Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: +UwN8VsBi9cb/lHdMxqgDLyQG9n9T6Y1gnbJQPR0Ps0=
Subject key identifier: C0:1D:2E:17:05:05:BA:C2:FD:C7:26:79:C4:28:FC:E6:77:88:67:11
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019D988657C7708188A2AAE6990BAE16E3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0708
Signing time: Thu 16 Apr 2026 23:00:34 +0000
Manifest this update: Thu 16 Apr 2026 23:00:34 +0000
Manifest next update: Fri 17 Apr 2026 23:00:34 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: Z7LbJGT4KXt6yjnzKwoMXKngzf8727w3MU8aPJBmaIY=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:57:c7:70:81:88:a2:aa:e6:99:0b:ae:16:e3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Apr 16 23:00:34 2026 GMT
Not After : Apr 17 23:00:34 2026 GMT
Subject: CN=c01d2e170505bac2fdc72679c428fce677886711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:90:00:90:ab:d8:5a:ae:56:28:50:54:9e:55:
71:61:ac:6e:b4:7a:ad:81:55:fb:ef:d5:07:49:4e:
d3:2d:73:aa:ab:62:3c:e6:00:11:92:20:ff:27:3f:
dd:6d:ab:bc:06:bb:41:7a:03:6a:64:61:80:17:f7:
78:60:25:7f:f9:56:30:63:62:ad:1e:bf:c0:96:5a:
06:47:9e:04:f8:a9:fc:e9:a2:6e:83:0a:cf:88:55:
71:d5:b0:bb:7a:1f:98:0f:77:ba:a8:af:c1:ff:39:
8b:45:36:fc:7f:c5:b2:b3:71:25:71:df:a9:ab:8c:
c1:32:ba:dc:4c:62:32:6a:a1:be:f1:bf:2c:f9:44:
e8:22:90:a8:39:15:c7:fd:8a:b4:fa:29:4b:42:59:
79:0e:0d:98:48:e7:f6:2b:95:90:6d:3b:9f:20:cc:
93:c8:84:a6:d0:43:70:ee:da:a0:34:72:36:32:8b:
5b:eb:ad:b8:21:5d:9f:35:8e:69:6c:e2:ed:51:64:
eb:b9:f4:fc:00:3b:b0:1e:ac:a5:f4:cb:98:22:f3:
78:fe:90:e6:a1:b1:70:84:b1:65:57:fe:34:c4:53:
50:39:69:93:24:ff:01:e3:3f:46:dc:7f:16:ba:8a:
bf:ab:3a:28:39:e6:eb:72:26:a2:7d:e8:74:85:22:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:2E:17:05:05:BA:C2:FD:C7:26:79:C4:28:FC:E6:77:88:67:11
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:cf:e5:d1:e6:c2:d3:94:3c:34:44:7f:3a:49:7f:3e:ac:
83:20:67:85:83:16:97:1e:ec:a3:d3:9c:23:41:96:a7:87:13:
fc:6c:23:6f:5b:49:86:15:2f:1f:05:19:9e:04:8d:27:cd:31:
f0:4e:46:6f:1d:a6:bb:a7:a5:da:cd:21:d6:62:37:bf:51:08:
85:8f:f4:5e:a2:bf:2e:91:25:72:63:1c:6a:53:19:1f:77:f1:
0d:03:37:93:c4:64:72:2a:81:45:e5:f9:ab:90:65:36:e2:a4:
a9:61:8b:6b:f4:32:46:fe:c6:7e:54:69:1b:5e:6c:62:da:7a:
17:59:d0:5b:f2:72:47:86:2d:25:e8:9a:9b:64:72:78:0c:d1:
d3:a4:cc:5a:48:a8:4a:33:0f:f5:25:11:a1:b7:fa:45:5f:f2:
e0:d5:44:65:e8:18:02:63:b0:4d:95:e4:46:ec:8e:a2:0e:c9:
16:be:cf:8d:a1:42:44:44:bc:d5:ad:ea:81:25:77:2e:d2:79:
bb:48:00:db:76:fe:39:2e:ef:6f:a3:f1:ea:f8:95:65:b9:a7:
44:73:ce:6c:93:60:0c:f7:2f:da:5f:58:51:0e:b2:96:96:2e:
a4:f9:b4:79:2f:92:5c:28:c0:2b:ef:88:c8:9f:7d:fa:a4:25:
87:a2:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:31 2026 by rpki-client