Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: gsVBRxV6XqVBQujZJbj5D6qHhlpfirUFOuPUo/fanyw=
Subject key identifier: 1D:B9:80:07:E4:F5:A1:38:FF:DA:05:94:DB:68:42:50:3E:17:5D:65
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019FAABE38E0A53EB45590233C3D99000C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 22:00:20 +0000
Manifest this update: Tue 28 Jul 2026 22:00:20 +0000
Manifest next update: Wed 29 Jul 2026 22:00:20 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: HpNDK3kCs0DoaJqaUfZgWBIUFP+xsHJneyX1vNJpygo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:38:e0:a5:3e:b4:55:90:23:3c:3d:99:00:0c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jul 28 22:00:20 2026 GMT
Not After : Jul 29 22:00:20 2026 GMT
Subject: CN=1db98007e4f5a138ffda0594db6842503e175d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:9b:c6:69:27:c8:35:61:2c:a8:3c:22:2f:
60:64:a4:5b:49:30:fe:ff:d2:c5:3f:e5:7c:a0:d6:
6f:73:ea:5d:bd:8a:8b:b4:f9:2b:d4:64:96:4b:6c:
b7:51:e2:0a:5b:cf:f0:dc:92:89:a3:92:d1:e4:ae:
43:a9:56:4c:f5:d9:ab:40:0a:48:50:8e:9f:de:17:
ca:7f:c9:b9:50:5e:6b:90:4d:29:48:4a:ca:0a:44:
46:89:f5:a4:28:ef:9c:3b:1a:bc:85:c4:be:f2:bc:
0a:66:4d:33:17:2a:cf:24:96:b5:6e:9c:f3:4a:f7:
08:88:92:bc:f4:3c:aa:34:a0:f4:d6:88:ce:dd:b2:
2c:64:05:65:cd:44:22:3e:aa:af:50:e4:a6:28:bb:
81:ae:4c:bf:ea:0c:46:3d:25:52:70:ac:b6:c9:b4:
af:18:fb:d1:c4:f6:67:4d:b9:32:f0:ac:9a:0b:68:
b2:6a:43:69:15:f4:4d:34:05:c7:ac:9e:9f:26:5f:
6c:f0:7a:10:40:ea:95:2f:41:4a:20:cb:ec:7e:0d:
ab:97:c4:12:06:c9:07:b6:ad:5a:1f:a0:70:51:dc:
04:9c:a2:7f:b8:02:75:94:c2:f7:56:c0:da:0e:3b:
ce:e8:33:cb:30:2e:c4:ab:88:ca:79:61:a9:b9:3f:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B9:80:07:E4:F5:A1:38:FF:DA:05:94:DB:68:42:50:3E:17:5D:65
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:f7:3d:a6:c9:3f:26:ad:a3:5a:48:c8:90:4d:7d:16:7d:
5d:0d:ae:40:9d:66:db:20:79:62:81:24:f2:45:54:ae:e3:f8:
6c:1c:b1:82:7e:f2:50:37:60:cc:4e:d0:7b:87:9e:10:ac:62:
0f:c6:88:0d:df:8b:5f:1a:6d:c9:9e:6b:bd:f4:97:b9:48:f1:
25:24:58:b4:89:fb:1e:09:94:99:d3:d7:66:e8:13:c5:f4:75:
92:15:33:f9:9c:f9:04:14:bc:ad:a9:a6:28:f9:9c:c9:39:cb:
60:90:38:54:a3:4d:9c:f7:f4:d6:7c:5f:4d:5d:9d:2e:00:61:
9d:5d:08:73:ae:a1:50:51:c9:bf:54:f7:0f:c2:be:0a:08:cb:
ab:4e:48:f3:5e:e3:f0:af:85:9c:7a:82:c9:cf:13:dc:46:22:
6f:ec:9b:5d:ff:a3:b7:e5:17:bd:1e:68:62:d9:ae:53:47:ac:
f8:1f:b4:5c:44:9b:9a:39:db:e2:2e:c9:00:7c:d5:c0:4d:8e:
65:80:e6:14:ad:73:6c:58:cc:29:1b:f4:4a:f3:4d:88:6d:3d:
e4:61:e9:98:8d:c4:57:c2:a2:e7:22:87:0f:cb:f7:56:fc:76:
52:43:99:d9:3c:43:06:17:5b:b3:45:be:bf:2e:9a:8b:72:91:
e6:2b:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:49 2026 by rpki-client