Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: wLtvQemX8zQqfshX+poRFHqZ79QKFYBrZJ3xuUBXVA4=
Subject key identifier: 8A:7F:AA:FD:08:4A:45:DE:40:54:34:62:AE:15:2F:4C:60:C5:BB:42
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019D25BA550DD9947D721240D99A9A084DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:01 +0000
Manifest this update: Wed 25 Mar 2026 16:01:01 +0000
Manifest next update: Thu 26 Mar 2026 16:01:01 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: z1u/92/DtUAuGM18Ca56uzdbi9nz9ALpfKfoHFreysY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:55:0d:d9:94:7d:72:12:40:d9:9a:9a:08:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Mar 25 16:01:01 2026 GMT
Not After : Mar 26 16:01:01 2026 GMT
Subject: CN=8a7faafd084a45de40543462ae152f4c60c5bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:d1:7e:20:1d:9a:0e:d5:88:57:a4:78:5c:
56:ee:b2:c5:bd:44:ae:94:b7:55:83:b3:d5:d3:51:
fd:2e:49:bf:99:64:7f:f2:df:8b:3a:45:49:b4:da:
f1:0c:11:0e:85:02:2c:15:44:eb:53:f0:6b:3d:30:
6f:39:d6:d2:06:ff:45:cc:df:c2:0f:c9:f7:b6:f4:
6e:86:b4:51:98:47:45:98:1f:ed:9f:db:3f:4f:8a:
5e:11:27:0e:a1:18:f8:6d:19:ae:c3:07:f9:05:ac:
36:2e:e6:bf:a2:72:93:86:52:f5:9e:05:73:63:92:
12:9c:c1:38:4d:54:d9:6f:16:74:03:0c:62:39:d0:
42:7b:db:c2:b6:42:f5:4c:04:59:90:3c:e2:01:34:
cf:62:97:77:13:74:42:ab:41:1f:2f:9a:b0:ed:eb:
71:5a:6b:ed:f8:79:b1:86:31:37:c4:15:c9:a3:fc:
7e:4f:a0:5b:25:06:b0:d2:40:3a:98:9c:08:87:76:
bb:a4:5b:5a:53:4f:d9:2c:af:63:fa:3c:1c:05:e5:
38:6d:ea:81:88:d5:8a:98:53:7e:cf:28:13:b8:10:
89:83:0d:ca:e9:99:c7:ec:85:a3:78:fa:12:40:86:
6c:4d:b3:09:bf:67:43:00:fd:ab:15:f6:52:37:96:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:AA:FD:08:4A:45:DE:40:54:34:62:AE:15:2F:4C:60:C5:BB:42
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fd:08:db:9c:67:c5:39:61:b6:72:7f:4d:a8:9d:b7:e7:20:
28:ee:b6:ef:dc:61:d6:9a:81:3c:3c:7b:36:ad:35:fd:04:36:
bc:61:3f:dd:66:bf:92:21:05:96:92:24:94:df:eb:72:8e:e2:
47:14:35:8f:c9:36:b2:dc:c0:7b:22:dc:04:ca:2d:a2:e5:07:
04:31:49:76:72:70:39:6d:78:a6:6c:33:bb:b7:74:db:76:45:
2e:d0:39:77:50:f7:d9:ae:ba:be:95:df:94:1e:26:39:c8:0c:
32:09:dd:08:6a:a3:87:c5:97:c4:7f:13:3a:f9:b2:53:e8:27:
d2:18:90:ff:f6:fd:17:46:52:9c:b9:cd:a6:a7:68:ea:e1:e7:
96:a2:6d:b8:80:c5:10:8c:7c:ea:4c:f6:25:4c:26:c4:a9:d6:
2e:c5:c3:74:a3:0a:34:d3:d3:e2:28:13:06:ee:6c:14:ae:12:
28:6d:d7:e3:f0:9f:af:64:a4:ae:b7:f0:e8:c5:55:cd:69:cc:
1d:62:e5:4e:ef:c0:28:62:7b:02:3c:37:e4:92:c2:fe:52:a3:
93:4f:59:43:43:06:24:85:0c:3e:d1:25:4a:98:c1:08:ed:a9:
1b:48:e8:18:76:35:02:1f:82:cb:33:51:6f:4d:92:ca:56:e1:
d0:4c:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:59 2026 by rpki-client