Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: 9XDF20+BudireP33JOAICP0wHPDQvfWIxbqdkoqm1Qs=
Subject key identifier: C0:B7:F2:FB:A9:EE:0F:41:6B:32:28:06:CD:9E:70:17:79:52:4D:6E
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019EBF9136364247A8B34723898CDF9E3597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 171B
Signing time: Sat 13 Jun 2026 06:00:25 +0000
Manifest this update: Sat 13 Jun 2026 06:00:25 +0000
Manifest next update: Sun 14 Jun 2026 06:00:25 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: GJRup19S2+sWU1dJWXXnky9eElEhG0Q9tvZJHWfUUgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:36:36:42:47:a8:b3:47:23:89:8c:df:9e:35:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jun 13 06:00:25 2026 GMT
Not After : Jun 14 06:00:25 2026 GMT
Subject: CN=c0b7f2fba9ee0f416b322806cd9e701779524d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:84:06:7e:34:3a:5f:fc:61:6b:8c:61:ab:
27:e5:0b:b4:5f:5d:d8:43:f7:94:0c:3e:65:75:57:
3d:7d:15:e8:da:e2:f3:9b:ba:b5:ef:5d:0d:6a:c8:
55:46:5c:85:82:94:b3:0b:28:75:80:92:7b:49:d8:
f6:1d:3c:b4:83:dc:0b:b8:5c:24:c9:0e:8c:5b:f8:
6a:e7:d6:e7:c3:3f:2b:e0:9f:76:c0:8f:74:c3:e8:
f5:6a:4a:cd:53:6c:c9:31:35:b2:3c:97:d9:a8:f5:
a1:ee:56:42:ff:25:a1:94:b8:14:3c:af:31:32:29:
04:92:af:e5:51:e8:b0:c4:6a:c4:26:16:a7:e2:23:
63:2c:b0:4f:35:c9:91:74:75:20:3a:c2:4c:b3:be:
e9:13:ce:5f:12:3c:6b:6a:33:e5:55:38:de:c8:59:
39:53:9a:37:3a:a7:d1:0f:2c:1e:95:0c:d9:5a:f8:
85:bb:57:46:9a:54:61:8c:e7:ff:f1:f0:46:97:4f:
ca:f6:25:cb:7e:6e:31:eb:39:15:b7:95:f3:4b:9d:
ef:1e:ba:79:97:97:37:7a:1f:95:9e:d4:55:a3:d8:
3f:28:bd:11:7f:ef:88:50:b1:fb:ac:3f:1f:5d:dd:
47:9d:c7:22:21:00:f2:6e:3b:56:a6:90:ad:ae:50:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:F2:FB:A9:EE:0F:41:6B:32:28:06:CD:9E:70:17:79:52:4D:6E
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:db:6c:fc:fa:b7:03:8a:57:66:35:30:09:86:98:aa:b6:
44:a5:cb:67:d8:54:8d:a1:73:b7:e2:f4:cc:80:c6:11:d0:ac:
a8:02:d0:0f:67:40:33:7b:33:8f:53:50:b5:3f:17:52:e4:be:
b0:0a:0e:04:00:e4:53:f2:b5:59:79:87:90:f4:d4:c0:1a:26:
f7:f4:2d:98:27:5e:0c:4b:84:94:e6:b5:c1:a9:dd:58:a0:0f:
e9:09:b2:60:7a:7b:e7:d2:f1:c6:21:12:84:55:32:3e:89:d6:
9f:af:5e:4b:f3:a8:52:16:2a:1f:e1:15:ba:4e:27:10:b2:a1:
ac:8b:2e:8f:07:f0:74:11:b1:8a:87:8b:ea:48:25:04:60:8a:
45:9f:2e:b3:0c:f2:dc:5a:21:3c:9d:6e:31:5d:b7:36:fc:73:
46:0a:4d:3e:72:f3:89:c0:68:b6:5c:c1:13:e9:e8:c9:cd:b6:
dd:29:b1:66:9b:9a:b6:be:fb:a9:c3:e6:28:1d:26:e6:49:3e:
31:68:f8:9c:e0:1b:3a:0a:76:ae:e3:41:80:d0:8f:9e:47:92:
33:18:b0:7f:71:40:71:10:b6:21:27:21:42:6f:ae:11:ce:e0:
c2:22:5c:d4:63:18:aa:e4:b4:eb:9b:e3:ef:a2:6c:6e:99:07:
b9:ed:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:02 2026 by rpki-client