Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: O0tEVmvgfqSjyEzC9m+PebqhxqDC6AQewfNJng1GaIU=
Subject key identifier: E4:A2:D6:84:61:9D:E0:F9:9B:BF:08:C2:1D:E4:91:D2:B0:64:FE:04
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019FAB2C73BC7D47A53D42BD099727604AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1795
Signing time: Wed 29 Jul 2026 00:00:44 +0000
Manifest this update: Wed 29 Jul 2026 00:00:44 +0000
Manifest next update: Thu 30 Jul 2026 00:00:44 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: N7XDRGDlUQelnz4b8RVT1KbhiXrDAr6B1UPSRqhCVTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:73:bc:7d:47:a5:3d:42:bd:09:97:27:60:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jul 29 00:00:44 2026 GMT
Not After : Jul 30 00:00:44 2026 GMT
Subject: CN=e4a2d684619de0f99bbf08c21de491d2b064fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:bd:2c:4b:ba:5d:61:1f:41:7d:a1:12:1a:
b7:13:50:29:71:f8:f5:56:be:91:b7:41:97:f3:b3:
5c:2c:b2:0c:a2:a1:1a:be:eb:70:6c:e6:34:87:b3:
c1:fe:cd:e3:9e:f5:92:aa:e5:a5:3c:94:4a:a8:07:
f3:4f:42:68:1c:0e:6e:4f:6c:57:68:c9:ec:c3:a9:
54:60:c5:91:86:48:f4:2b:17:31:dc:2b:c8:4d:f8:
c3:25:b2:5c:56:0b:20:e2:61:f7:84:f4:30:67:6a:
7f:c3:1b:51:f7:30:95:cd:01:d0:fb:02:5b:e8:b6:
52:79:6a:9a:99:95:87:e0:b9:09:aa:4c:d7:68:33:
d1:28:bc:ae:de:84:e2:24:0d:d2:07:81:5b:45:30:
b7:32:60:21:ae:56:27:76:cb:ad:6c:c8:6a:8f:5b:
b0:09:c5:b5:af:7f:26:58:d1:3c:80:fd:d3:97:7f:
46:1b:6b:06:c9:2d:b5:65:bf:26:72:86:ab:27:f8:
28:5e:cf:09:15:4f:34:fd:81:42:ec:84:55:c0:ab:
87:5d:4c:18:cd:02:2d:75:1e:56:cb:5a:f4:02:58:
fb:87:33:0b:37:63:f4:11:22:3d:1a:44:36:0b:07:
0d:5d:50:6a:9f:d5:e6:fb:e2:e4:66:fe:68:29:b2:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:D6:84:61:9D:E0:F9:9B:BF:08:C2:1D:E4:91:D2:B0:64:FE:04
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e7:21:e7:78:dc:c5:74:a7:4f:f4:88:70:62:70:6a:62:1b:
0c:b2:01:3a:2b:1f:39:a3:89:11:a4:cb:ff:5d:d4:39:61:89:
5b:a0:90:4f:44:9f:76:f7:05:9e:8c:8d:6a:fa:64:b7:82:f6:
e2:5b:44:3e:64:2c:0b:78:d6:c6:a8:f3:3f:83:2e:5e:b8:8e:
64:8c:df:53:38:19:e9:5b:a5:19:f4:32:dd:9c:16:ef:45:b1:
49:71:51:16:1c:f1:c4:d7:d6:c6:6a:a3:ef:15:2e:85:ac:ea:
03:30:ea:25:01:ab:cf:3d:7f:6f:b1:bf:ae:57:0d:21:64:1e:
de:5c:85:99:21:6d:63:c8:52:1b:44:b4:99:07:d9:be:2f:a5:
05:a3:e0:12:d3:28:65:b3:46:1a:9e:96:ae:8d:30:1b:ea:5b:
cd:e9:78:37:4d:35:52:d6:b0:a7:6d:1a:86:df:d0:3e:13:40:
ed:c0:6c:79:e9:e3:50:52:fc:67:57:3c:cb:b0:98:0a:58:c2:
dc:60:9f:bb:7a:6e:22:f8:c9:71:36:1f:3c:b3:59:a1:85:bb:
6d:f1:2a:d2:e2:49:75:56:cf:dc:30:05:2d:02:f4:72:95:6a:
56:c5:18:77:98:30:e1:8a:ba:02:c2:60:62:47:5d:27:cf:c8:
9d:19:71:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLHO8fUelPUK9CZcnYErzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz
MTI3YzYwHhcNMjYwNzI5MDAwMDQ0WhcNMjYwNzMwMDAwMDQ0WjAzMTEwLwYDVQQD
EyhlNGEyZDY4NDYxOWRlMGY5OWJiZjA4YzIxZGU0OTFkMmIwNjRmZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOa9LEu6XWEfQX2hEhq3E1Apcfj1
Vr6Rt0GX87NcLLIMoqEavutwbOY0h7PB/s3jnvWSquWlPJRKqAfzT0JoHA5uT2xX
aMnsw6lUYMWRhkj0Kxcx3CvITfjDJbJcVgsg4mH3hPQwZ2p/wxtR9zCVzQHQ+wJb
6LZSeWqamZWH4LkJqkzXaDPRKLyu3oTiJA3SB4FbRTC3MmAhrlYndsutbMhqj1uw
CcW1r38mWNE8gP3Tl39GG2sGyS21Zb8mcoarJ/goXs8JFU80/YFC7IRVwKuHXUwY
zQItdR5Wy1r0Alj7hzMLN2P0ESI9GkQ2CwcNXVBqn9Xm++LkZv5oKbLGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSi1oRhneD5m78Iwh3kkdKwZP4EMB8GA1UdIwQY
MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt
OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy
LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0uch53jc
xXSnT/SIcGJwamIbDLIBOisfOaOJEaTL/13UOWGJW6CQT0SfdvcFnoyNavpkt4L2
4ltEPmQsC3jWxqjzP4MuXriOZIzfUzgZ6VulGfQy3ZwW70WxSXFRFhzxxNfWxmqj
7xUuhazqAzDqJQGrzz1/b7G/rlcNIWQe3lyFmSFtY8hSG0S0mQfZvi+lBaPgEtMo
ZbNGGp6Wro0wG+pbzel4N001Utawp20aht/QPhNA7cBseenjUFL8Z1c8y7CYCljC
3GCfu3puIvjJcTYfPLNZoYW7bfEq0uJJdVbP3DAFLQL0cpVqVsUYd5gw4Yq6AsJg
YkddJ8/InRlxSA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:08 2026 by rpki-client