Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: W1nIC7D0qieC27sJC0RktQ2TifU+qHtKFgADpja0bJg=
Subject key identifier: 94:F8:60:64:B0:C2:7F:5C:0C:E5:E4:D0:ED:9D:F5:19:CF:1C:26:BC
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019EBFFF07C409FD889982FA87D0BA1CCEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 07A1
Signing time: Sat 13 Jun 2026 08:00:22 +0000
Manifest this update: Sat 13 Jun 2026 08:00:22 +0000
Manifest next update: Sun 14 Jun 2026 08:00:22 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: p3YPwhbx6a2upHFkyUiVrF6i01Ro2CGsWi8BNEYQREU=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:07:c4:09:fd:88:99:82:fa:87:d0:ba:1c:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 13 08:00:22 2026 GMT
Not After : Jun 14 08:00:22 2026 GMT
Subject: CN=94f86064b0c27f5c0ce5e4d0ed9df519cf1c26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:6f:c2:15:d3:2c:b9:ee:91:ed:0c:64:65:
13:85:43:b3:88:2e:3b:3d:28:c4:0b:54:8a:50:74:
52:03:be:c2:99:15:41:b2:79:98:92:6f:46:61:d5:
7e:32:fd:35:53:04:b9:cc:99:7d:a1:35:b4:91:c1:
da:4f:e0:95:22:f1:85:74:30:0d:35:a8:5c:a8:c1:
ae:1d:86:e2:e1:1e:75:8f:34:48:51:fe:d6:50:d4:
0a:d0:1d:80:53:39:9c:5a:2d:66:0f:a3:a0:da:8e:
f7:0a:10:13:e4:f8:86:ac:b8:fd:3a:49:7c:68:4a:
d3:de:4e:16:d6:c4:a3:b4:96:96:db:8b:df:d1:fb:
46:d2:37:80:db:5c:a6:97:d3:24:75:7b:fd:9c:d1:
e0:93:71:69:e3:60:a9:b8:93:3a:7d:f2:a7:cb:28:
a8:a3:b8:9a:1f:72:4a:3f:63:c6:cb:14:06:bf:6c:
1e:7b:33:a5:10:ac:62:96:15:ba:2d:68:2a:42:87:
22:42:c1:dd:be:82:c0:b8:57:14:a7:4c:8d:47:e4:
8c:6d:24:3e:52:df:af:cb:82:64:b9:c9:86:89:ec:
e0:d9:db:bd:dd:be:de:46:e6:df:9d:b8:18:48:28:
bf:ba:3b:9f:f7:58:b6:d3:0e:e7:db:12:a6:84:5e:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:60:64:B0:C2:7F:5C:0C:E5:E4:D0:ED:9D:F5:19:CF:1C:26:BC
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:26:f9:57:bc:e1:ee:17:78:fd:79:f2:de:3f:07:8b:e8:
04:77:01:32:cc:13:c5:09:9d:f3:c2:6c:86:b8:c0:cf:ed:b0:
db:6b:04:76:a4:98:04:69:47:92:1e:dc:82:c7:2f:79:c2:ae:
d3:5a:a1:ea:a6:9e:38:08:0e:8b:9a:36:c0:de:55:f2:62:09:
e6:f0:76:c4:8c:94:a2:73:ea:ac:d3:f3:a0:9f:2a:74:8a:1b:
77:07:ff:77:a2:76:8a:f9:e6:98:fa:79:fc:05:a2:b1:85:e0:
d7:b5:ff:9e:54:ef:ed:b4:06:9f:0e:92:3e:bd:39:f4:40:da:
bd:59:15:36:9c:0b:d5:84:07:3d:cb:b1:f5:83:5b:ab:71:5d:
04:2a:26:cd:e9:40:26:3a:42:a3:35:bf:38:76:56:9f:50:91:
cc:9a:3e:c3:83:34:8d:59:15:6c:59:c6:f1:a5:fe:35:cb:de:
1d:8f:66:0e:03:b2:19:58:76:5f:a7:32:56:97:ba:99:20:67:
0c:3b:73:30:78:2a:e0:9c:be:5a:76:48:a1:ff:e5:6c:4d:c1:
ad:78:40:22:43:37:53:1e:c4:b3:28:eb:cd:ff:93:61:b9:b8:
a5:d4:e4:73:3e:68:89:78:cd:84:0a:11:ae:66:ee:c0:95:5f:
71:e5:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:40 2026 by rpki-client