Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: sQIWz8/dcRQ7iHEoQJD8nEFu2vHkyoPKWq4oaWOBXEQ=
Subject key identifier: B5:C1:9F:98:19:2C:84:99:E5:36:6F:34:F0:42:9D:DF:E5:F2:15:AD
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019CAA8F90B36290F978AA32C041849A078B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1607
Signing time: Sun 01 Mar 2026 18:01:01 +0000
Manifest this update: Sun 01 Mar 2026 18:01:01 +0000
Manifest next update: Mon 02 Mar 2026 18:01:01 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 0WB6XzgvUD1IdYgrkiUKdpi/k7JkeW023ytAcTF/5mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:90:b3:62:90:f9:78:aa:32:c0:41:84:9a:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Mar 1 18:01:01 2026 GMT
Not After : Mar 2 18:01:01 2026 GMT
Subject: CN=b5c19f98192c8499e5366f34f0429ddfe5f215ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:7a:76:93:45:52:69:a7:1c:7f:a6:d9:1f:
8a:2e:a1:2f:91:f0:65:99:b1:9a:eb:25:26:d6:85:
c4:d8:a3:26:a2:5e:8e:66:1b:59:49:80:56:68:f3:
54:71:c0:c3:c4:40:8a:af:f6:17:b4:46:71:56:04:
4b:8d:b2:89:3c:09:87:ad:be:64:2b:58:7a:db:ec:
97:0d:3a:32:5d:ef:ee:6a:40:de:b1:1b:09:63:d3:
ef:92:62:4e:bc:82:2e:2c:bf:f9:f4:a3:ab:80:82:
4d:88:c3:6c:9c:81:bb:5f:fc:36:0e:f7:40:23:75:
24:e0:6f:5c:56:aa:77:27:3e:a4:8d:ce:63:56:86:
44:0c:83:71:19:29:ca:b5:3e:8b:64:ee:75:c9:2d:
dd:23:12:23:26:45:92:42:f6:f9:df:25:64:54:8d:
51:41:28:70:6c:50:29:57:a1:4e:57:93:19:e1:6b:
9d:b0:05:e3:77:2d:df:35:47:1a:bc:03:36:d1:66:
4c:54:fc:09:85:72:f9:5b:26:5a:0b:73:db:f0:5a:
8a:bd:20:84:03:84:3f:a5:58:ba:eb:b9:42:59:13:
06:21:29:07:86:0b:f2:5c:50:15:b4:bb:0a:e7:76:
94:e2:22:bc:46:8d:ac:b2:ec:47:af:e1:fc:3f:d2:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:9F:98:19:2C:84:99:E5:36:6F:34:F0:42:9D:DF:E5:F2:15:AD
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:50:c2:23:46:41:55:84:2f:47:d7:34:db:53:23:37:2c:
b8:8b:eb:82:92:15:1e:ef:66:0c:9c:8a:67:90:07:06:ea:f7:
ae:90:01:b9:e7:8e:05:7b:62:65:b8:56:4c:a9:40:71:07:ef:
bd:3d:1c:68:7d:1f:d5:51:43:2c:3e:d7:a3:d2:42:71:3b:c6:
cf:30:71:9e:cf:6c:55:c2:ac:98:20:2b:2a:57:b2:8b:43:c5:
e1:80:f5:c2:c7:be:ed:fa:24:98:73:a5:84:4a:1e:b4:c4:a2:
8c:46:a9:ad:46:51:bf:b8:9b:3a:29:a7:72:d0:4c:84:1c:80:
82:3c:eb:49:fe:f7:64:f3:bf:64:90:bc:9d:4b:d8:de:43:ea:
44:b5:eb:85:de:c3:3b:f5:b3:92:75:22:e8:4f:cc:28:1d:e5:
9f:85:cd:c7:3f:bf:3f:4d:36:54:cb:48:2f:b3:df:c4:b9:84:
3a:62:22:88:b5:6b:70:dd:65:de:35:14:44:7c:be:b3:c3:73:
92:a4:e2:2d:07:3e:71:36:f5:f5:73:d0:96:eb:be:e9:b9:31:
95:44:b0:f7:10:f9:be:96:9c:30:b7:67:7d:77:94:10:af:b0:
d5:27:0c:08:4c:73:44:9b:d1:ad:0a:88:46:e0:86:db:bd:d3:
1c:68:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:21 2026 by rpki-client