Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: vQ/byufE6DAkxChYCQIfKSwlnG/SIwEWs2mgLrGyhOw=
Subject key identifier: 3D:E0:DE:16:86:0E:53:36:D4:3F:82:A7:04:8C:47:C1:FB:FD:33:F8
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019CADFE0A0DA67A902E9216F0C03522F503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0FA5
Signing time: Mon 02 Mar 2026 10:00:32 +0000
Manifest this update: Mon 02 Mar 2026 10:00:32 +0000
Manifest next update: Tue 03 Mar 2026 10:00:32 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: GUtuHZ982CO+x0xmuAQRvNq0pDEQ9sfctPVRJ49Dd2U=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:0a:0d:a6:7a:90:2e:92:16:f0:c0:35:22:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 2 10:00:32 2026 GMT
Not After : Mar 3 10:00:32 2026 GMT
Subject: CN=3de0de16860e5336d43f82a7048c47c1fbfd33f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:3d:11:45:f5:5e:4e:de:ea:cf:fe:3a:ab:
37:4b:1d:6d:2a:52:24:03:24:25:ca:55:64:05:6b:
e8:7a:cb:8c:03:bf:aa:20:c3:87:af:2d:e6:fb:a3:
d9:4f:1c:46:2f:41:6a:d8:87:47:90:38:83:4b:a5:
ea:f5:d7:24:bf:aa:49:97:9f:cc:7a:bb:0d:a9:60:
b9:3c:a8:82:d2:ae:1a:c7:cf:eb:f7:f8:c5:2c:75:
44:cb:a9:56:30:f1:0b:c9:76:52:4f:fc:3b:6b:3f:
bf:5a:51:5b:63:da:77:dd:c7:ea:89:3a:97:72:9b:
77:fd:06:07:cc:15:9c:08:a5:1d:a4:6f:1a:67:21:
a1:5d:da:ce:f8:77:0b:a1:76:63:dd:cf:a7:5f:b6:
c6:e5:4f:92:f9:44:3f:6c:9e:4d:94:9e:24:99:39:
70:64:d9:2d:21:0a:28:9a:ff:dc:b8:b7:66:4a:fc:
3e:73:4c:72:99:40:d5:54:7c:5f:f9:5a:43:ba:5c:
3d:73:7d:25:d1:59:16:09:fb:a4:2a:ee:a8:63:03:
05:27:d9:23:08:90:01:51:6d:01:00:28:e9:61:c4:
68:a7:11:1f:d0:18:0b:13:e9:89:eb:62:78:64:f8:
6b:a0:b6:0a:c3:d7:05:4b:b2:bc:a7:a2:69:8c:3f:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:DE:16:86:0E:53:36:D4:3F:82:A7:04:8C:47:C1:FB:FD:33:F8
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:9d:f3:87:46:20:aa:3b:ba:4d:47:f4:2c:87:1c:1e:c9:
e6:8d:eb:f5:11:7d:74:2d:fa:c4:86:ae:8b:b1:f0:12:ee:cf:
1d:49:e7:80:9b:f9:95:ab:d0:9a:2f:33:a6:e0:7b:68:3b:b5:
3b:e1:b1:93:b5:8c:68:84:c0:70:aa:41:1c:ec:75:8c:29:64:
af:73:f9:87:6a:fd:d0:3f:7d:e7:7c:8e:3f:15:73:96:a4:f8:
18:00:aa:42:ce:38:3f:eb:e1:fc:72:eb:23:27:1a:b6:80:aa:
6e:eb:65:58:2c:35:fe:b3:84:97:17:1b:45:97:f8:70:3f:63:
26:7f:6c:a6:23:76:17:8c:7b:db:07:6d:8c:ec:5d:a8:19:35:
e7:c5:1c:06:14:e7:7f:20:86:fa:0a:44:d8:25:46:80:0b:79:
4d:57:be:97:a3:88:bf:14:e5:03:72:52:4d:3b:f2:37:a7:ba:
f5:11:c1:f2:24:9f:bc:82:20:3b:b8:e3:54:4b:0b:73:ae:63:
57:01:b5:b8:55:b1:f9:d2:8d:3c:21:93:42:e0:13:5c:91:5f:
24:a7:3e:55:78:a6:fd:a0:99:06:62:ed:81:b3:a7:dd:ab:df:
1c:a1:76:95:5a:9d:20:50:50:99:bd:79:28:14:87:5c:63:a9:
db:58:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:30 2026 by rpki-client