Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: Urf5PN0k07mk2iq0XXvEhf9knkoKQkd0trIRZ9sm9b4=
Subject key identifier: A5:83:BD:E6:5F:45:01:32:AA:96:4B:1E:EE:6F:14:F5:B1:1A:1D:26
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019CACEBC2FE2AA1AD8DD08CF0D2F17C9D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 068E
Signing time: Mon 02 Mar 2026 05:00:57 +0000
Manifest this update: Mon 02 Mar 2026 05:00:57 +0000
Manifest next update: Tue 03 Mar 2026 05:00:57 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: cBt5q6ryV96z8D59EJPH2cHoYkY/BELy+/cf65VCfgE=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c2:fe:2a:a1:ad:8d:d0:8c:f0:d2:f1:7c:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Mar 2 05:00:57 2026 GMT
Not After : Mar 3 05:00:57 2026 GMT
Subject: CN=a583bde65f450132aa964b1eee6f14f5b11a1d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:fa:4e:3c:1c:90:14:3a:40:65:93:6d:60:
1c:53:39:2f:0a:bd:bb:42:65:87:8e:4f:5d:0c:88:
d8:9b:1a:f0:cd:00:65:6d:e4:9a:5f:98:00:f4:54:
45:f4:04:5c:7b:cf:5b:2b:fd:fa:a8:28:eb:f3:80:
49:b0:62:66:3d:86:87:2f:2f:9f:cf:95:f9:2c:cd:
03:0c:e9:4f:81:8e:15:ba:26:da:3e:26:b1:c6:82:
d0:ce:bf:c3:3b:9a:c0:b5:34:dc:2b:e5:08:bf:bd:
82:d4:c4:59:e0:8e:09:4e:9c:21:44:41:f4:12:bd:
1b:5a:f5:cb:78:b6:0f:e3:e8:eb:b8:49:46:8b:dd:
5f:d1:aa:21:c2:74:e9:d1:9f:20:dc:ab:01:8a:03:
07:89:f6:0b:ac:d3:98:b5:5e:14:c9:0a:0a:2c:e3:
43:a2:24:e5:ab:55:0c:d2:f0:e5:4e:f8:50:5c:cf:
b5:e1:ab:7a:6b:15:c9:a6:34:d2:28:35:65:ae:0b:
d3:85:3a:05:4d:50:a9:9e:5b:64:3b:de:8b:42:95:
10:fe:96:58:9f:3d:3f:55:76:eb:94:67:5a:63:79:
b8:fd:97:17:5e:4d:b6:d9:69:72:d6:12:64:78:96:
ad:f5:ed:ef:79:3e:04:04:32:21:22:86:80:5b:2f:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:BD:E6:5F:45:01:32:AA:96:4B:1E:EE:6F:14:F5:B1:1A:1D:26
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:5f:46:cc:ac:97:af:75:79:8d:b5:3f:e8:57:17:f6:7c:
29:6b:05:5a:a9:83:38:0d:e0:f2:db:e2:a0:d5:6d:18:a9:7b:
7e:1f:da:e8:4a:05:2b:20:20:df:9c:1e:01:49:30:bc:10:f9:
58:2a:68:db:12:a4:04:a4:8c:10:46:74:f5:e0:58:01:28:24:
68:ec:6d:ad:bb:23:63:3a:a9:2c:30:84:1a:0c:95:6b:31:b7:
84:5d:18:38:ff:56:3b:8e:94:ae:45:a5:31:67:7b:1c:31:0c:
d3:d6:45:56:d9:78:e2:c3:a7:9f:18:a7:3b:a9:ce:2d:64:f5:
ee:8c:c5:fc:61:5b:3e:79:3b:99:70:c8:da:cc:43:d2:f9:b6:
c4:49:af:6a:56:08:06:2e:5c:33:34:4d:81:4a:df:77:cf:c7:
e9:cd:9e:fa:91:32:59:b0:e8:34:00:26:fb:b5:77:8b:82:39:
5f:84:59:b1:51:58:65:e0:2e:66:9a:f8:c6:f4:a9:f1:0f:15:
6c:ca:0f:4d:38:63:0f:c9:04:68:c7:20:55:44:dc:42:82:c8:
2d:9e:f1:27:df:a3:f7:ad:c6:27:3b:97:ee:c6:d8:c2:a8:5f:
0f:7e:e6:05:6f:69:8b:29:4d:66:54:c9:a6:ea:42:f6:cf:23:
e3:ae:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:02 2026 by rpki-client