Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: FGiWnEI1myUJXQlON3x5ZutzkqsE8wboris4xiAz4Gw=
Subject key identifier: 07:56:9A:30:0E:58:4E:77:9A:FF:80:E3:79:DD:5E:A8:00:B7:7E:97
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01A1254256ACBA92B5DC2BE2D186C23AC2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 11F5
Signing time: Sat 10 Oct 2026 10:01:06 +0000
Manifest this update: Sat 10 Oct 2026 10:01:06 +0000
Manifest next update: Sun 11 Oct 2026 10:01:06 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: edAvKgE7QXkFpqGXpULCGLUV3133zVoh5XO+ic0oUGM=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:56:ac:ba:92:b5:dc:2b:e2:d1:86:c2:3a:c2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Oct 10 10:01:06 2026 GMT
Not After : Oct 11 10:01:06 2026 GMT
Subject: CN=07569a300e584e779aff80e379dd5ea800b77e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:9b:da:49:fb:5e:42:37:4b:e1:28:84:86:
7c:cc:cf:eb:d5:28:9e:ec:c1:fe:23:f5:d8:2d:a4:
a5:2e:84:f4:30:6b:64:32:93:52:82:a4:94:da:89:
02:85:96:b7:90:c7:49:0c:77:0d:b1:a0:6a:87:e7:
44:bf:ed:b1:a2:b3:68:10:24:51:5e:8c:37:40:e7:
56:83:8b:21:e8:38:ba:1b:a1:a4:dd:eb:5b:7a:7c:
50:46:ac:4f:c7:0d:33:bd:83:df:95:5a:7e:d7:ab:
9e:49:87:a4:19:1b:b3:92:02:94:8b:5e:b6:a5:2b:
92:98:27:28:6e:5a:a9:d0:7c:c4:be:0b:f3:2f:65:
ac:07:68:49:09:c0:1a:5d:eb:88:9d:b5:51:db:a5:
10:14:86:8a:35:fa:59:7b:df:42:1e:33:ae:7d:ee:
bf:e7:3e:ba:ac:80:1d:ed:3e:15:c5:15:5e:1d:d5:
7a:d9:38:df:c6:bf:ef:e5:0d:7b:a8:92:c2:0d:4b:
f4:2e:25:43:92:7d:97:39:15:14:05:56:56:c6:fc:
e2:23:8f:bf:df:f0:ec:64:b0:50:4f:9c:c5:c9:f3:
d3:9d:38:6e:12:b1:8d:1c:5e:56:34:f5:8e:36:60:
16:e1:43:6f:b3:ad:24:00:65:ac:46:d5:47:1f:94:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:9A:30:0E:58:4E:77:9A:FF:80:E3:79:DD:5E:A8:00:B7:7E:97
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:8e:76:d1:e8:3d:ef:aa:44:90:7b:2f:bd:57:ea:63:d8:
22:7c:4a:f0:00:f3:6e:a4:86:35:84:d6:75:7f:7a:f1:e3:f9:
c7:c0:fe:62:00:e4:35:3c:9a:6f:4c:00:48:77:91:11:70:08:
26:25:9b:96:df:d3:10:01:fc:6b:3e:cb:22:18:42:c9:f4:e3:
f0:5c:39:80:71:5c:13:3b:2b:c3:81:4c:c3:99:74:f1:01:ec:
07:91:f3:05:f7:5e:5e:3c:43:c6:54:96:c3:bb:4d:52:c7:25:
40:58:c4:e7:02:81:f1:7c:96:af:1d:06:0b:3c:2f:cb:2e:2d:
22:e6:8a:e3:be:28:74:d1:76:80:27:2e:3e:42:ce:93:43:04:
97:6f:8a:f0:b2:20:b2:42:5f:0a:d2:73:3c:23:59:72:2b:93:
d7:53:aa:60:56:be:94:50:fb:cc:e6:59:8f:e4:c9:10:30:20:
7d:f0:a3:af:6f:87:32:b9:7e:4a:0c:b9:df:2b:69:f5:05:15:
53:0d:28:77:8d:f1:8a:ef:3e:d4:91:5b:fe:57:ed:2c:7a:a0:
94:09:85:ec:2f:79:01:b0:6c:0e:73:2e:07:59:f5:15:e0:fe:
b9:7e:39:35:c1:78:06:07:c5:b7:ce:ef:a5:f0:19:39:a0:e8:
58:69:7b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElQlasupK13Cvi0YbCOsLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk
ZTgxODkwHhcNMjYxMDEwMTAwMTA2WhcNMjYxMDExMTAwMTA2WjAzMTEwLwYDVQQD
EygwNzU2OWEzMDBlNTg0ZTc3OWFmZjgwZTM3OWRkNWVhODAwYjc3ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBSb2kn7XkI3S+EohIZ8zM/r1Sie
7MH+I/XYLaSlLoT0MGtkMpNSgqSU2okChZa3kMdJDHcNsaBqh+dEv+2xorNoECRR
Xow3QOdWg4sh6Di6G6Gk3etbenxQRqxPxw0zvYPflVp+16ueSYekGRuzkgKUi162
pSuSmCcoblqp0HzEvgvzL2WsB2hJCcAaXeuInbVR26UQFIaKNfpZe99CHjOufe6/
5z66rIAd7T4VxRVeHdV62Tjfxr/v5Q17qJLCDUv0LiVDkn2XORUUBVZWxvziI4+/
3/DsZLBQT5zFyfPTnThuErGNHF5WNPWONmAW4UNvs60kAGWsRtVHH5STqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdWmjAOWE53mv+A43ndXqgAt36XMB8GA1UdIwQY
MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt
YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh
LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPleOdtHo
Pe+qRJB7L71X6mPYInxK8ADzbqSGNYTWdX968eP5x8D+YgDkNTyab0wASHeREXAI
JiWblt/TEAH8az7LIhhCyfTj8Fw5gHFcEzsrw4FMw5l08QHsB5HzBfdeXjxDxlSW
w7tNUsclQFjE5wKB8XyWrx0GCzwvyy4tIuaK474odNF2gCcuPkLOk0MEl2+K8LIg
skJfCtJzPCNZciuT11OqYFa+lFD7zOZZj+TJEDAgffCjr2+HMrl+Sgy53ytp9QUV
Uw0od43xiu8+1JFb/lftLHqglAmF7C95AbBsDnMuB1n1FeD+uX45NcF4BgfFt87v
pfAZOaDoWGl7yg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:46:49 2026 by rpki-client