Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 2aPPX1zCgzndFO/o4aWHKPdqI3nHQq8sDw2TeV6+VVI=
Subject key identifier: 59:62:0E:54:46:DF:4D:0C:CF:0C:E5:1F:13:17:B1:31:A3:42:FE:DD
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 019D9886A56439D71394CB11753E4122819B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 0A6F
Signing time: Thu 16 Apr 2026 23:00:53 +0000
Manifest this update: Thu 16 Apr 2026 23:00:53 +0000
Manifest next update: Fri 17 Apr 2026 23:00:53 +0000
Files and hashes: 1: EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa (hash: PphogVMUEL4OlBwVhraxAAhyGlhiT8gvlTRah6rK8+U=)
2: RFEKzhn-pHan5b3ES1uTHS32Yf0.roa (hash: BUdHJjCTC35G+E5RK3wJNAdK3qHwCYOchA/eJ1lutxw=)
3: frDx6maqwpFdsbhlxcMmFrttL0I.roa (hash: sAaL1XRVCAxgFQY7HpJXtsidkEm2o400k7w79WGxyVU=)
4: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: K86+TUk9yos7Txy9iBiMeePkjRo1/bHT35ywcZprY4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:a5:64:39:d7:13:94:cb:11:75:3e:41:22:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Apr 16 23:00:53 2026 GMT
Not After : Apr 17 23:00:53 2026 GMT
Subject: CN=59620e5446df4d0ccf0ce51f1317b131a342fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:da:a0:0a:41:71:b4:91:17:92:77:14:e0:
6a:df:be:99:30:ba:f5:64:e6:ff:75:74:78:8c:77:
de:cc:81:cb:ba:b7:e5:0f:e2:bb:43:d8:52:81:3e:
ba:16:17:a5:65:4d:b3:fe:6d:fb:ad:8f:fd:6a:6e:
2e:e9:27:33:07:fa:96:d7:88:24:74:60:a7:39:64:
f4:eb:16:ef:cb:f2:d5:f4:ba:5c:29:ff:47:a8:48:
69:71:dd:66:b5:54:64:4f:af:c2:ed:5f:a1:47:61:
8b:e4:41:c5:09:17:87:aa:02:ba:b5:61:44:f5:a1:
54:71:4e:3e:68:1d:95:68:08:9d:64:0d:bc:ef:d5:
4b:c5:16:9c:90:ab:57:2f:6e:64:5f:e7:85:76:1b:
98:82:1d:3c:28:12:8b:36:9f:62:da:9e:e9:ab:d5:
18:f1:23:c5:57:47:ce:07:e1:d6:c4:c8:22:37:06:
dc:60:9e:4f:87:2c:2c:a2:39:c8:6c:92:ea:64:7e:
e7:29:bb:66:31:cb:4f:f1:f3:28:28:c1:5f:d8:3b:
27:f9:a8:ab:34:f2:44:c9:26:de:f7:6d:cc:0e:d6:
d4:f2:b1:77:81:cf:82:33:82:d1:0a:52:ff:ef:65:
78:0c:bb:80:7c:71:fc:40:70:a1:19:1b:6f:c0:00:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:0E:54:46:DF:4D:0C:CF:0C:E5:1F:13:17:B1:31:A3:42:FE:DD
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:01:79:d1:29:fc:62:f5:cb:1b:7f:3b:63:3b:f2:64:d0:74:
30:ba:09:4a:d6:d7:ed:5e:3b:6b:13:6e:09:be:f0:18:3a:01:
4f:e5:0c:ba:66:95:8f:b5:76:10:c6:50:07:95:96:9a:2f:31:
e8:58:1b:b0:7c:fd:9f:61:26:05:a7:fa:a7:9c:df:a1:5d:8d:
52:12:2b:2f:eb:98:fe:85:ed:ef:17:6d:4e:73:8c:d7:b5:5a:
53:95:11:0c:5e:ea:d2:d3:70:12:d3:eb:f3:4d:b3:9c:6a:49:
26:b6:d3:ec:3a:1a:ee:36:3c:72:6b:e1:08:1b:97:42:56:b2:
da:9a:cc:e2:8a:a1:42:1d:87:d1:84:bb:2f:a6:e2:bd:c8:7d:
ea:73:3e:9f:c9:e2:70:5f:c8:27:f1:b0:2d:63:fd:ff:b8:01:
45:a4:ea:53:b7:1d:64:38:de:46:76:99:09:e6:71:e6:b7:12:
81:46:5f:6f:3e:75:ae:74:b8:4b:c1:5d:70:6c:e9:96:dc:58:
22:91:14:9f:6b:5f:88:fd:a7:16:81:f9:c3:da:d1:c3:3f:9c:
d0:72:cd:12:3b:34:fd:fc:15:5f:e3:ba:3c:5a:66:7b:2f:84:
4b:c7:aa:49:81:d3:d6:61:10:91:c7:13:e9:20:a3:2c:df:5b:
4e:cd:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:19 2026 by rpki-client