Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: TyBrdkG+CfIcZ3l1QZurxEfptIby7cQwAR24w7uF+7w=
Subject key identifier: 7A:62:D8:57:97:2E:22:7C:98:AE:8B:E9:54:BF:3F:BC:7C:98:7F:83
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019DA41C9D45A935F649C1F517C413AE5198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0E9A
Signing time: Sun 19 Apr 2026 05:00:31 +0000
Manifest this update: Sun 19 Apr 2026 05:00:31 +0000
Manifest next update: Mon 20 Apr 2026 05:00:31 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: 9eP16tB3fCnwE7PMv5aiJwTHNvjZjKaniHUp5yTy1Lg=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:9d:45:a9:35:f6:49:c1:f5:17:c4:13:ae:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Apr 19 05:00:31 2026 GMT
Not After : Apr 20 05:00:31 2026 GMT
Subject: CN=7a62d857972e227c98ae8be954bf3fbc7c987f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:50:2a:7a:97:dc:8d:0b:67:bd:c1:f4:7a:
12:26:b1:32:64:c4:3d:ff:ee:5f:e7:9b:98:1a:b8:
d8:48:2e:54:74:06:3c:66:9f:64:2e:6f:90:75:ed:
57:da:b2:07:e7:02:3c:b5:b9:64:07:0a:e5:10:1e:
61:e6:23:14:e8:05:d3:92:30:d6:bc:31:2b:08:20:
e8:5e:69:c5:35:b1:bb:71:e2:0e:21:c5:d0:d0:ee:
b1:10:79:94:65:1c:b9:b6:77:3c:5a:3a:5b:3f:e6:
5d:b9:4c:ad:f0:1a:b4:40:ff:47:c6:b1:e3:f8:98:
4d:23:12:f2:4b:7b:b7:5a:6d:be:46:5e:69:13:45:
38:62:70:e0:8a:aa:77:f0:6a:b4:3a:7f:52:f5:14:
43:f0:82:d0:40:26:9b:05:55:20:72:f7:9d:e8:49:
cd:b1:f7:f0:ab:cc:fa:22:1c:9d:aa:f3:fe:7c:85:
3d:f6:c7:97:31:02:9f:45:91:27:95:e7:80:36:de:
8f:76:b8:d4:04:6b:30:1a:b1:f9:1f:69:70:56:6a:
a0:8e:35:b0:41:ef:08:92:76:51:42:6a:9b:d8:60:
f2:00:fa:be:65:0d:7b:be:9c:87:62:ef:4e:a5:fb:
65:66:ef:46:eb:52:56:27:fe:c7:a9:76:c0:37:30:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:D8:57:97:2E:22:7C:98:AE:8B:E9:54:BF:3F:BC:7C:98:7F:83
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:8a:7d:75:d0:f4:5d:4c:69:93:18:f1:8b:48:21:62:52:
05:bc:4f:e8:71:b4:73:48:31:44:f9:a0:15:cb:65:32:4e:df:
99:3d:a1:4c:23:58:f1:95:c8:d1:a9:bc:1f:62:55:3c:73:40:
90:e0:0b:b7:33:8d:e6:97:ee:00:cc:97:7e:dd:f6:98:ff:cf:
c2:41:e5:1c:5f:56:a0:79:fe:cb:0d:e2:bd:35:13:6d:f7:8d:
55:0e:56:4a:01:b5:c7:f2:0b:7d:6c:0f:d0:11:9f:9a:c2:fc:
f6:c0:d3:63:ea:89:a7:ce:fb:93:91:b6:7c:5b:f2:32:79:da:
e3:e2:19:08:4b:2e:e1:f2:56:57:10:37:8f:4b:4d:1a:02:59:
40:9f:18:47:a9:dd:fe:e1:bb:dc:0f:14:a9:39:52:af:1c:ba:
e6:9e:91:f9:13:69:4b:9f:52:05:05:80:e5:1b:f7:7f:d7:8d:
e1:51:94:c7:f1:1a:e0:bd:15:a0:1b:e8:d7:c5:30:28:54:73:
c6:99:8f:e5:21:5b:53:e0:8c:c5:dd:24:d3:81:e9:7d:71:99:
8d:64:f3:d6:15:ce:60:45:94:95:c0:75:63:a1:45:fd:ee:7e:
10:fe:38:d7:18:6a:7b:f6:99:54:d0:db:72:fa:2d:6c:e8:0a:
6d:bc:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:49 2026 by rpki-client