Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
File: L761tTgJwKseTgF9tL9QeIFa5mo.mft (raw, json)
Hash identifier: CIor5O+2tGip3PHkb+ds4SjUeQAk801L/C2JfvQ0nrc=
Subject key identifier: 1D:67:57:6B:3D:81:97:C1:AD:6B:62:6F:75:2B:ED:CB:4A:74:19:4E
Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
Certificate issuer: /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Certificate serial: 019D38D36FE4015E4DC049E8F27E7BA43D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: AEGyTye3ghOpjnN1FsrGf0gISLw.roa (hash: 8XpO8RAIJAiW0JXf+HM5D7Hzkm+QZoXTh5fUgfJ/vvk=)
2: L761tTgJwKseTgF9tL9QeIFa5mo.crl (hash: Pg1pUWiFGxFORU+nfNlgGopCYMTrTOl3++l5Di22ERs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6f:e4:01:5e:4d:c0:49:e8:f2:7e:7b:a4:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=1d67576b3d8197c1ad6b626f752bedcb4a74194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:66:35:93:17:cc:35:c5:6f:58:77:e0:43:
c3:e7:02:1c:66:2a:b8:bf:d5:9e:1d:e2:a5:19:c6:
da:55:9a:6e:a0:a2:10:ff:7e:be:88:d2:d9:00:a3:
19:da:f0:17:f7:12:c7:f1:7c:d7:4a:f8:2c:36:17:
b9:21:19:e1:70:03:15:d1:ef:5f:79:e1:8b:8c:64:
be:ee:85:3a:9b:60:a9:27:f6:ed:45:83:08:18:43:
7e:d0:d9:0b:00:52:2a:ff:2a:ed:ef:39:49:d9:b3:
cc:63:b5:af:ff:37:e2:11:9b:14:04:e7:da:5d:a5:
05:ec:4e:a1:92:72:60:f6:88:fb:2e:b4:3f:0f:3a:
6a:02:8d:89:7c:8b:06:57:7f:58:fa:ee:c0:4f:1a:
20:3c:9b:34:3d:a6:19:da:71:89:6f:31:89:7e:5d:
e7:53:1e:a1:41:7f:52:21:84:92:1b:30:1b:38:43:
32:7d:0b:2f:15:6b:60:91:04:ca:4c:6b:1b:6d:9b:
f1:75:ad:09:de:63:e2:1c:8b:be:45:4c:ee:9d:67:
ac:fc:06:16:9e:e5:e3:66:bc:d1:f0:8f:24:a7:a6:
1c:61:e7:1c:01:2c:42:33:b3:af:8c:36:f1:0b:7d:
2c:ab:42:6c:22:72:7d:ce:8a:9c:0c:b8:ce:5e:ff:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:57:6B:3D:81:97:C1:AD:6B:62:6F:75:2B:ED:CB:4A:74:19:4E
X509v3 Authority Key Identifier:
keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7b:09:57:79:ed:fd:40:09:5e:80:89:11:27:6f:08:45:88:
fe:68:23:8a:33:43:d2:bb:d3:ec:51:f1:ba:a4:8e:bf:b8:52:
80:0e:e1:60:7b:04:b4:63:ab:49:4c:1d:00:93:93:cc:6f:b4:
ce:93:a4:5a:24:c7:0b:8a:c5:7b:a4:8c:e0:50:5f:82:ac:13:
64:6c:fc:52:f2:86:78:c5:ac:d1:0b:e6:ea:1c:26:23:2b:fd:
7e:cf:55:6f:58:2d:72:64:c4:b8:4d:ce:58:8f:7f:7e:cc:5e:
d2:63:e1:0c:5a:b2:92:ef:9f:c6:3d:6a:de:5e:d9:74:fd:bb:
77:c7:2d:ad:85:4f:c5:87:11:de:c8:dc:2c:29:76:93:de:c4:
5b:25:f2:14:c4:3f:cc:8c:d0:c6:fb:8f:38:47:5d:e7:06:9b:
34:58:5a:61:84:d3:5b:e3:60:55:b7:1c:33:db:4e:77:d6:a2:
20:1d:0a:88:20:48:2d:e9:7d:3d:5f:7a:4e:cf:12:8e:5b:46:
6b:f3:60:8f:3d:69:b8:75:fd:b8:90:4d:c6:ed:bd:a3:2f:b8:
35:81:6f:cf:cb:48:35:ac:2c:18:c8:be:a0:ca:d6:f0:50:ae:
1f:17:d0:c4:3c:bd:ca:55:e4:0b:1c:42:86:a3:62:b3:08:64:
e4:d3:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:49 2026 by rpki-client