Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: GhojhYQi2/Js/NAVE014MCnYTFwURCa8RO/vHNGxo88=
Subject key identifier: 27:80:99:2D:30:A7:92:9F:03:62:C6:7C:B9:1F:D3:9B:31:31:02:97
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019EC1123394FD5AAEFEBE9DC79F05286716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 13:00:55 +0000
Manifest this update: Sat 13 Jun 2026 13:00:55 +0000
Manifest next update: Sun 14 Jun 2026 13:00:55 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: Xp31cczrpYm5Ie3AXHQkgDjEbOvLn219ScsHs+P+FcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:33:94:fd:5a:ae:fe:be:9d:c7:9f:05:28:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jun 13 13:00:55 2026 GMT
Not After : Jun 14 13:00:55 2026 GMT
Subject: CN=2780992d30a7929f0362c67cb91fd39b31310297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:7f:f7:4c:88:99:00:2d:74:9c:99:da:ed:
b5:d9:e1:75:9e:2e:06:c3:e8:48:eb:78:98:e9:d9:
05:70:e4:53:1a:51:89:33:cb:62:60:a3:8d:05:81:
1e:fb:45:de:8b:e0:17:f8:20:74:3c:3f:1b:0b:1a:
95:64:b1:c1:ce:fa:4f:09:26:d7:d4:f0:ad:eb:8d:
16:6c:1f:e8:56:1f:52:01:25:a9:fe:54:e0:e5:b0:
17:64:a3:4d:6f:a5:88:c4:65:2e:b1:c1:b9:77:fb:
f1:30:f7:14:7c:4b:a9:00:f4:65:89:56:3b:51:a4:
da:70:fa:5e:37:76:8f:32:27:e5:ab:56:df:ec:99:
73:fb:e0:11:35:ae:83:66:a3:61:76:0c:58:15:d2:
64:6b:55:5a:46:f1:1c:6b:ab:46:d8:35:2e:b9:1a:
55:40:4a:0e:ee:0e:73:91:da:1c:a3:37:2c:50:98:
a5:34:cb:b1:5c:05:c4:c5:59:06:11:ad:e8:c7:9a:
eb:c7:a3:21:1f:1a:58:99:eb:1f:20:d4:b5:a3:ae:
8e:74:97:43:88:da:16:a0:39:a3:5c:81:78:f2:6f:
00:fe:f9:52:46:c3:f5:12:2e:2d:17:e8:52:8f:72:
39:97:49:8e:eb:4e:41:4a:de:60:cf:e5:f5:52:7f:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:99:2D:30:A7:92:9F:03:62:C6:7C:B9:1F:D3:9B:31:31:02:97
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:65:ee:0f:68:a6:ae:bd:7b:c2:5f:d4:a6:42:66:cd:14:89:
09:a5:aa:ff:98:78:b1:98:cd:84:dd:74:31:64:72:d4:09:ec:
d9:46:0d:f8:6d:1d:f2:59:f5:12:f0:ba:cb:86:11:38:d9:f0:
bd:e7:7e:77:12:c2:01:ad:72:97:54:46:d9:77:17:b5:5d:c2:
fa:65:fc:1d:df:c3:e8:e9:fe:df:2f:d4:c2:d0:97:b8:c1:95:
c6:b3:83:09:ae:3a:5e:06:11:bc:f1:bf:97:67:52:eb:da:62:
ce:e0:dc:c4:97:43:fe:60:d4:99:ef:35:2d:f6:f9:8f:b3:3f:
a9:e1:f5:94:d0:64:43:d2:85:a6:be:42:52:92:0f:f9:a8:5a:
f4:23:87:bf:1f:be:49:36:6a:fe:ac:ae:72:80:f8:06:40:c9:
e3:f9:82:e5:1a:11:86:70:66:eb:f4:2a:31:a1:d6:68:96:48:
57:f2:3f:24:be:5d:e5:02:da:b9:0d:2f:4e:23:c0:f0:5e:86:
15:e6:3e:8f:b5:8b:c4:0c:0b:10:8d:15:9c:bc:7e:10:c4:ec:
8a:f4:d6:eb:a6:c4:5c:85:10:42:09:56:eb:98:c3:39:a7:15:
0a:f6:ea:5d:0b:e1:28:78:d3:48:a7:8f:b9:d8:ce:3c:c7:c9:
09:bf:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:41 2026 by rpki-client