Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: ekvb37J0qKTUM+m67WS9NpLj47jGKFMiA0hqfsRl84w=
Subject key identifier: 56:34:1D:D5:AD:18:91:F8:F2:52:53:2B:03:6B:15:BC:24:6A:39:7E
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019CAC105815E8FC03A1F452737A7BF66B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:01:18 +0000
Manifest this update: Mon 02 Mar 2026 01:01:18 +0000
Manifest next update: Tue 03 Mar 2026 01:01:18 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: ETFSJ0b6dWYmH5SRADV8ijZ8766Uz6idbyiK2f8f/j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:58:15:e8:fc:03:a1:f4:52:73:7a:7b:f6:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Mar 2 01:01:18 2026 GMT
Not After : Mar 3 01:01:18 2026 GMT
Subject: CN=56341dd5ad1891f8f252532b036b15bc246a397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:c1:8d:83:fa:c4:5b:78:f7:96:80:5e:70:
19:6c:92:d9:9c:85:ac:21:d5:af:fe:34:d8:96:65:
53:06:4f:bd:ca:5f:b6:aa:58:a2:d2:d6:a7:3d:ae:
1e:00:f6:06:49:fd:b4:a9:49:d8:f9:68:0a:ba:39:
cc:fb:c6:12:db:00:57:93:a5:cb:c6:92:90:3c:a5:
38:8a:75:ae:c1:66:5e:ed:ec:48:6a:40:1d:53:7f:
d8:72:e0:f2:48:5e:91:d5:e8:da:41:76:6a:2a:ed:
98:2f:7a:6f:ce:ab:62:6f:94:87:a4:df:66:cd:5f:
af:ad:f4:5c:12:2b:38:2e:cb:04:a1:80:a3:3c:4b:
79:93:57:95:77:6a:37:d7:e0:64:c4:18:a9:b4:f5:
ff:ff:d4:50:a0:71:1a:07:15:f1:b5:24:5f:51:19:
06:40:12:f0:97:85:c5:d3:d7:86:2d:6d:8c:db:65:
11:cb:02:d5:15:4d:7a:94:39:19:23:0a:91:18:34:
72:af:af:1e:f2:be:1a:6f:a7:a1:af:3b:c1:a3:3d:
e7:57:69:b9:05:2a:4a:c7:99:8f:20:53:85:ce:47:
ee:22:2c:5f:2d:b7:59:41:41:3a:77:6f:5e:8d:e0:
e3:75:89:c7:49:a3:8c:76:6e:b6:56:a0:3b:2d:04:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:1D:D5:AD:18:91:F8:F2:52:53:2B:03:6B:15:BC:24:6A:39:7E
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:6c:ac:e2:61:ed:6c:9c:8a:5d:ca:d6:96:d5:db:62:74:
ec:9b:39:d7:f4:bd:40:07:dd:31:7a:ad:9f:77:97:09:d4:20:
72:dc:82:72:9f:96:c0:bd:1b:b9:ed:18:86:3c:4d:89:e2:67:
ba:57:f3:92:15:7d:28:32:32:90:62:6d:fb:8c:76:30:95:3b:
8c:71:74:05:40:3e:63:8e:3d:a6:68:70:7b:0b:00:fb:0b:0e:
79:ee:de:36:1b:3a:2d:38:dc:29:95:4f:55:74:2a:b2:c0:b5:
42:29:35:e4:d2:c5:9f:19:67:fe:c1:87:27:a0:83:74:ff:5c:
2b:b6:e0:9c:18:45:70:40:a5:05:4b:db:8a:b1:fc:59:48:7f:
3b:3b:97:d5:5c:73:13:36:bc:ed:39:b6:ac:f6:06:2f:1f:ef:
a6:f2:2e:47:08:9c:26:51:5d:0d:dc:72:ce:e2:60:4f:65:f2:
46:bf:48:27:15:23:ab:ee:69:29:35:2b:50:15:2f:e9:89:59:
f1:c9:7c:a6:cd:ec:40:d8:c7:d1:25:c6:17:ba:e2:26:f4:18:
19:9e:09:1b:4e:89:bf:51:54:14:79:c1:83:64:52:7d:10:5b:
e8:d3:6f:1f:0d:a3:1d:da:a7:e6:d0:6b:fc:61:d0:7a:80:38:
8f:65:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:56 2026 by rpki-client