Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: EbdQNmUDno2yam5w5YUQzVCcgu1iQmSTWrSMT5C7ic4=
Subject key identifier: EC:77:68:12:2B:E8:6B:37:8A:9C:59:F7:54:C2:34:67:B8:A6:CB:41
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019ED34F8595E064169C027FBF926351F8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0F37
Signing time: Wed 17 Jun 2026 02:01:04 +0000
Manifest this update: Wed 17 Jun 2026 02:01:04 +0000
Manifest next update: Thu 18 Jun 2026 02:01:04 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: dToHLO3CQHIhJ9aw/vlk0uODcD9MbNCmZwsVsj75YDE=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:85:95:e0:64:16:9c:02:7f:bf:92:63:51:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jun 17 02:01:04 2026 GMT
Not After : Jun 18 02:01:04 2026 GMT
Subject: CN=ec7768122be86b378a9c59f754c23467b8a6cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:3c:a4:77:77:ca:4b:7f:08:52:bf:4c:8e:
94:c1:1d:e7:72:59:ed:e4:50:b6:9a:64:d9:ca:1e:
8f:16:a1:7c:c9:98:31:76:35:1c:bc:f6:eb:67:53:
1d:4f:a6:8b:53:e0:dd:e7:07:49:47:4a:16:95:49:
ae:2a:75:e8:1a:88:42:10:31:69:6d:94:95:92:eb:
f3:a7:a0:65:49:1b:60:0d:44:fb:19:55:b8:f4:e4:
e8:29:20:4e:cd:bb:e9:b9:25:3c:f2:ae:81:b0:0a:
9c:1b:c7:7a:73:c9:d7:a1:bb:ac:25:15:4b:a2:ea:
e3:ea:8e:02:90:8f:4c:71:76:fb:18:f5:5b:34:77:
6d:d2:62:fa:17:b3:46:21:f6:a4:e2:99:0f:ee:df:
55:e3:40:63:d3:29:37:46:52:e5:0d:31:f9:2d:03:
97:cc:18:13:f3:cd:f9:cc:40:6d:aa:91:07:2c:22:
99:86:49:fe:1f:13:2a:87:96:f7:38:68:d2:c1:5c:
f0:3a:59:89:2a:f5:51:ce:71:ad:e3:f9:fd:0f:46:
53:32:a8:b3:c7:59:61:0c:9f:ed:db:bb:89:98:d8:
f8:02:84:1c:12:16:58:f6:9f:bf:0f:76:86:de:4c:
fb:06:d2:de:41:fe:70:08:f2:d7:ab:09:d5:24:8a:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:68:12:2B:E8:6B:37:8A:9C:59:F7:54:C2:34:67:B8:A6:CB:41
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0b:20:8b:27:09:09:a6:1d:c4:03:d5:bc:73:38:5c:98:c3:
87:53:84:33:ad:1e:c7:5d:2c:f2:50:e2:d0:84:a5:33:b5:91:
bc:a7:16:4a:92:e4:de:6c:ed:b1:2a:54:31:ba:6f:00:7f:a6:
78:df:fd:a6:18:35:39:37:a9:42:4d:56:8a:13:8f:c6:31:0a:
ee:7b:bf:8f:54:3a:4d:5a:a7:09:46:53:02:07:9a:46:e6:e4:
a8:b7:37:cd:7d:a2:8f:9b:fe:01:69:71:32:23:b7:2b:22:23:
a0:9e:3b:9e:a4:1d:41:7a:a9:a7:c4:07:95:47:29:c1:b8:54:
e8:b2:a7:06:24:e5:7e:66:0a:c0:ab:a2:88:7a:b0:bc:e6:b5:
78:86:23:7f:eb:d7:a1:23:42:b1:9c:8f:bf:cd:06:b8:ab:88:
a1:f1:40:bb:75:00:d6:f7:9d:e0:c1:18:4a:69:9c:30:53:8d:
f6:f9:7e:fc:da:fe:51:a3:41:1e:fc:6e:62:92:26:b4:b3:26:
4d:19:1a:3a:02:47:7d:7e:fc:eb:cc:ea:5a:ff:1b:2a:b7:dc:
4d:aa:6a:9e:eb:95:a2:91:67:32:2b:86:03:28:9b:72:90:a6:
87:50:ef:e0:80:cf:78:a5:24:63:ba:2a:96:14:ef:82:60:cb:
3c:cc:20:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT4WV4GQWnAJ/v5JjUfjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi
MWRkNDYwHhcNMjYwNjE3MDIwMTA0WhcNMjYwNjE4MDIwMTA0WjAzMTEwLwYDVQQD
EyhlYzc3NjgxMjJiZTg2YjM3OGE5YzU5Zjc1NGMyMzQ2N2I4YTZjYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0w8pHd3ykt/CFK/TI6UwR3nclnt
5FC2mmTZyh6PFqF8yZgxdjUcvPbrZ1MdT6aLU+Dd5wdJR0oWlUmuKnXoGohCEDFp
bZSVkuvzp6BlSRtgDUT7GVW49OToKSBOzbvpuSU88q6BsAqcG8d6c8nXobusJRVL
ourj6o4CkI9McXb7GPVbNHdt0mL6F7NGIfak4pkP7t9V40Bj0yk3RlLlDTH5LQOX
zBgT8835zEBtqpEHLCKZhkn+HxMqh5b3OGjSwVzwOlmJKvVRznGt4/n9D0ZTMqiz
x1lhDJ/t27uJmNj4AoQcEhZY9p+/D3aG3kz7BtLeQf5wCPLXqwnVJIqsEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx3aBIr6Gs3ipxZ91TCNGe4pstBMB8GA1UdIwQY
MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt
MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj
LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQsgiycJ
CaYdxAPVvHM4XJjDh1OEM60ex10s8lDi0ISlM7WRvKcWSpLk3mztsSpUMbpvAH+m
eN/9phg1OTepQk1WihOPxjEK7nu/j1Q6TVqnCUZTAgeaRubkqLc3zX2ij5v+AWlx
MiO3KyIjoJ47nqQdQXqpp8QHlUcpwbhU6LKnBiTlfmYKwKuiiHqwvOa1eIYjf+vX
oSNCsZyPv80GuKuIofFAu3UA1ved4MEYSmmcMFON9vl+/Nr+UaNBHvxuYpImtLMm
TRkaOgJHfX7868zqWv8bKrfcTapqnuuVopFnMiuGAyibcpCmh1Dv4IDPeKUkY7oq
lhTvgmDLPMwgJA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:40:37 2026 by rpki-client