Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: U4K3M+KiCOn+zM7dSyIvbkUGgRXMz733IJbfpZz1U9s=
Subject key identifier: B5:9D:F2:32:AB:1D:F9:58:B4:B8:CE:3A:DF:34:6D:A3:74:D2:91:E3
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019E1EDA4FDAC51726EB4F67F7585B65ECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 01:01:24 +0000
Manifest this update: Wed 13 May 2026 01:01:24 +0000
Manifest next update: Thu 14 May 2026 01:01:24 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: RGVzP5/Q95u+Gwhb/HxMNfRr9bX6UDhKgDjJOJ5tL24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:4f:da:c5:17:26:eb:4f:67:f7:58:5b:65:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: May 13 01:01:24 2026 GMT
Not After : May 14 01:01:24 2026 GMT
Subject: CN=b59df232ab1df958b4b8ce3adf346da374d291e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:90:0e:b1:3a:fa:18:b1:d9:eb:d6:9c:c9:
40:de:8d:65:72:9e:4d:c2:ef:2f:95:15:fc:08:a9:
4a:4b:41:09:7b:2e:88:d7:81:b7:32:36:cf:d8:91:
32:96:23:a1:ad:d9:f6:a2:a1:cd:82:ff:48:03:28:
fe:e2:90:f2:f6:06:a1:ba:de:03:8c:d9:10:75:84:
43:d9:e9:2c:db:99:2b:fc:2a:14:28:32:c5:7d:ed:
18:62:89:30:03:4e:9f:be:bb:08:92:4c:9e:d0:ff:
95:65:65:79:52:2d:f8:a9:7c:66:c8:0c:d9:0e:f8:
76:92:44:71:82:36:26:6f:ca:73:7c:4a:28:c0:89:
0e:1d:79:bf:4c:aa:7c:41:5d:3e:6b:a9:eb:1a:5d:
45:94:7b:be:85:39:19:38:b9:34:b5:81:db:cb:14:
7d:bf:a5:71:36:fa:5f:46:dc:5a:08:8d:6b:91:72:
96:91:0d:3a:dc:7f:19:44:a9:39:6f:8a:57:ae:45:
d8:2c:d9:c7:28:06:a5:c8:e1:86:76:e3:5c:56:34:
bf:b0:01:0f:63:79:93:99:67:73:1a:6b:21:8f:4a:
b5:00:fe:1a:1f:39:b0:c2:14:c4:23:8f:8e:b1:77:
22:34:c8:6a:b8:1d:1b:27:df:a7:90:20:c2:1a:73:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:F2:32:AB:1D:F9:58:B4:B8:CE:3A:DF:34:6D:A3:74:D2:91:E3
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:c1:aa:07:49:71:10:69:00:6e:d8:48:47:9a:9c:51:14:
e5:8b:bd:ea:38:92:98:de:48:41:8f:0d:c0:f4:f5:86:dd:a8:
ef:88:3a:72:71:86:c6:99:a3:b8:ea:43:96:71:f0:6d:bc:ef:
f9:9d:8e:a7:e1:6b:b0:87:92:31:13:7e:89:a2:06:f5:e3:6e:
ae:18:09:86:fb:c1:57:34:d5:02:66:37:27:60:ab:47:78:b1:
f7:39:1d:15:01:51:60:28:98:a1:d3:0d:30:0d:de:0a:cc:6a:
a9:fd:ac:03:84:69:f0:e8:31:7e:31:48:a8:98:13:4d:1f:dc:
07:35:47:3b:9e:23:9e:09:2c:56:cd:8b:07:02:86:44:14:8a:
89:e5:8f:d7:21:61:74:32:95:4e:e1:8d:6e:c2:12:d0:2d:cb:
5b:52:8c:0a:89:d0:b2:8a:f2:fd:63:02:e4:09:9a:e8:d8:e6:
ab:86:1e:d4:bf:2d:0c:d6:10:ed:02:d5:8a:8b:11:8e:0f:e1:
79:eb:dd:36:38:78:fa:83:48:bf:00:7d:7f:57:59:85:4b:01:
58:c0:87:f9:d4:dc:1d:97:4e:e8:9c:72:aa:4f:7e:bb:44:8e:
1d:84:2c:dd:af:e5:82:a0:49:ab:85:ed:1d:7a:7b:8d:8b:6f:
c8:98:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:01 2026 by rpki-client