71:3e:36:c6:cf:db:84:68:56:23:23:37:
2a:99:83:21:6e:f2:8e:38:1f:f0:72:cc:40:fe:96:
0d:da:8e:a0:b3:e6:87:4d:38:e8:01:eb:da:35:46:
92:ca:39:45:e1:09:b0:03:57:8c:e4:91:7a:d8:25:
ca:0c:88:b9:ba:4a:b6:bd:81:a4:1e:c9:a9:ff:c7:
ad:39:c1:3d:34:44:fe:1d:f6:18:74:ea:e4:30:65:
a5:f0:dc:62:89:90:77:7f:e4:bc:15:8f:89:e7:5d:
67:ca:bf:f6:37:43:ad:13:1c:96:a8:c6:a9:d8:5c:
a7:c2:72:b5:14:56:31:74:bf:51:83:5d:97:dd:4a:
c7:22:7d:6f:f6:4a:0b:21:0d:43:0b:31:20:c6:59:
e4:28:9a:4f:44:63:02:db:ea:45:32:7d:c9:bb:83:
a0:07:50:3f:9d:ad:2c:9e:8b:c2:85:62:d6:a7:f4:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:58:FD:2D:DE:A7:5C:DD:AD:DC:FC:09:37:AC:B6:A4:E6:FB:97
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:5e:e6:d3:98:54:46:8d:48:3a:c7:b2:ec:f4:76:a1:85:
33:4d:54:0d:5c:74:30:79:d7:c9:19:a6:d0:83:b5:26:0e:d4:
d0:51:8a:c4:d0:cb:c9:3c:cd:52:8f:72:05:a6:35:ad:ff:77:
01:3e:b1:24:fc:be:9c:36:5c:54:48:2b:8c:a8:c1:9f:02:54:
8c:df:59:74:71:e3:ec:60:29:7d:fe:04:51:31:4d:14:3a:21:
1e:b4:23:8e:cd:66:e4:21:e6:9a:ea:a8:c2:58:67:51:be:cf:
2d:4e:0f:27:66:68:57:53:ca:3d:f6:b1:17:80:5d:97:a1:d5:
f4:6f:9f:5b:9d:0d:b3:27:17:a2:20:2f:9b:70:a6:6a:db:d6:
20:02:09:b1:2d:6e:24:1f:21:57:57:ff:f6:1d:14:e2:ff:b4:
7d:b9:1d:08:ef:0c:3f:3f:87:40:1d:f5:68:6d:d2:49:ae:43:
ac:2a:15:c2:50:a4:51:07:c4:d4:a7:41:2d:10:06:20:f7:f7:
fc:93:ec:3c:78:51:a5:82:83:f2:24:65:0b:3c:a4:80:be:11:
f0:e6:32:af:c3:cd:a3:f6:01:d5:78:cf:70:d8:45:16:b6:a2:
40:76:cb:a4:5b:38:7b:b7:04:df:54:55:7a:9f:44:90:44:fc:
a2:7e:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:00:08 2026 by rpki-client