Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: W2dsiE+azbJiXoC2OxhbheoLT/1sVdpZb11AkBBoRJ4=
Subject key identifier: 0D:76:52:68:F5:5F:BD:D9:7F:1C:EE:9F:FA:CE:2D:71:D3:AC:B5:EC
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 019E1F112388AABF7286C78FA8EDC507EB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 08D5
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: 6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa (hash: dAiX0DScSQAyOd84M+cVyRLFZIlldEdcCXOLorNDi0g=)
2: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: 4nIP3jtiA1Uc3wX423gX6oNK9BmQC20dCDWEwxIIhyM=)
3: mmEWbwMVtZjQGxBQLSEBMLV6FOM.roa (hash: mLo+dfNoXAcPZy5zgB6iNGDzY/FzsmVzavePETyu5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:23:88:aa:bf:72:86:c7:8f:a8:ed:c5:07:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=0d765268f55fbdd97f1cee9fface2d71d3acb5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:68:ba:aa:2c:42:e6:80:61:71:e9:18:ff:
77:45:96:db:81:d7:d9:6c:e8:a4:f3:50:3c:fc:4a:
9f:80:35:1e:4b:1b:3d:e7:67:f2:2c:62:68:a1:7c:
da:43:13:67:30:f6:81:54:07:6d:02:9a:2d:4a:51:
3f:06:bb:d0:f8:c5:cd:00:3b:4f:76:d2:64:e5:f3:
04:35:a5:8a:d4:b1:c9:42:44:5d:05:24:6d:5b:9c:
d8:73:c5:e1:9d:36:c4:dc:2e:f6:c3:dd:e2:43:20:
94:55:ec:04:44:03:1e:0e:ad:f8:aa:4a:da:3e:10:
a3:2c:90:f8:e1:f5:4c:2f:d6:dd:13:68:2a:5a:40:
63:46:91:aa:8a:21:ae:d1:55:ba:fb:62:d8:92:22:
bf:ee:35:74:7b:8f:3d:e3:cf:d8:19:88:5b:0f:93:
b1:49:3b:26:d4:4d:80:cd:90:d9:78:ca:23:cf:af:
97:6e:13:41:19:26:62:47:42:12:51:d9:d5:9d:e5:
df:d9:82:f7:f9:96:aa:ca:65:28:bb:00:5b:ed:05:
8e:ea:33:c2:a5:54:0e:34:23:e4:25:a3:9a:e4:96:
8e:01:9e:38:23:d7:e7:d0:ca:4f:c2:b4:8e:63:81:
94:67:36:ba:39:d9:00:b4:85:36:ad:c3:45:66:14:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:52:68:F5:5F:BD:D9:7F:1C:EE:9F:FA:CE:2D:71:D3:AC:B5:EC
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:4f:7e:07:61:0f:a6:73:27:1a:d2:b7:39:fd:32:ac:40:
b8:f8:53:dd:da:67:e0:eb:10:f7:6f:7e:46:e7:a4:cb:66:5c:
d5:0f:90:5a:22:a2:87:19:d9:d5:62:15:1d:4d:8d:9e:f7:57:
c3:b0:88:69:48:74:6b:ac:58:d6:9f:c4:7f:a5:2d:a9:98:66:
bf:7e:49:93:d4:bd:59:f6:5f:cb:f2:6e:60:2e:60:04:92:1d:
06:a4:7c:dd:b0:c3:45:01:2c:5c:b9:47:66:4d:ab:dc:9f:d5:
c2:cd:00:6d:cb:78:40:6b:2f:fd:de:8b:ce:8e:a1:7f:cd:7e:
2b:03:75:d1:e6:60:7c:0b:46:92:41:08:64:23:00:77:69:42:
57:27:67:02:fc:e7:49:71:73:c6:00:a1:00:2a:fd:2e:44:4c:
09:08:7f:2d:07:46:cb:b9:43:f1:c5:d3:e8:92:46:34:8b:3d:
5e:47:66:8b:dd:9a:19:ed:e6:91:b6:14:9d:3d:57:4c:2d:9c:
86:d5:10:cd:f2:83:12:b3:c0:35:74:fc:e1:ab:a3:05:31:23:
4e:e1:cb:c0:72:ab:99:b9:15:c8:c6:77:ec:88:62:66:42:a0:
10:67:1a:31:39:42:4b:5d:af:41:4f:60:56:c2:75:92:22:52:
1a:21:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:53 2026 by rpki-client