Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: Qw6V8sRNiP0JU7Qfj2h6ynUaVw7xysqr9aCtnh3MOLo=
Subject key identifier: F8:B0:85:0C:D5:5F:25:B4:22:88:24:7E:26:89:09:93:10:3F:29:2C
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 01A0C70E88C86C8C96BEF2EFC1E7DD83BD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1828
Signing time: Tue 22 Sep 2026 03:00:13 +0000
Manifest this update: Tue 22 Sep 2026 03:00:13 +0000
Manifest next update: Wed 23 Sep 2026 03:00:13 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: XWyBS1d0d2EJdF40PJlUHKNcvXQ3jtxxlK/kZ7mvapU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:88:c8:6c:8c:96:be:f2:ef:c1:e7:dd:83:bd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Sep 22 03:00:13 2026 GMT
Not After : Sep 23 03:00:13 2026 GMT
Subject: CN=f8b0850cd55f25b42288247e26890993103f292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:93:b3:de:47:94:a2:3c:71:68:e3:93:f2:
05:a6:e2:8f:6b:62:0a:a7:89:4a:ee:f4:37:60:ab:
a9:b1:ad:7e:22:9d:50:83:6e:20:7e:e4:9c:74:3b:
fb:c6:66:0c:2d:98:4f:c1:09:d3:1e:79:ba:45:9c:
ef:8e:c1:b1:cd:02:0b:12:8a:65:6e:29:fa:6e:01:
0b:b3:fc:83:76:ca:af:3a:39:37:dc:06:da:69:9d:
a4:f0:37:80:c5:e9:b7:25:5f:f0:e8:28:cf:c8:62:
95:4c:aa:4a:e4:f0:15:13:6e:97:36:b3:d1:b7:f2:
9a:38:30:e5:cc:e0:8c:03:74:fc:70:34:41:2a:4d:
6f:96:49:25:3f:87:07:34:6f:fa:b1:51:f1:9a:6e:
aa:37:dd:fc:88:95:3e:5f:f2:55:25:c4:cd:e2:c7:
a6:32:98:f4:a9:d8:3b:81:44:b3:54:5b:49:d1:07:
0d:e0:d0:6a:c2:42:d3:8e:3c:88:5b:e3:34:d9:7e:
96:b0:24:5c:d0:e1:c8:29:85:ce:c1:79:ab:30:09:
c6:e8:e8:28:c2:6c:d8:6b:7c:9a:9a:b3:2e:0f:19:
79:da:81:c1:93:91:0f:56:3a:14:7e:27:45:cf:a2:
93:d2:ee:75:18:b3:93:2b:c5:2b:a5:f1:26:d2:de:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:85:0C:D5:5F:25:B4:22:88:24:7E:26:89:09:93:10:3F:29:2C
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:52:07:20:f5:f6:cc:f8:16:2d:58:3e:f7:a9:3f:60:90:
5f:93:78:7d:b3:3e:a1:c0:cb:a0:8a:fd:da:3f:5c:05:b7:7a:
3a:8f:93:fe:be:c6:cd:c6:fc:b0:51:6c:3b:3d:46:ca:f9:ce:
7d:e4:9a:3c:49:42:2e:84:29:e5:ef:19:98:00:8e:9f:9b:17:
b0:7a:5d:23:7c:22:80:72:5e:16:06:b5:ee:60:03:48:15:49:
57:c8:1a:22:ab:eb:77:88:e0:09:cf:12:72:cc:82:7f:b2:5a:
77:1b:e1:bf:ed:d3:50:b0:12:39:83:d5:e6:09:d2:ed:08:89:
bf:0b:ff:c4:3c:f7:20:a0:00:a3:a4:0c:ad:04:9b:21:0e:a3:
d9:5d:1b:53:24:c3:8b:57:59:cc:61:a2:c0:f1:a3:92:20:4e:
28:06:59:66:1e:ea:5f:37:f7:c6:e8:39:56:d3:d2:de:a2:28:
5e:ff:e4:43:50:ce:ff:32:da:6f:77:33:0e:c5:3b:33:b6:84:
89:ef:3f:f4:5d:3a:61:9c:f1:37:34:25:3a:63:bd:68:5a:ed:
8e:d6:d9:23:39:fe:e2:cf:76:c7:f8:65:35:b2:a2:9b:f1:ac:
b6:e1:31:39:bb:ad:1b:44:8c:e1:13:f6:3c:5a:25:c5:bf:84:
ea:5e:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:18:41 2026 by rpki-client