Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: Hr4Lvgh8UeQELytUT/6nWtGOEUejwvh+JIhWgL398Ug=
Subject key identifier: 91:AA:AD:A8:6B:15:88:DB:CA:D4:16:2B:8B:B9:0D:9F:74:25:D9:D6
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01A06DCBBBE85DFA4A3429B43A7F872B6883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 1196
Signing time: Fri 04 Sep 2026 19:01:03 +0000
Manifest this update: Fri 04 Sep 2026 19:01:03 +0000
Manifest next update: Sat 05 Sep 2026 19:01:03 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: DJEpH228tyjyKm85ax4B+fJuF1xi9UYM5twhZ+MK3ZA=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:bb:e8:5d:fa:4a:34:29:b4:3a:7f:87:2b:68:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Sep 4 19:01:03 2026 GMT
Not After : Sep 5 19:01:03 2026 GMT
Subject: CN=91aaada86b1588dbcad4162b8bb90d9f7425d9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:72:fc:56:7c:52:4a:ab:fb:28:75:0f:4b:
8e:ab:5f:ec:0b:92:53:9a:7e:29:23:ab:bb:cc:69:
54:3b:b0:45:4b:10:21:84:5c:16:9f:eb:c8:d3:53:
f2:6b:b5:86:b4:d0:a9:c2:3d:66:11:d7:35:4a:fa:
b7:ee:2b:e2:55:09:8f:1e:e8:f7:88:2c:8d:46:8f:
ec:b8:c9:08:dc:50:f1:af:01:45:46:a4:e2:b3:fb:
d0:cd:44:96:9e:44:3f:f3:da:d6:d5:68:5c:5e:8c:
0a:89:54:46:ba:20:c7:39:c1:be:37:ca:1e:6c:66:
50:bd:23:d8:36:f9:87:4b:87:8a:38:06:e9:86:3c:
8d:bb:01:72:63:52:cd:a3:dd:ec:2e:fd:a3:d2:64:
f5:41:aa:f7:cb:3f:e5:63:ed:2a:4b:39:86:57:87:
b1:26:a1:6d:7d:3c:b8:d5:b3:69:7e:b3:57:eb:99:
a2:5b:cf:43:85:dc:c6:b3:d2:8d:8c:84:96:b4:39:
5d:c7:8c:b9:74:b3:ca:63:a1:50:b7:a9:e3:61:f3:
02:8b:d6:28:83:c9:38:bc:32:7e:66:58:af:06:b7:
f7:ea:b2:6a:ff:53:61:b8:bd:da:1a:64:df:3a:2c:
8a:93:72:b9:40:96:74:82:e0:5a:95:22:4e:8c:26:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:AD:A8:6B:15:88:DB:CA:D4:16:2B:8B:B9:0D:9F:74:25:D9:D6
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f7:b5:a6:6f:5b:ad:6c:1d:fd:e5:5e:df:d0:d5:28:47:0f:
39:0c:97:92:70:7f:e1:84:f1:76:f0:94:3b:55:b6:52:11:e8:
63:41:1a:6c:05:c9:96:dc:27:59:43:df:b8:c0:91:20:e8:6a:
a6:00:a8:06:34:df:d9:87:d7:2d:98:e5:73:d7:2c:b5:ce:0f:
38:f0:ba:3e:3b:87:1b:fa:85:b1:8a:89:17:ca:7a:3d:c7:19:
eb:4b:9b:de:bf:25:b5:d8:0e:d4:31:0c:5b:79:fc:13:a2:8a:
2d:2c:fe:e1:26:45:51:cb:0c:19:45:91:b1:44:ce:ea:3c:d0:
2c:6c:2c:1c:ec:dc:cc:bf:90:07:2f:b7:8a:b6:5f:d8:09:e8:
bb:b1:7d:61:69:49:6c:45:7b:0c:73:5e:0a:62:3f:eb:1e:60:
54:39:38:e8:86:4e:5e:9f:32:64:2d:09:a0:a2:eb:d0:50:65:
c3:c7:56:07:eb:c6:bf:5b:8a:b2:13:98:8b:e7:8b:c5:2e:d6:
a1:06:75:14:40:96:54:b5:fd:07:c8:5b:43:4b:cb:28:40:6c:
3d:3c:62:ac:6f:56:17:85:0d:6f:82:fb:19:c0:b6:25:4e:e5:
21:2a:76:1b:a0:82:41:0f:8d:fd:6d:a9:f1:ec:76:50:0c:c0:
e9:70:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:47:15 2026 by rpki-client