Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: yQFjwJxNIZgtvNM+Hl3yWqwXf78xPw4oOkgUmukzaV4=
Subject key identifier: E8:E2:C8:36:EB:3A:BD:1A:02:1D:4D:D3:4A:30:F3:B8:5E:62:9B:CB
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A0C96B7F000BC6CACF653D35A96C240BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 103B
Signing time: Tue 22 Sep 2026 14:01:00 +0000
Manifest this update: Tue 22 Sep 2026 14:01:00 +0000
Manifest next update: Wed 23 Sep 2026 14:01:00 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: Xi/hBxIIMG0vA5CqrmXqleijBirxxmDk9oPhSSL2r5Y=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:7f:00:0b:c6:ca:cf:65:3d:35:a9:6c:24:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Sep 22 14:01:00 2026 GMT
Not After : Sep 23 14:01:00 2026 GMT
Subject: CN=e8e2c836eb3abd1a021d4dd34a30f3b85e629bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:f3:e4:c6:00:d8:35:3c:1b:3e:83:3a:9f:
1a:ae:62:a3:f0:f9:32:d6:d7:5a:bd:82:2c:55:8c:
f7:f6:88:a7:2c:ed:10:a5:78:0f:36:b1:e8:e7:7e:
f2:e9:53:f9:d4:6e:3d:d3:25:75:a7:a9:f3:d4:e1:
6e:b6:29:8b:2b:62:ff:b1:ca:45:75:d5:cf:25:d7:
83:3f:4e:d5:f5:e3:94:63:74:c5:88:97:83:ae:87:
df:86:46:da:e3:be:4c:a3:6a:20:e6:84:fb:7b:3e:
56:5e:33:55:ec:cf:d3:18:69:f4:94:ff:6b:de:9e:
80:45:0f:7f:47:66:25:dd:4d:98:3f:e8:86:37:cd:
b4:89:a1:74:cc:f4:b3:b8:96:67:53:7c:be:9d:15:
1e:d6:eb:ea:4d:fd:41:7f:db:04:61:1a:b4:20:1b:
a5:7f:7a:6a:10:c1:eb:85:dc:03:9b:10:be:8c:a0:
4d:f3:30:fc:03:4f:51:ed:01:89:a4:87:c2:2c:3c:
98:79:e8:0f:2a:a2:88:c3:4d:1b:13:4d:35:6b:5f:
f1:6f:2a:73:e1:6d:5e:23:dc:f3:52:07:76:39:6c:
1e:8c:97:00:47:75:f3:4a:32:a7:59:29:ff:a5:25:
bd:b2:ca:d8:27:c5:49:39:a2:e9:6a:6c:58:e1:f6:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:C8:36:EB:3A:BD:1A:02:1D:4D:D3:4A:30:F3:B8:5E:62:9B:CB
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:13:96:ea:dc:ea:6f:15:1b:13:cc:72:ea:4a:55:82:6e:91:
1f:89:6f:5c:ef:9a:f0:08:45:a0:5f:21:80:4a:04:f9:5e:f8:
02:be:a2:ba:ad:97:e5:fe:59:91:cc:36:c7:71:9b:8e:be:af:
fb:55:ed:75:59:bc:d1:93:05:79:0c:60:17:67:bf:6f:67:a0:
f0:b6:57:9f:2b:52:5e:53:d7:8a:15:ba:e8:3a:ba:d5:2f:78:
ab:be:a0:9f:d3:21:f0:20:f4:1f:33:29:1d:aa:c8:c7:c9:59:
22:b7:6b:19:ff:ff:60:44:7b:a1:f6:71:aa:47:0c:04:11:0b:
3c:cd:37:ee:6d:3a:c8:cb:ef:86:6d:3d:a4:0b:97:d3:3f:d8:
d8:cc:9b:da:99:6c:96:45:4d:65:5c:12:78:8c:ea:ac:6a:a3:
0a:0e:47:e2:8e:cf:b6:cc:12:2c:24:94:49:6f:a0:29:63:1d:
39:fd:94:46:41:18:22:05:17:6e:9a:03:87:02:5c:a8:a0:a8:
c9:4b:82:83:17:23:45:0f:1b:e5:05:9a:98:c7:de:82:d4:b0:
cb:d2:87:36:a0:e9:2c:ad:e6:9b:06:8f:c2:32:df:d2:5d:93:
ab:5a:e3:b6:20:2b:36:e7:54:f7:0a:f4:b9:60:73:df:54:87:
c2:c2:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:31 2026 by rpki-client