Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: xFvEAM0YC5kZ3orFuKhzYvkjCkGSLgIgUBr1qVFvKzQ=
Subject key identifier: 17:C2:96:B2:12:EC:4E:08:06:B7:A1:D4:51:95:48:F3:2B:F0:7B:BF
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019E9C60C6AC871B54C099E3451021C94720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 10A5
Signing time: Sat 06 Jun 2026 10:00:48 +0000
Manifest this update: Sat 06 Jun 2026 10:00:48 +0000
Manifest next update: Sun 07 Jun 2026 10:00:48 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: Arq9QEcbr44d8rGFGkxkeq5jezZt1UeCB7FdNDr0r30=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:c6:ac:87:1b:54:c0:99:e3:45:10:21:c9:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jun 6 10:00:48 2026 GMT
Not After : Jun 7 10:00:48 2026 GMT
Subject: CN=17c296b212ec4e0806b7a1d4519548f32bf07bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:9a:14:46:11:ca:fc:61:d0:87:ec:a7:f0:
8e:a5:53:44:05:57:17:6a:44:83:5c:90:85:8a:ee:
df:95:cd:3d:f2:03:ba:67:16:01:66:03:5f:83:84:
b0:bd:5d:a2:81:00:5c:d9:7a:e6:63:b3:3e:73:34:
81:c9:2b:b2:7f:14:15:ec:58:6e:4c:82:27:97:6f:
5c:6a:2b:fe:41:bc:60:53:46:1c:9d:72:35:e9:45:
4b:0b:bf:d7:7d:22:7f:f5:b6:b4:c3:49:bb:c4:12:
3d:46:82:26:d2:d0:5d:45:89:14:9c:1f:6a:9f:12:
b5:57:86:f9:8e:9a:9b:f4:b0:ee:dc:b6:6c:26:23:
93:5d:28:84:a5:c2:bf:26:13:a2:1c:54:ab:84:86:
b3:24:cb:5e:50:6b:62:b7:3e:f6:2c:14:74:2c:78:
9e:82:d9:4b:fe:91:d7:57:87:24:cf:1c:fb:1a:b3:
70:30:c2:bd:42:9b:2c:e8:d4:05:da:6c:8e:17:67:
23:f5:a1:4b:1b:e8:48:84:e6:b2:23:72:6b:45:56:
3e:b2:b7:a5:39:28:b3:c2:94:16:c4:ba:86:e2:a8:
cb:87:ba:57:9b:1c:e9:73:63:83:27:3a:d1:85:1d:
6d:12:00:da:f3:8f:75:2a:54:c3:30:57:7c:f7:f7:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:96:B2:12:EC:4E:08:06:B7:A1:D4:51:95:48:F3:2B:F0:7B:BF
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6e:de:d9:52:76:4e:e1:11:68:64:db:24:de:af:1f:8f:b4:
16:28:15:30:1a:c1:f6:42:83:f2:16:e0:73:aa:63:88:76:f8:
ec:d5:0f:5e:a4:e4:c0:76:ee:c4:00:80:d3:41:d5:1b:c6:64:
1c:b3:91:a3:49:20:4e:13:d4:e4:80:c5:d5:2c:f3:2b:41:6a:
3e:dc:84:f7:c7:03:71:a6:2d:ce:d8:35:fa:57:c8:30:52:bd:
f0:f8:17:77:1e:9b:ee:06:c5:4a:33:e8:0f:70:de:ff:93:9f:
7c:7b:9c:14:60:69:a6:9c:20:14:fa:3e:33:31:97:26:4a:fc:
34:af:06:59:7f:f9:9d:c7:e0:c4:8f:b9:ef:e3:94:b9:73:0a:
f4:93:30:8e:0a:97:58:09:07:70:ca:ed:5a:f0:8c:f9:51:df:
09:51:1b:d7:2b:1a:64:cb:b3:08:ca:f9:a3:cb:aa:32:6a:34:
bf:58:c9:ec:b2:2c:60:68:d4:7d:14:c3:08:96:af:bd:5a:58:
9e:61:7e:d9:e8:f0:10:ab:5d:c8:c7:0d:fe:12:4b:ef:0c:d3:
2d:08:e4:e7:b2:76:f5:64:1e:4b:34:21:73:48:cd:91:cf:ac:
42:78:8d:dd:f9:c8:f1:67:ed:d9:88:7b:ce:9a:b9:24:4f:96:
24:09:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:39 2026 by rpki-client