Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: s6sWdnlySk7o21WWuuKHCrHX7MnE9LOGYQkBaqnZ+NI=
Subject key identifier: 99:A2:75:5D:D8:1C:F4:73:DC:1C:A1:FA:13:89:1A:39:74:39:49:58
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019F860D156B6132AD840DDF57FD16BD36AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 111E
Signing time: Tue 21 Jul 2026 19:00:32 +0000
Manifest this update: Tue 21 Jul 2026 19:00:32 +0000
Manifest next update: Wed 22 Jul 2026 19:00:32 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: iQu3/sK6dMz/GJsOydi5A/o64EaxSUoHu5qkbTFRI64=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:15:6b:61:32:ad:84:0d:df:57:fd:16:bd:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jul 21 19:00:32 2026 GMT
Not After : Jul 22 19:00:32 2026 GMT
Subject: CN=99a2755dd81cf473dc1ca1fa13891a3974394958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:11:31:57:ed:c9:c7:3b:ad:18:a2:a0:13:
1b:a5:80:0d:a2:4c:c9:c7:da:88:dd:3e:a2:1d:9d:
7f:e5:61:ff:7b:54:41:94:fc:ee:fb:97:d2:2d:ec:
40:63:cd:e8:19:0c:3d:bd:e7:14:4f:71:f5:9c:83:
cd:6c:3d:27:c8:24:e8:9d:f6:94:2a:94:95:75:9b:
be:61:82:aa:cc:cd:83:72:6b:bc:0d:b2:7a:4c:f2:
7c:a3:3d:1f:40:a6:7d:c1:75:a6:32:2f:72:ec:04:
c5:10:83:52:a5:ae:dd:14:9f:98:1f:ea:0b:cb:30:
f8:8e:5e:f9:b6:1d:71:14:2e:64:6d:64:21:56:ac:
a6:6a:07:fc:34:cd:fc:a2:29:bf:fd:3e:40:9e:e3:
b1:e9:8d:23:0b:b5:ba:39:b5:b2:6e:53:20:04:db:
62:16:ad:52:4a:1d:ee:07:55:e7:0c:6f:04:00:2a:
a6:24:7e:3f:5a:b4:b5:ff:df:17:11:59:68:28:6f:
4b:c0:46:b0:7c:83:1e:03:b2:f4:b7:70:ed:50:78:
09:b4:23:17:1e:0c:7e:7a:fa:b2:2f:e4:32:84:d2:
08:75:87:de:4d:37:e8:a0:de:f9:d9:52:6d:db:a6:
3c:04:32:ea:d5:71:5c:38:6d:50:99:33:ca:57:7f:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:75:5D:D8:1C:F4:73:DC:1C:A1:FA:13:89:1A:39:74:39:49:58
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:da:a9:94:8d:f4:df:45:74:91:89:39:67:04:b6:32:09:3a:
64:72:4e:91:75:15:74:a1:36:1f:6a:7d:47:b1:f3:eb:b8:56:
18:a5:e0:45:50:69:b7:77:9f:90:62:e7:03:1f:8f:ca:76:a0:
1d:bd:fb:ab:8c:d4:47:7a:7c:e3:67:8e:98:5d:bf:bd:5a:ea:
0d:2a:94:21:1f:06:49:04:64:15:b7:7d:25:a2:af:d0:3f:a1:
a5:8f:d4:76:8a:82:9c:5d:3e:86:67:4f:8a:c2:30:77:38:fe:
f7:e8:9c:30:c9:4c:59:e1:52:60:76:89:7a:24:d4:3d:81:35:
d3:38:16:f3:ca:9b:ea:99:35:18:a3:d6:ec:a9:93:22:0e:73:
c7:b5:6b:f0:aa:c8:c5:18:2d:71:2f:12:18:9a:de:2e:38:0d:
3d:f7:cc:66:ee:78:4d:c2:26:dd:e5:5b:de:3c:2f:4b:ae:43:
7e:b2:b7:8a:4e:e1:91:2f:32:01:52:f9:57:cb:2e:ee:41:56:
8f:b8:80:c1:38:b1:f0:e8:e5:91:39:d7:6b:07:82:2a:5a:74:
2d:23:be:a6:cc:d8:a0:75:35:1a:29:d1:f1:ee:e0:42:1c:45:
bb:7c:55:c4:ef:7c:ce:1d:ee:f1:64:af:04:88:30:c0:8e:0b:
80:f7:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:15 2026 by rpki-client