Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: TftePv0oVCkFzf2hhPjBSR7dkTNuF+P2mPV9webRxk8=
Subject key identifier: FE:F7:FC:9C:39:E5:11:A1:EE:54:F3:23:35:93:A8:A9:A6:71:66:75
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019CAC1005AB633B6E2A1DFE52F11592AACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0FA4
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: nTZxJDiZrA6Rv+ZdNgRAFsQQ9iV0AEe16KJegx3X9tc=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:05:ab:63:3b:6e:2a:1d:fe:52:f1:15:92:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=fef7fc9c39e511a1ee54f3233593a8a9a6716675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:6d:28:cd:dc:9c:c0:0e:97:d7:b6:61:03:
ce:23:46:5f:63:f2:1b:90:6a:fa:7c:75:0e:3b:dc:
4f:c6:49:16:3a:d8:37:49:25:e9:de:db:b0:27:22:
46:ae:ee:aa:29:21:a5:85:94:9f:05:1e:a8:6d:6d:
a3:8a:04:ad:cd:33:f6:a8:3d:77:26:bc:61:0b:5d:
47:f6:c2:94:b1:90:24:4e:e2:29:0a:a3:0e:35:c2:
57:06:ea:8b:bc:82:f4:5c:9f:f7:26:59:04:8c:68:
44:c7:66:21:d1:22:b4:40:f1:b6:6b:56:dd:77:3d:
57:ed:8a:ee:a5:c3:2c:6a:ee:48:04:54:58:39:90:
29:cc:29:ba:45:a7:55:12:b5:c6:55:94:a8:0e:54:
a7:79:7f:5f:db:81:73:10:02:8e:85:6b:e5:b2:ac:
cb:6a:9d:22:db:1d:53:fa:56:63:ab:65:08:e6:97:
b0:c1:d6:8d:06:30:06:33:3b:1d:61:f1:ed:1a:f3:
29:f2:f8:2e:66:fe:6e:ac:46:e1:0a:8f:bd:da:b9:
90:07:ed:5d:b8:47:23:da:5d:75:58:73:9c:ee:06:
9f:59:73:84:87:e6:9a:f7:68:41:21:29:68:49:55:
c9:be:a1:c7:b0:e3:3c:df:09:cc:ce:44:35:38:2a:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:FC:9C:39:E5:11:A1:EE:54:F3:23:35:93:A8:A9:A6:71:66:75
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2c:89:0c:5c:dd:9c:d3:cb:f5:35:08:07:b2:bf:6a:a4:82:
71:2d:bc:4d:70:40:2b:ec:11:ee:51:6b:e2:c6:0b:d0:2e:fd:
64:6e:0b:9d:9b:76:76:12:d4:f2:c2:99:62:44:99:66:6d:4f:
19:82:54:5a:85:5c:72:ad:18:a9:f2:b6:64:84:4b:47:57:d0:
ad:d8:38:72:9c:46:55:04:4b:93:b8:c6:1b:d5:ba:9b:ea:55:
45:65:0d:76:6b:e5:52:f0:85:39:a0:4f:39:7b:e2:14:33:ea:
9f:e5:0d:12:74:90:be:95:3a:f0:b8:50:6c:2b:77:18:f6:16:
f7:a5:00:63:c0:b2:eb:19:1a:02:67:a6:97:46:48:7b:07:98:
53:09:ab:7e:21:b2:c5:5c:da:48:bf:ef:84:31:12:06:6f:21:
cc:e3:11:48:da:21:af:ce:07:5a:9c:5b:ed:a7:40:c2:fb:e3:
bf:c2:39:ad:d3:ef:1d:06:00:6d:b9:24:e7:dc:0d:d3:d3:48:
45:ce:cc:f9:fb:65:a5:66:7c:7d:a2:d9:1b:3f:5b:0d:06:ad:
e3:ca:a4:da:f2:1b:f8:73:ea:cd:95:2c:14:09:a1:6a:ff:24:
2a:c8:1c:c1:a4:e9:13:2d:df:8b:d4:a2:da:c8:bd:fc:d9:19:
bc:f9:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:38 2026 by rpki-client