Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: qJYvhnH2JWprzmcZ70xM5pKRSsc8Tk1jmc20ZlsHV9M=
Subject key identifier: F3:F1:6F:B9:A3:2F:AB:68:35:31:1C:BF:C3:77:AC:8A:19:F1:2E:88
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01A0D8043FF230795F69E32149A9C374133F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 10:02:32 +0000
Manifest this update: Fri 25 Sep 2026 10:02:32 +0000
Manifest next update: Sat 26 Sep 2026 10:02:32 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: ZA+qibkhKUMXvTd7QpEDO/QjaDznlyGym8H3uAtItzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:3f:f2:30:79:5f:69:e3:21:49:a9:c3:74:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Sep 25 10:02:32 2026 GMT
Not After : Sep 26 10:02:32 2026 GMT
Subject: CN=f3f16fb9a32fab6835311cbfc377ac8a19f12e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:36:b1:58:ed:8c:59:46:51:44:3e:a7:a3:
09:0a:e1:eb:57:65:f9:23:72:fa:21:7c:5d:f1:c0:
a8:d2:33:de:96:26:b0:61:79:5a:7f:93:85:77:81:
5b:82:69:16:84:8a:1a:ba:f1:4e:8b:9f:f8:fa:26:
f1:f7:59:3f:d4:54:66:11:0d:3b:77:a7:32:42:e7:
62:05:ab:e3:95:b0:aa:37:39:2f:8a:0c:49:6b:54:
9c:c9:6c:f4:f9:3f:21:be:b6:79:d2:41:ab:f4:b6:
85:db:8f:02:e7:2c:26:c0:1c:04:d3:0c:b2:9e:5f:
e3:bb:dc:dc:8d:32:47:f7:00:06:97:7c:7a:7f:6e:
49:a8:36:fb:71:0f:ed:ba:49:f9:9d:c4:0c:26:48:
7b:cc:24:c3:30:8b:bd:36:ac:b2:d2:25:c0:26:ec:
45:26:db:e6:f2:f0:fc:36:88:5b:75:f7:ea:de:68:
12:16:4d:2f:db:80:cf:d0:06:bb:dc:d7:97:9c:1a:
cd:b9:b6:95:a0:0c:e3:cb:e6:a3:42:b5:b0:ba:1e:
94:38:b5:08:41:f8:f4:d6:23:d0:30:8c:b0:53:21:
b6:77:ef:40:9e:97:6d:1b:51:3e:87:37:a5:97:b6:
e3:5c:80:8a:af:1c:cc:7b:43:be:46:2b:9d:f8:37:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:6F:B9:A3:2F:AB:68:35:31:1C:BF:C3:77:AC:8A:19:F1:2E:88
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:4d:c1:8b:71:16:3a:6b:7b:4a:b9:a5:55:34:58:c2:7f:
04:89:e9:40:85:d4:f6:b1:37:b5:5b:01:74:cf:fd:af:36:46:
6e:1d:1a:cc:5d:9f:bf:a9:a4:39:19:55:e5:d0:73:28:5a:81:
94:2e:b5:8c:9e:f2:c8:60:86:c0:3f:c3:f2:ea:54:d3:c5:ff:
cd:17:2e:25:86:10:6d:f5:b6:e1:fc:f5:ef:64:41:d1:82:22:
22:29:3b:a2:7b:43:48:d4:b7:ce:e6:fe:c0:2c:15:b2:b2:f9:
f9:30:21:89:d6:1d:10:bf:b5:81:bf:f0:82:a3:de:1a:a0:09:
95:54:4c:26:87:0a:38:b5:73:34:8a:9d:a0:3d:25:ce:92:c7:
27:8f:a6:49:4e:87:db:75:1f:98:ce:09:5e:99:46:5f:5a:06:
01:db:e7:e2:41:db:b9:00:47:a7:2f:4b:06:85:e6:ba:75:e9:
ec:8b:4c:9d:5f:95:d0:e5:34:fc:9d:8e:50:2a:a2:d3:4c:bc:
21:e0:fb:82:be:40:cb:7b:3b:0d:e0:65:29:3f:6d:2b:7e:91:
31:b6:10:67:9e:ca:a2:4d:8c:d6:48:37:d8:f5:22:2c:29:de:
a1:51:cf:e6:e6:53:d3:3c:84:3d:12:2e:c0:1e:a0:b8:b2:04:
3d:28:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:25:08 2026 by rpki-client