Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: G2ix/B62DPMd8G78ETwV5RknoNTHt23XJDtuKZ6grv0=
Subject key identifier: AE:E7:18:48:E6:49:D9:20:CA:FF:DD:EF:F6:80:F2:79:72:09:A0:49
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01A0C77C9C987B66EDB1D6292D7AE3A8F6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 08AE
Signing time: Tue 22 Sep 2026 05:00:27 +0000
Manifest this update: Tue 22 Sep 2026 05:00:27 +0000
Manifest next update: Wed 23 Sep 2026 05:00:27 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: ZFVJBUTCycR0w7SGucI92K58UK5wqim9PJuTjRTz5Hc=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:9c:98:7b:66:ed:b1:d6:29:2d:7a:e3:a8:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Sep 22 05:00:27 2026 GMT
Not After : Sep 23 05:00:27 2026 GMT
Subject: CN=aee71848e649d920caffddeff680f2797209a049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:84:53:bb:cf:56:b8:7c:11:31:d1:07:53:
f2:61:8b:6d:21:9d:60:d7:6e:76:9f:b0:95:b2:b2:
4f:85:7c:57:df:e8:42:2e:ab:ad:b6:4a:92:f0:41:
62:92:e5:c5:9d:34:a2:e7:68:cf:7f:94:d4:b0:2a:
c3:05:26:9f:76:56:61:6f:6e:3b:48:cf:c8:31:62:
84:d2:64:9e:7f:0b:ab:2a:e1:4d:ee:bd:92:01:62:
9d:b2:e7:ae:dc:d2:eb:c1:3b:98:ee:4a:16:82:8f:
5d:3a:44:fc:f4:6b:51:78:7b:a4:8c:6d:77:9a:ad:
fa:3e:df:9c:17:29:50:8d:52:db:4f:9a:42:dc:05:
58:bf:c4:ab:bb:0b:ad:05:24:54:5e:0f:5a:aa:85:
7f:c9:18:01:4a:94:af:5b:10:ec:47:d4:8b:ac:8e:
0a:cc:9f:c3:dc:a4:a4:c9:ec:90:ce:85:c3:37:cf:
a1:d7:c9:61:30:78:9b:31:43:4f:5a:a9:1d:c0:27:
c0:17:c3:12:e9:00:cc:b2:87:ab:74:b7:c1:48:d6:
7f:31:e0:dd:40:e5:e0:20:76:43:13:b5:59:bc:a5:
ea:bf:ec:2b:11:00:c8:e6:1a:c7:a7:35:09:98:6d:
31:d0:3d:b4:59:ff:ed:37:f0:ad:be:cb:76:ad:cc:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:18:48:E6:49:D9:20:CA:FF:DD:EF:F6:80:F2:79:72:09:A0:49
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:8a:be:12:b6:ce:4d:2e:89:0a:83:ed:b9:79:28:cf:9c:
59:ca:f8:5e:7a:48:b9:e1:05:1f:90:bb:6d:df:f4:fa:bf:3f:
03:10:03:e2:05:c5:25:13:42:24:e1:3e:6c:0a:17:15:bb:d7:
51:e4:fa:5b:89:f7:a3:9d:bf:bf:da:fe:dd:1b:80:4c:9f:c7:
a6:5e:6b:fe:83:e5:6a:59:04:55:97:e8:48:da:36:ef:c2:d2:
18:ff:53:26:0a:ae:1b:04:9b:c5:ff:15:0c:9d:c4:7a:3f:c0:
20:13:fd:ab:ce:92:cc:40:9c:8b:f4:78:1a:55:bc:41:75:45:
78:88:b7:a9:f7:45:db:93:b6:d4:ab:90:be:f9:0b:d1:ab:95:
d5:74:31:7a:5c:83:43:21:92:38:1c:5c:1b:36:89:04:33:7f:
ab:71:7e:2b:a4:41:7e:8d:d1:ac:11:f9:2e:d4:53:a1:b4:df:
24:a6:be:87:08:fd:7d:9f:e2:d2:9d:c9:f4:a5:cf:4e:81:47:
cd:8f:04:62:cc:0b:7c:f2:d9:12:33:dd:7e:21:7d:8b:28:9d:
63:8d:87:6a:16:3c:bf:48:3b:d4:fa:6b:6d:0e:33:a1:4c:29:
e9:ef:f3:b2:e5:dd:fa:92:6c:6d:fb:01:1e:71:4b:58:02:55:
92:29:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:21 2026 by rpki-client