Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: gsskK+rUi9/Ru/XHbhn28QRnAPHAdp93EngdbwRXR0c=
Subject key identifier: 81:C6:ED:32:F9:04:4B:9A:80:3A:9C:51:72:BD:01:89:B4:09:94:AB
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019D3909D3F34AC483590293EEE109ED133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0FED
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=)
2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: n2DPkpJ9n+xCDiBv/hMSURnMzgiMjyiGlz+catB7XBw=)
3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:f3:4a:c4:83:59:02:93:ee:e1:09:ed:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=81c6ed32f9044b9a803a9c5172bd0189b40994ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:82:30:0a:36:2f:d5:f1:b3:86:00:d2:83:
3d:77:ce:13:06:18:ff:04:6d:26:71:e5:c1:e7:c8:
d3:76:c2:82:b4:c3:6f:2b:dc:a8:06:b8:78:de:e1:
77:e9:9c:c1:3e:be:1e:c9:05:f3:78:9b:9e:4f:4e:
fa:f0:7d:79:0b:fa:e0:de:cb:09:01:9f:ba:47:ab:
8d:45:ab:09:e5:f1:ee:1c:26:da:f7:e3:9c:bb:6b:
5e:fb:6b:3b:2c:72:74:0d:6c:21:3a:43:de:2e:c9:
f6:fe:6b:9a:dd:50:cc:be:59:17:86:ee:ea:1b:1f:
0e:15:3a:f9:f7:65:f3:77:75:8a:b6:58:c3:e2:35:
83:3e:9c:86:13:bf:8a:ec:e4:03:b5:ef:62:82:24:
07:6c:38:dd:b7:df:df:fa:85:c9:4a:91:cf:98:7c:
43:47:a5:fa:b2:d0:8e:6b:02:80:11:1e:8e:9e:0b:
9a:58:92:38:38:3d:b9:c7:99:b6:1e:90:b6:92:33:
e9:cf:81:63:c2:4e:30:6e:42:9c:c7:78:3b:dc:55:
fe:c1:72:27:f5:e1:1d:fb:90:22:65:4e:df:54:e6:
35:65:51:87:d9:28:84:f6:ff:64:e1:33:7e:9c:78:
26:3b:4f:27:e5:90:ff:b9:1e:79:4a:34:54:12:a6:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:ED:32:F9:04:4B:9A:80:3A:9C:51:72:BD:01:89:B4:09:94:AB
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:30:f3:46:b7:2a:0e:80:20:26:61:98:e1:11:3f:cb:d1:2e:
ef:26:89:ea:9f:58:b8:a9:93:39:34:40:09:4d:f1:1b:8f:f4:
a5:95:1b:19:70:1a:3d:53:7d:41:6a:5c:ce:e1:4d:45:d5:af:
f3:e0:4b:bc:3e:17:88:1a:dd:0f:e0:1f:49:4c:96:a2:58:11:
09:b4:fa:cc:76:90:11:6e:fe:27:d7:53:40:87:56:f0:ee:d1:
07:e0:3b:07:1a:97:b8:be:01:3f:26:18:5b:c6:2f:bf:e4:df:
a1:8a:c3:b4:b8:3f:b8:bc:cc:4f:f0:fc:53:84:7b:9f:5b:c6:
7c:71:cd:94:dd:93:33:37:dd:47:a2:7c:6b:74:77:d1:35:ba:
de:9a:86:d6:e9:99:d4:51:07:c5:bb:bd:2c:c9:e1:29:ed:61:
92:a0:fd:f0:c9:64:2e:cd:c0:01:49:44:02:64:af:06:4d:a4:
74:c2:0d:af:62:0b:94:5c:eb:3f:f9:22:18:9a:b6:3a:40:3a:
fb:df:9b:1a:88:ad:9a:7c:32:08:27:e8:ad:bd:9b:43:84:5a:
62:59:ef:91:35:d4:3d:7e:e2:f4:d8:95:be:3c:22:c5:44:71:
24:23:92:d9:79:e5:f7:53:70:88:ed:da:3f:da:f9:61:04:85:
36:97:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:39 2026 by rpki-client