Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: +AEkvBTsfTBjJ27zC4azb9bwsLafdhFDgYKx1MX3pDg=
Subject key identifier: 3E:C9:BD:2C:BE:9C:6E:10:B9:4D:8E:37:F2:CE:7A:4C:14:1F:CC:23
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019D99998ED2F44EBAE5464FA7FD5FA63C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 101F
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: 2G4zQXcrZDnBG7ZljUD3/2RbJmbe+gXw4JGdyIexN4s=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8e:d2:f4:4e:ba:e5:46:4f:a7:fd:5f:a6:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=3ec9bd2cbe9c6e10b94d8e37f2ce7a4c141fcc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:2b:6d:2e:a4:f0:69:bb:da:53:de:9f:1b:
1a:7a:76:3e:59:18:7c:e1:01:36:61:05:55:f1:c3:
28:f2:e5:bc:59:3c:df:c7:35:8f:53:aa:ce:2b:c7:
e5:5d:89:d7:3f:70:21:a1:5e:20:01:77:31:95:6a:
1a:e9:e0:0d:62:e1:a5:b7:d4:2a:90:82:d6:3c:24:
c7:c5:b8:33:38:64:43:9d:04:7e:2d:a5:e2:b4:31:
d2:fc:a4:3d:ab:3c:86:75:37:1f:ae:2f:6f:f5:ec:
8f:f5:09:a5:9c:95:92:35:4e:4f:6b:3a:45:72:35:
82:ab:27:c1:d8:bc:62:80:98:fe:83:ab:25:9c:03:
ff:99:13:87:3e:c6:06:e8:d5:87:0b:e6:88:b4:30:
75:c7:4f:f3:c4:30:c0:c6:b4:09:12:f7:e8:84:db:
cc:09:52:e5:7d:58:b8:9b:7c:e6:40:42:8f:01:45:
e8:47:21:54:08:09:97:41:97:9e:51:7a:3b:75:a6:
14:67:81:05:87:11:15:62:f3:37:3b:cb:b9:df:98:
7d:29:64:84:5d:52:bd:cc:10:81:c9:ba:1e:a0:a0:
e2:a2:6e:97:28:15:bc:cd:55:fe:e9:da:0b:c7:7a:
c3:c2:74:21:63:9b:db:0f:09:54:d8:ec:a5:68:4d:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:BD:2C:BE:9C:6E:10:B9:4D:8E:37:F2:CE:7A:4C:14:1F:CC:23
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1f:be:a3:4c:a3:63:c6:4c:e0:e3:f1:28:9b:57:0a:58:f0:
89:89:3b:b2:a7:22:25:4c:2b:c0:49:77:97:00:30:2d:08:cd:
f0:06:cd:5e:1b:bd:4c:a5:1f:f3:0b:a1:c6:58:56:5b:1c:da:
bc:69:fa:0a:cb:17:0a:6f:71:a9:1a:40:e8:fb:9f:df:08:1a:
f1:10:a1:eb:a1:f7:71:2b:52:e8:a8:59:2a:86:68:fc:40:ec:
8e:4c:eb:35:81:e4:56:22:c3:5a:53:de:4e:ba:7c:47:94:bd:
6c:8b:0a:91:0d:30:f0:99:a1:53:12:ab:c3:74:e9:b3:df:b7:
70:6d:cf:4c:29:7e:97:3d:52:33:c3:b2:75:a5:bd:61:a4:48:
b9:e6:dd:9e:26:32:c5:ed:7b:78:90:b1:bd:30:b8:a8:20:a1:
9d:f8:73:2d:d1:be:8e:6f:a0:10:ff:db:c4:a6:09:49:87:d1:
2d:49:92:8a:28:58:d9:d5:63:a7:53:cc:cb:70:89:00:52:50:
39:0d:a1:1f:fa:05:59:b1:56:01:c2:5b:37:e5:29:c5:50:9b:
29:f3:47:42:08:a4:05:e8:91:f3:af:21:74:39:e9:bb:e4:87:
c7:46:ce:ef:00:ab:e2:ef:25:52:c5:a3:b4:41:22:d6:cd:5f:
3b:86:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:32 2026 by rpki-client