Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: 9Z5+w+kJ3qzl6ZYzDF1CEIFSZSXnBVTXO+rpHYnQy/w=
Subject key identifier: B7:E1:A4:4F:9F:76:EA:E6:5C:AA:53:18:36:ED:06:E7:02:3F:00:1F
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01A172818D2C2C79483E95541231F6281427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 121D
Signing time: Sun 25 Oct 2026 10:00:55 +0000
Manifest this update: Sun 25 Oct 2026 10:00:55 +0000
Manifest next update: Mon 26 Oct 2026 10:00:55 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: QRToFGbsb5uPClRG4XwOygSJXjAkOXZJioHeTtcjRU0=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:8d:2c:2c:79:48:3e:95:54:12:31:f6:28:14:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Oct 25 10:00:55 2026 GMT
Not After : Oct 26 10:00:55 2026 GMT
Subject: CN=b7e1a44f9f76eae65caa531836ed06e7023f001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:dc:47:ba:40:8e:b5:34:8a:91:a9:b0:27:
b2:3d:fe:f8:8a:c6:e8:f7:30:92:e9:0f:56:f2:50:
04:30:79:19:87:cc:e5:b2:0c:70:6b:ed:4c:60:b9:
3d:60:c7:5c:ec:01:2d:49:42:f5:9e:6c:fc:64:3c:
5a:e1:e6:35:bd:fc:64:07:ce:e1:70:87:1f:d4:35:
f5:0b:05:6b:de:7f:11:87:9d:84:36:f1:d0:eb:0d:
6c:89:54:c1:70:99:a7:ec:2f:dc:82:68:fd:9c:17:
d4:e3:a9:e7:2e:95:b5:b7:53:b3:3e:18:02:bc:d5:
9f:53:6a:8d:99:e0:49:99:0c:c9:42:48:dc:25:e6:
4d:42:90:ac:4c:f2:a4:39:4b:e1:ba:40:a3:18:d8:
f5:d3:e2:e5:d5:05:b4:df:c9:32:cf:b0:f3:df:04:
19:21:9c:cd:5c:c7:45:15:a4:82:54:00:10:1b:51:
8d:a5:9e:6d:68:e1:bc:28:09:9f:2b:e0:82:ee:9a:
7b:11:f6:df:cf:98:7b:11:8e:be:f1:dc:c1:5c:9e:
f6:c6:fb:34:52:14:9b:32:c4:c8:9c:b4:32:84:9d:
bd:42:2d:83:d5:75:a7:1e:a1:8c:d3:fb:1c:e0:1f:
d9:01:16:b8:90:ac:8b:3a:0b:41:ea:b8:4a:10:89:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:A4:4F:9F:76:EA:E6:5C:AA:53:18:36:ED:06:E7:02:3F:00:1F
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:70:27:8a:83:fb:8c:b5:c4:89:cf:dd:60:55:28:2c:44:
40:3f:f4:dd:fa:48:0b:a4:a1:4b:83:5f:f4:80:1c:9b:e7:48:
b0:b0:eb:de:9f:d2:69:f7:20:da:e8:4e:04:7c:34:9b:e6:15:
4f:4c:0d:55:6b:dc:57:b7:98:bf:9e:2c:2c:cc:c1:0f:e5:d5:
c7:db:b0:77:53:e5:21:7a:47:90:3f:b8:aa:c0:36:1f:33:2a:
e3:ac:10:98:20:f9:b4:ec:6d:86:55:bb:ec:7c:40:4e:ce:cf:
18:ea:a4:ee:26:f7:23:1d:85:1f:ca:04:b4:aa:75:59:66:92:
85:3e:47:48:d1:69:ff:df:e1:c2:ad:3d:43:56:50:df:d6:83:
5a:10:f0:a1:75:a4:ae:42:2e:85:9d:f2:b4:73:d7:0a:05:f7:
14:52:69:02:40:68:55:9d:d3:b8:68:4f:43:40:e8:09:46:9e:
68:9e:07:e8:d4:8d:37:9d:a2:77:bc:91:7c:8a:5f:04:49:30:
2c:c3:dc:19:54:36:ce:e6:1d:f9:b6:5d:a9:cd:fd:fc:a4:9a:
69:6e:f4:a4:79:33:f1:f3:b5:40:ce:f7:0b:d4:9a:2d:5a:6a:
b3:e6:3b:47:b9:f0:58:6f:b6:28:45:cc:ac:86:c4:55:c0:34:
cd:04:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:27:49 2026 by rpki-client