Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: p8IDoUORmyueYFSj2+tDIMh6ga9YEQl38eWG9spcYgQ=
Subject key identifier: 94:53:CA:3E:3F:BF:4F:97:B3:14:D8:8A:85:C4:16:F5:4C:B6:5A:AC
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019FACAD48406825977A1ADB2B1D938D632E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 1132
Signing time: Wed 29 Jul 2026 07:01:05 +0000
Manifest this update: Wed 29 Jul 2026 07:01:05 +0000
Manifest next update: Thu 30 Jul 2026 07:01:05 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: DI+mSQOMSbPbDB+SKfT6ChYRxK99ITMw7Q5yPnbgVDU=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:48:40:68:25:97:7a:1a:db:2b:1d:93:8d:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jul 29 07:01:05 2026 GMT
Not After : Jul 30 07:01:05 2026 GMT
Subject: CN=9453ca3e3fbf4f97b314d88a85c416f54cb65aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:6a:93:79:a3:20:5a:ad:fc:2c:2b:09:59:
ab:d0:8b:76:81:42:73:95:99:e0:39:8b:c8:ec:b7:
aa:22:9a:dc:da:d2:8d:7b:40:a6:4e:36:29:8d:b2:
1c:c1:79:78:d5:bd:af:f2:4a:ed:d9:b1:b6:77:3c:
0c:88:56:e1:c1:e5:e3:f9:9a:c9:b7:cf:4a:17:cc:
50:f7:4d:52:f9:77:1f:9c:a0:fe:ab:48:6c:f5:b9:
d2:9a:4d:e6:d4:63:e4:cb:5e:11:5e:43:65:93:c7:
3a:3f:cd:1e:27:7b:6c:5c:4a:76:31:ee:6e:92:0d:
72:1d:1d:bf:99:82:20:27:d0:fa:ed:84:f6:93:18:
5b:76:36:c3:2f:6a:16:e4:67:22:73:47:be:e5:f1:
ea:38:f6:e5:b4:92:ac:19:45:21:4a:69:23:fe:97:
16:59:07:08:12:4d:3e:57:ba:54:40:67:4c:91:cf:
45:ea:15:cf:83:53:5d:8b:05:4b:86:01:fc:f8:5e:
44:75:27:c6:e9:5f:50:6a:29:74:6b:a3:ee:ae:c1:
55:34:20:63:bb:b7:cb:ba:6b:45:ce:da:61:72:ab:
55:ce:1d:62:42:1b:2f:77:91:61:9e:d9:a1:b1:a0:
36:5c:5f:41:77:ea:b1:f5:dc:d7:1c:64:a2:bc:a1:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:CA:3E:3F:BF:4F:97:B3:14:D8:8A:85:C4:16:F5:4C:B6:5A:AC
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:a7:9b:31:c3:51:9d:7f:21:5b:16:eb:8c:47:f7:ce:57:
72:6b:98:75:2b:f2:be:75:98:60:00:cf:d9:36:d6:5e:45:2c:
04:3e:26:98:9a:64:b8:b2:14:bf:00:4c:30:da:7d:94:14:b4:
99:36:df:55:8d:b7:7e:bc:a7:31:4c:1e:4f:05:3d:d8:60:84:
f5:80:a6:13:d5:a1:08:ce:7b:e6:87:4b:8a:04:db:4c:79:06:
30:88:be:fa:f2:90:f8:ee:1d:be:27:b0:79:26:0c:f2:53:5d:
df:4b:73:11:cd:8f:ac:1e:5e:13:3e:90:eb:76:43:c5:c6:3f:
8d:57:9e:41:00:95:8e:6b:be:3b:8c:7e:56:60:f0:e4:9e:9f:
f1:b4:44:00:83:1e:fd:fb:5a:b5:d3:fb:e9:dd:67:c7:48:7e:
41:7f:ad:85:fa:97:9c:3d:33:5b:e3:39:d8:7f:20:25:f7:e3:
c4:44:c5:a4:74:eb:f5:f7:e4:b3:ea:52:07:ee:95:27:3b:1e:
9c:00:c3:5a:35:f9:77:c9:51:eb:e2:c3:c8:e8:04:0c:30:59:
b8:05:87:31:ff:25:fb:0c:53:7b:41:e6:f8:80:1d:13:79:22:
00:1e:ee:fa:45:b2:0e:98:95:6a:f4:4c:7f:dd:05:67:bc:ac:
ac:df:55:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srUhAaCWXehrbKx2TjWMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk
ZTgxODkwHhcNMjYwNzI5MDcwMTA1WhcNMjYwNzMwMDcwMTA1WjAzMTEwLwYDVQQD
Eyg5NDUzY2EzZTNmYmY0Zjk3YjMxNGQ4OGE4NWM0MTZmNTRjYjY1YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoVqk3mjIFqt/CwrCVmr0It2gUJz
lZngOYvI7LeqIprc2tKNe0CmTjYpjbIcwXl41b2v8krt2bG2dzwMiFbhweXj+ZrJ
t89KF8xQ901S+XcfnKD+q0hs9bnSmk3m1GPky14RXkNlk8c6P80eJ3tsXEp2Me5u
kg1yHR2/mYIgJ9D67YT2kxhbdjbDL2oW5Gcic0e+5fHqOPbltJKsGUUhSmkj/pcW
WQcIEk0+V7pUQGdMkc9F6hXPg1NdiwVLhgH8+F5EdSfG6V9Qail0a6PursFVNCBj
u7fLumtFztphcqtVzh1iQhsvd5FhntmhsaA2XF9Bd+qx9dzXHGSivKFFDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRTyj4/v0+XsxTYioXEFvVMtlqsMB8GA1UdIwQY
MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt
YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh
LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwCnmzHD
UZ1/IVsW64xH985XcmuYdSvyvnWYYADP2TbWXkUsBD4mmJpkuLIUvwBMMNp9lBS0
mTbfVY23frynMUweTwU92GCE9YCmE9WhCM575odLigTbTHkGMIi++vKQ+O4dview
eSYM8lNd30tzEc2PrB5eEz6Q63ZDxcY/jVeeQQCVjmu+O4x+VmDw5J6f8bREAIMe
/ftatdP76d1nx0h+QX+thfqXnD0zW+M52H8gJffjxETFpHTr9ffks+pSB+6VJzse
nADDWjX5d8lR6+LDyOgEDDBZuAWHMf8l+wxTe0Hm+IAdE3kiAB7u+kWyDpiVavRM
f90FZ7ysrN9V5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:46 2026 by rpki-client