Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: Dx0mwhZzmnYIOl9KPshY+uqMNBQjuVcqoKyrj4HBZmU=
Subject key identifier: 2D:36:8B:83:94:EB:83:14:FA:AD:6B:79:3C:96:10:05:26:E1:85:20
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 019D25F201F5B0D92C8EC5D160401F5B8B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 0854
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa (hash: dAiX0DScSQAyOd84M+cVyRLFZIlldEdcCXOLorNDi0g=)
2: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: jWELS7MM0rfGAAkU5L7WeUJBNt8+aj4y9Nui0Yq5uTk=)
3: mmEWbwMVtZjQGxBQLSEBMLV6FOM.roa (hash: mLo+dfNoXAcPZy5zgB6iNGDzY/FzsmVzavePETyu5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:01:f5:b0:d9:2c:8e:c5:d1:60:40:1f:5b:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=2d368b8394eb8314faad6b793c96100526e18520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:cd:f4:a0:25:df:7b:0f:36:bd:d2:92:fe:
5e:91:66:1c:8f:24:b2:aa:55:2a:ba:55:a3:da:a2:
32:35:75:1d:df:40:1b:f3:7c:8a:c4:4e:b7:33:f5:
95:ce:9a:f3:0d:e9:f1:87:93:7a:26:19:57:df:6d:
c0:76:1a:83:be:05:f8:55:e8:7b:8a:3c:51:63:5a:
8f:c7:2e:0c:73:2a:71:61:65:48:f0:f4:6a:4a:95:
17:1c:5c:ea:55:b9:9c:3b:4b:f4:81:0f:53:cb:f6:
bd:98:34:18:33:05:01:c4:2a:dd:55:d5:65:f8:86:
24:78:cf:56:48:95:91:39:5c:35:e0:ef:d2:e2:5f:
b4:16:5d:28:c2:b7:3b:b2:50:5a:9b:2a:89:28:c0:
93:13:8c:85:73:f7:37:35:00:d6:49:bd:78:fe:6f:
06:1b:ff:72:cc:a6:26:70:31:11:df:ef:83:19:20:
a2:5a:3f:aa:c8:ce:44:8b:d7:e9:b5:7c:04:fb:4f:
ac:8b:ec:5b:c2:6c:b0:c8:9a:db:82:07:68:b5:87:
e6:60:b3:db:b2:53:f7:03:55:fb:ed:7c:20:7d:c2:
9d:90:61:b3:08:db:1c:f6:0d:15:a4:1c:69:f9:56:
58:ad:35:8f:23:3b:0f:2b:e7:6c:06:c6:4b:12:ed:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:8B:83:94:EB:83:14:FA:AD:6B:79:3C:96:10:05:26:E1:85:20
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:de:4f:64:78:7f:c5:6a:76:ba:9d:29:5d:5c:3b:09:22:
ae:49:95:36:ce:4f:83:75:4a:25:52:3a:fb:bc:ca:4d:ed:55:
45:25:db:22:5a:88:d4:64:7e:77:f7:42:43:94:c7:30:5d:f8:
1a:e3:ee:d6:41:ed:4b:34:cd:75:93:e9:eb:92:e1:df:2d:1c:
ab:ec:38:e3:a0:6c:cd:e8:08:eb:9c:a4:28:2f:3f:ea:2b:cc:
92:cf:9a:22:4d:da:8b:0c:39:85:94:d3:48:96:6e:76:2f:08:
40:67:77:46:4d:cc:1d:e6:02:98:ce:6c:e9:07:c1:55:f1:e7:
30:13:73:0e:2f:04:27:81:03:35:40:be:57:90:94:27:97:bd:
b5:de:b1:4a:52:06:f9:18:16:21:af:3a:f5:4f:9f:0c:4d:c4:
f2:3b:25:48:35:94:56:5c:0f:8b:de:34:b7:14:cf:7c:bc:46:
5f:22:ef:ed:5f:6a:64:86:1f:d7:af:ae:0c:10:5e:ad:38:c3:
0d:85:21:1e:8e:97:a8:aa:cc:77:c3:8d:55:c2:88:e0:72:82:
06:bf:e4:2a:00:55:27:37:13:fa:fa:eb:e6:e7:be:ca:f9:4f:
eb:1c:35:69:68:3d:2b:88:d5:93:a6:25:bf:32:aa:3c:9b:21:
c0:48:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:53 2026 by rpki-client