Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 7ks7Ijy6j3s++0oGMvvlBCAcNi2iR3f7iV12BKMDiL0=
Subject key identifier: 9B:FB:7C:DE:2F:84:BA:F3:EC:BC:6D:7A:FC:B4:8E:22:DB:C5:6F:54
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 019CAAFD5A2EA18AD03DEB905554F84764FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 09F4
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa (hash: PphogVMUEL4OlBwVhraxAAhyGlhiT8gvlTRah6rK8+U=)
2: RFEKzhn-pHan5b3ES1uTHS32Yf0.roa (hash: BUdHJjCTC35G+E5RK3wJNAdK3qHwCYOchA/eJ1lutxw=)
3: frDx6maqwpFdsbhlxcMmFrttL0I.roa (hash: sAaL1XRVCAxgFQY7HpJXtsidkEm2o400k7w79WGxyVU=)
4: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: ErlLScuJxb/63E5Ngq+JxvPTr+A9WERprTqB2QSyEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5a:2e:a1:8a:d0:3d:eb:90:55:54:f8:47:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=9bfb7cde2f84baf3ecbc6d7afcb48e22dbc56f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:d1:fc:7d:68:8b:b9:65:dc:ba:0b:7c:24:
6a:16:55:d5:9a:82:00:d1:69:6a:85:f2:6a:25:d2:
55:c8:d3:f3:20:60:fd:23:5b:00:94:fb:d5:31:4e:
87:0d:5b:1b:ab:b9:59:8d:f2:23:68:ac:1e:38:dc:
0d:b1:3a:2d:3a:fd:b8:96:48:b2:7c:b0:16:ca:c1:
b1:0e:ce:4e:77:44:e6:ce:d1:71:f4:b6:5b:d6:12:
19:39:32:90:f9:da:cf:60:41:37:c9:dd:36:49:60:
21:19:ca:3c:1e:69:80:82:eb:ad:f9:00:6a:39:d7:
e2:e3:30:ad:74:f6:fd:54:8c:de:87:d1:7e:12:d4:
c5:3b:a3:08:10:10:92:4e:d6:5d:3e:8f:cd:b3:b2:
f4:2d:dd:df:5c:94:e7:49:a4:68:9d:6f:c7:0c:28:
e9:6f:fc:d3:8a:19:e4:5c:6d:09:ee:69:07:49:64:
8b:dc:af:50:ca:f8:b7:c2:c6:33:b7:e1:fe:a6:9b:
6e:4a:cd:23:1b:88:29:bc:fd:77:1f:8a:db:75:81:
72:02:bb:f0:11:1d:b5:10:97:e1:df:0a:83:9e:8d:
ef:73:3a:46:20:23:94:09:d4:1c:79:f5:23:ac:a6:
d4:68:5e:4a:6f:bc:d9:bd:3a:a2:a5:6c:a1:c9:db:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:7C:DE:2F:84:BA:F3:EC:BC:6D:7A:FC:B4:8E:22:DB:C5:6F:54
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:06:95:bc:ed:45:46:c1:5b:08:7e:1b:29:91:74:e5:14:ac:
4a:b9:54:24:37:15:e5:73:95:86:fa:27:39:39:66:0d:34:87:
3e:2e:5f:24:be:78:1f:f1:09:b8:ad:7d:95:f2:8a:8e:0f:f1:
92:6a:25:eb:0a:20:6c:82:16:f6:8e:46:c8:90:28:e8:04:d2:
2c:d4:fe:c5:2a:8b:bc:87:b2:5f:04:6f:d2:3a:b2:1b:9f:fb:
34:4e:db:a3:ec:9f:53:cd:a7:ec:53:b0:db:73:b5:56:0a:38:
e2:42:50:c4:d5:7c:fb:df:b3:33:76:c2:3d:d7:6d:7f:01:90:
9a:b4:3b:3b:4e:7b:8e:e1:82:52:63:26:0c:39:41:23:0b:7d:
ad:43:b0:cb:8d:00:ec:07:02:f7:09:53:b2:0b:3c:8b:24:08:
82:6a:cf:15:cf:02:ee:94:39:ab:18:33:72:f0:2b:8e:00:be:
7c:67:f3:f7:30:60:64:03:53:13:cd:47:a3:10:85:51:38:7a:
76:ab:86:e0:bc:fe:1b:c4:c2:35:ad:3b:b3:bd:df:2a:2e:84:
16:f5:0d:3d:63:6d:86:f7:21:25:3f:a2:91:03:e2:0d:0d:7c:
25:f1:4a:25:1a:de:67:bb:20:13:9f:cc:18:4d:c4:1e:1d:c1:
93:22:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:00 2026 by rpki-client