Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: dDD1CjVrTqHF5ojrfPAMitL5W0saad9fFdb10SRuoUw=
Subject key identifier: 81:60:E3:01:61:4D:74:06:2A:7A:F7:26:E9:24:7E:98:A5:92:2A:00
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019F93926B55B49B14CC255D91B9C44DEF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:01:14 +0000
Manifest this update: Fri 24 Jul 2026 10:01:14 +0000
Manifest next update: Sat 25 Jul 2026 10:01:14 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: 5rM+5yHdodf8eupn6Lfm784BPWO5vLsraJXA1AFmH40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:6b:55:b4:9b:14:cc:25:5d:91:b9:c4:4d:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jul 24 10:01:14 2026 GMT
Not After : Jul 25 10:01:14 2026 GMT
Subject: CN=8160e301614d74062a7af726e9247e98a5922a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:00:0f:7a:5e:98:4b:d9:5b:f0:12:69:dc:
71:93:5b:57:e2:90:08:61:4a:88:52:cb:4b:50:d8:
5f:f9:57:ca:4a:08:97:c5:76:04:e4:44:a3:cf:13:
81:ba:ef:cc:d1:6c:93:a1:22:1f:04:16:56:db:55:
c3:21:88:6a:09:d9:2b:6c:03:f2:2f:f2:47:38:c2:
1b:75:94:7d:71:86:d2:b8:ad:0d:ee:6a:a1:da:ea:
39:ad:53:0f:2f:24:0d:5a:ff:02:e0:93:c5:55:28:
72:10:5c:4a:d9:a1:8d:5d:95:d7:d9:e8:2a:5a:1f:
d5:f8:5b:a2:8e:11:04:71:d4:02:a1:1e:c6:34:04:
1c:a3:2a:57:8d:42:36:ea:0c:78:65:38:9f:f1:c9:
67:fb:e3:a9:68:ef:36:25:7d:49:18:87:8b:17:13:
6f:64:db:8c:99:72:8b:66:14:44:4b:88:e9:0b:c4:
6e:b6:1b:6c:35:46:2c:27:74:e5:62:27:f4:ea:a4:
c4:af:83:de:53:3c:da:4a:d5:ca:f9:63:69:28:61:
25:a8:59:b1:77:d2:12:ff:56:2e:70:8a:ca:ce:8e:
9f:47:3b:03:16:40:13:6b:74:a5:fe:93:a3:8e:95:
09:f6:70:0f:e9:05:82:65:26:39:6b:12:79:8c:6e:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:E3:01:61:4D:74:06:2A:7A:F7:26:E9:24:7E:98:A5:92:2A:00
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:9b:2e:95:75:29:8e:27:9b:8b:64:ce:7d:46:21:65:4e:
92:ca:f1:4e:f9:c4:b2:3a:b4:25:74:34:f0:40:a2:f3:07:97:
41:f4:0d:78:c9:a0:6d:53:e5:9f:25:b8:e9:22:b5:12:38:01:
0c:29:21:fd:4c:fc:94:aa:c7:e1:ec:e5:65:c6:49:9c:8d:c2:
64:24:89:d8:65:3b:a3:99:c6:f4:59:43:38:d2:24:9e:0c:8e:
03:c4:e1:d9:a9:6e:79:25:41:c0:6b:73:e6:7f:60:f6:ee:8f:
70:f2:e6:93:aa:93:49:9e:0e:45:2e:b0:e0:89:51:5e:d7:07:
4d:cc:0e:3e:71:80:32:c2:a1:1d:45:48:6d:49:8f:f3:b8:f7:
ce:7c:a8:3d:7f:68:72:d0:da:0d:52:2b:bb:d3:fc:65:90:37:
90:d2:c9:20:69:e2:3f:8c:8d:20:15:43:0b:b4:b5:51:7b:5f:
09:66:e6:d5:56:73:50:51:51:ba:67:83:43:99:78:62:a3:86:
9f:5e:78:2a:ef:53:02:8c:d3:9a:26:e7:c5:7b:6a:bb:f8:e7:
6b:c0:c0:45:8c:8c:48:0f:b2:be:e5:53:b8:ac:d2:9d:4a:d5:
b7:dd:da:38:2f:fc:32:02:3d:69:5b:e2:30:25:05:ae:cd:72:
7d:c4:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:43 2026 by rpki-client