Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: EgOsIR6bJzB5n4kNFyCzJjL6vqHvAMb4LqtPd1dEm0s=
Subject key identifier: 6D:07:AD:FF:1F:74:A3:7F:F3:C7:5C:59:1E:5B:58:7B:E9:9B:04:AB
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019CAD902C6AB819C159EF01B0683969A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0E1A
Signing time: Mon 02 Mar 2026 08:00:32 +0000
Manifest this update: Mon 02 Mar 2026 08:00:32 +0000
Manifest next update: Tue 03 Mar 2026 08:00:32 +0000
Files and hashes: 1: G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa (hash: felwcBy1trqJlfgkKZ8Njtq1KvtD2UmM0AyTZrNQ0nY=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: +vGPErWjwOmXBjcAZWbY6uutzWSMa5FFl5KWBlB8QZY=)
3: NQm98rb_Ce1FD2kYuLzSyRfHS3k.roa (hash: 0FuRCkyL3oox4mVwcN4bero8WE9ytQ/qMwHkxt0D5lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:2c:6a:b8:19:c1:59:ef:01:b0:68:39:69:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 2 08:00:32 2026 GMT
Not After : Mar 3 08:00:32 2026 GMT
Subject: CN=6d07adff1f74a37ff3c75c591e5b587be99b04ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:02:70:5c:66:e8:9f:f9:3a:20:d3:7f:94:
64:6d:15:0c:10:9b:a6:45:0f:42:34:a2:ae:0a:3f:
c8:04:61:3b:99:95:0c:2e:f3:6d:9f:c5:3d:87:22:
bd:9a:af:d7:a7:0e:9a:1e:8f:59:b4:eb:fa:47:e6:
66:5a:bd:27:75:c0:52:5b:b2:c4:3c:6c:d2:91:35:
a9:20:21:dd:41:44:88:bb:9d:89:28:61:01:02:80:
8e:11:88:21:0a:5c:a8:6f:4a:23:7c:d1:26:37:b4:
12:fd:70:06:0b:09:08:5b:c7:3d:1b:46:13:ba:f4:
13:fb:48:ec:af:1c:e5:07:3e:6d:57:72:aa:65:77:
0e:d9:e3:6c:10:e5:ed:88:95:13:19:df:ef:a3:17:
0a:16:29:31:6d:cd:1f:04:e0:0c:16:2d:a7:c3:d1:
78:d6:06:eb:87:04:29:36:ff:71:d2:21:72:3f:f4:
27:db:9c:aa:f2:48:8a:17:41:00:f9:21:e7:7d:a4:
8d:ee:c2:27:1d:81:7a:ec:92:4f:97:f3:ac:2c:b9:
97:42:0e:26:71:da:ba:d4:f0:16:86:a6:88:91:35:
1a:a1:4d:72:04:61:da:88:4c:2d:aa:07:ce:18:3f:
7d:19:59:b0:c2:78:c9:51:28:34:84:e0:c0:c5:da:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:AD:FF:1F:74:A3:7F:F3:C7:5C:59:1E:5B:58:7B:E9:9B:04:AB
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:2c:09:cf:9c:ca:9b:c0:a5:b4:6d:4e:35:6d:0f:6b:8b:
22:63:72:8d:06:b8:0a:b4:7e:9d:e4:63:d3:9c:52:1a:d8:2f:
32:a3:c5:7f:af:57:1d:25:05:7a:96:c6:d6:f7:22:ff:ff:28:
06:64:76:a2:ef:84:ac:31:92:d1:28:93:23:bb:26:50:ac:12:
3e:b5:2b:a4:6a:1a:0a:3f:7b:f2:13:25:aa:55:5d:c0:f3:53:
79:c5:ac:87:a9:e0:69:ea:bb:10:a1:f1:fb:21:5f:8b:9c:35:
69:5d:3b:39:3b:2d:cf:23:1c:36:76:35:a0:c3:a4:a1:ec:03:
57:0e:63:cd:48:e1:df:7f:cb:6f:12:f4:7c:90:fb:37:bb:83:
93:41:7a:4e:d7:c3:80:89:d7:78:20:70:35:62:be:e2:3d:7b:
a8:0d:06:10:b9:69:e6:ab:5d:b1:c0:a7:12:bd:a9:b3:cf:34:
8a:69:df:5d:9c:b6:9d:fb:9c:06:85:f0:88:f8:49:8c:65:f3:
0c:49:7a:cc:48:98:22:5e:6e:a5:ad:fc:48:c1:81:e2:52:fc:
c7:b5:f0:22:22:27:5c:09:f2:60:a1:78:48:7e:e0:7d:48:0d:
e6:b0:2b:ad:03:17:79:c0:ac:92:1c:a4:47:00:87:f7:e0:2e:
27:8a:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:11 2026 by rpki-client