Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: r9cwmS1jcTCYrL+bASJoRu1nIvCODBu9r1onbRrMn9E=
Subject key identifier: F0:63:70:46:7A:0A:4F:34:65:39:98:55:BD:58:CE:C4:53:29:C0:02
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01A1DEA787116F2D198FC53500E76749F7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 10:01:23 +0000
Manifest this update: Sun 15 Nov 2026 10:01:23 +0000
Manifest next update: Mon 16 Nov 2026 10:01:23 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: a0jzJw8PUFN5Fw0gMZGfgX3LV7qDxi7OYwQfS1o19+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:87:11:6f:2d:19:8f:c5:35:00:e7:67:49:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Nov 15 10:01:23 2026 GMT
Not After : Nov 16 10:01:23 2026 GMT
Subject: CN=f06370467a0a4f3465399855bd58cec45329c002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:93:09:d7:9d:34:b8:ee:92:9c:8e:36:7f:
d1:3f:a6:75:c7:d3:ec:a3:49:b6:0b:9a:40:90:87:
1b:15:fd:84:82:c3:8e:73:77:8d:52:e9:f8:a7:88:
2b:34:0a:8e:4a:31:7c:a4:2d:11:c3:e7:5f:f2:87:
4c:2a:16:35:b1:0f:90:82:70:e0:9e:16:8a:b3:91:
0d:1f:71:1b:fa:6a:26:43:0f:8f:7b:f1:6c:82:59:
ff:9f:fe:fa:55:1f:ce:6c:aa:d3:db:54:4b:77:61:
9e:83:74:39:ba:0d:a5:d6:d5:74:6b:08:7c:77:3c:
9d:c8:a0:54:fa:93:c6:96:31:2d:20:80:41:79:39:
be:45:2d:c8:a5:02:db:00:fa:31:33:69:dc:e7:ed:
31:99:84:33:84:fc:3c:85:08:e4:c8:88:7f:9c:5b:
90:ba:8e:1d:a4:d2:59:c3:45:e8:5e:f0:a8:9c:21:
a0:c8:7d:fb:3b:d9:c0:cf:3f:18:d9:37:63:d5:8b:
f7:53:8f:3a:d6:5d:10:cb:e8:57:94:92:3a:91:52:
b2:ad:fb:64:e4:26:29:ec:14:ac:b1:e5:02:46:7c:
44:b2:76:cb:44:ea:c8:d9:e7:c5:4d:4b:c7:3e:97:
40:4c:0c:5a:a8:42:20:68:85:43:22:2b:e9:b9:21:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:70:46:7A:0A:4F:34:65:39:98:55:BD:58:CE:C4:53:29:C0:02
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:41:79:aa:09:e3:fe:f2:7e:93:45:ec:b2:b8:76:c3:c9:
fc:9a:73:24:66:78:6f:7c:0a:ff:a8:5c:fb:a8:95:21:8e:4d:
ae:a4:74:ba:61:d2:9b:f2:69:05:8b:c7:86:1d:8d:b9:93:82:
cd:e1:61:fa:a5:0b:e4:32:32:2b:0c:dc:74:f4:c9:8e:65:90:
c7:32:12:c1:68:07:fc:8f:f0:3e:9b:f2:a0:ee:a2:3c:30:93:
1d:25:b4:5e:ad:b3:26:67:48:5f:81:18:fd:27:7d:a2:4e:9b:
5f:5e:78:4f:8b:80:22:93:51:84:a5:6d:fd:ad:54:70:42:58:
73:83:3b:ac:97:68:f8:82:20:4a:d5:aa:34:df:b5:47:8f:7e:
92:d1:1e:29:b5:95:2c:6a:57:e8:7b:89:5d:3e:57:b0:2c:ce:
6d:2b:be:a4:c4:79:8e:eb:f9:6e:48:5b:eb:27:8c:1b:58:e1:
a5:5f:50:14:83:30:51:f4:1b:e4:75:03:51:f9:7d:df:19:52:
66:03:ec:e3:0b:71:6a:00:1e:b2:c5:b0:0d:f1:59:56:0e:57:
90:2e:ed:b0:e2:8d:4b:2a:f6:ad:bf:9b:92:b0:27:a0:d5:d6:
b9:01:c0:7e:77:c1:09:48:c6:b3:48:c7:7c:79:75:5e:ce:78:
7e:6c:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:48:30 2026 by rpki-client