Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: xwZv37fPzFtZei1DBJhKSjgyz9eRtxunVG49NoA9oHg=
Subject key identifier: 17:20:EE:C0:05:ED:11:E7:11:5C:33:91:64:9D:2A:51:E6:3C:2F:34
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01A0CC6C106B8682199CF9BA5C4ACA5692C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 04:00:29 +0000
Manifest this update: Wed 23 Sep 2026 04:00:29 +0000
Manifest next update: Thu 24 Sep 2026 04:00:29 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: jX11P48mHqNK1UK0Qi8sBxwXCEJXFXxgRjr2uKPO50g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:10:6b:86:82:19:9c:f9:ba:5c:4a:ca:56:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Sep 23 04:00:29 2026 GMT
Not After : Sep 24 04:00:29 2026 GMT
Subject: CN=1720eec005ed11e7115c3391649d2a51e63c2f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:21:4e:82:50:e2:ba:fa:60:e3:1b:df:8b:
17:0a:77:a0:91:12:ed:d7:c3:ea:be:8a:1b:e4:b8:
f5:a6:7c:dd:7d:95:ca:de:fa:0a:5d:cd:f0:0b:3f:
71:e9:97:89:03:81:6b:5e:c7:1a:fc:cb:ee:d3:7e:
c3:ca:7a:b4:87:e7:94:d0:98:48:81:7d:c8:1f:70:
ed:04:b1:bd:98:00:a6:53:2f:08:d4:1d:82:0f:b2:
2c:45:9e:5c:51:fc:92:01:d3:89:73:b1:36:13:fa:
74:27:7b:3d:1b:30:dd:dd:4d:9d:03:3f:64:a5:6c:
88:9e:95:45:21:50:9e:c3:39:fd:1c:ed:b4:78:7c:
35:7a:3a:5a:f5:96:4c:01:f6:05:e0:42:7f:98:a8:
67:5c:41:32:21:1b:9a:00:c4:8d:8b:9c:15:b5:ef:
16:30:fe:dc:69:71:48:46:2b:ac:e3:85:3d:30:8b:
98:de:fd:ab:b6:20:82:de:3a:38:38:b7:0a:c4:b2:
e7:97:a7:bd:66:cb:be:0c:a0:a6:aa:3f:53:3f:7d:
c3:e6:c5:13:59:61:cd:19:5a:33:f8:c8:d5:59:9b:
25:bb:ad:4c:b9:28:20:ec:a1:b8:6f:c1:4c:a8:08:
a6:d1:b5:44:b9:0a:63:09:3e:a9:17:b6:fa:7c:67:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:EE:C0:05:ED:11:E7:11:5C:33:91:64:9D:2A:51:E6:3C:2F:34
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a6:71:0b:d3:14:e7:69:f0:6f:fb:e0:93:99:1b:2c:42:c1:
48:64:b3:cc:be:c9:23:77:df:8b:ae:0b:5a:55:27:74:a4:15:
cb:e9:b4:7d:13:05:87:cf:fa:d1:d8:e3:5a:95:9e:42:b9:64:
3a:71:db:e4:70:62:3f:2c:d3:13:e0:55:dd:05:55:23:8a:09:
b8:5e:1b:59:51:a9:41:72:4c:c4:b9:b5:ba:52:99:43:94:37:
11:22:8b:1f:fa:47:bc:c6:d6:cf:15:b8:8e:d2:be:ad:ba:9f:
1b:b3:76:f4:6c:e5:07:39:f7:56:d9:1b:08:87:b7:83:9f:3e:
70:13:85:78:50:95:27:32:47:a2:9e:ca:3b:e3:c9:c6:70:0c:
47:e2:75:e9:a9:e4:25:14:af:3c:30:4c:33:78:d6:cd:a3:c0:
8c:1d:16:e5:44:7a:e5:25:b0:29:6c:d2:0a:e5:95:06:02:f2:
ec:2b:e9:17:df:62:c8:85:51:61:2c:08:12:fc:21:4d:e9:6c:
fc:cc:c2:14:f0:64:3b:94:37:3a:5d:60:c3:c2:38:d7:f9:8e:
1b:b1:f2:7c:2f:19:88:56:97:74:84:dc:6d:f3:f0:be:96:81:
e7:82:d3:f6:76:68:22:44:8f:a8:62:49:2d:13:9b:bb:a1:ab:
22:c2:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:46:33 2026 by rpki-client