Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: N1yXgYin+rZIXVKQg3uBUpQsOcbv0nbRhwlNPNE1PZc=
Subject key identifier: 9D:D9:A3:77:31:88:9A:DA:B9:A9:80:A5:45:4D:74:F2:F5:BA:75:5D
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019D37C091B6C8D5FFBE5B2625D33449E09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0EEA
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa (hash: XPAzl9bkrz2kxf/zVv1dmu57yasth2+5TX42SAtg2YE=)
2: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: Cb6tcdtNNpBOHhcvL3cN1GrWVX3W22rTXYq5SHtD8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:91:b6:c8:d5:ff:be:5b:26:25:d3:34:49:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=9dd9a37731889adab9a980a5454d74f2f5ba755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:0d:cf:92:0f:55:13:cc:ad:68:94:9e:bd:
82:71:d4:23:58:d8:b2:61:b1:69:c9:01:6d:84:6d:
3c:4d:b5:94:5c:4b:e0:c2:5b:39:e1:5e:f8:20:5e:
ec:2f:b3:a1:13:92:1c:57:33:91:b7:eb:9e:86:56:
b0:af:54:fa:81:f6:be:1c:e2:4a:6a:24:a5:e0:0c:
6a:76:15:53:0f:cc:9a:47:e9:33:cb:73:78:8f:d1:
1c:ad:7b:a6:9b:3e:85:5c:4e:27:ce:6c:03:5d:3e:
ce:41:2b:26:98:bc:e4:48:ae:25:2f:ac:d9:e2:b5:
af:9a:fc:ae:eb:91:69:4f:4e:a9:2c:c0:27:07:54:
d9:7b:17:44:f2:7a:ae:ab:7e:28:cc:45:f8:5e:79:
f1:22:27:0b:33:a6:7a:1b:ba:8c:9e:87:0f:ce:73:
f2:ef:c9:42:07:55:18:ae:a6:a1:68:7a:6d:b3:96:
9d:5d:4d:00:86:31:77:fb:f9:ca:ab:ff:08:4f:4e:
2b:03:a7:7a:d4:6a:03:1d:cf:c0:c3:68:62:63:4a:
67:aa:24:cd:b8:95:a2:a2:a4:9f:85:b9:48:d3:31:
dc:e9:bb:ce:ac:57:61:e4:93:7f:f3:ca:79:49:28:
86:8f:38:68:6b:eb:5c:34:d7:b8:43:c5:2b:0f:2d:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:A3:77:31:88:9A:DA:B9:A9:80:A5:45:4D:74:F2:F5:BA:75:5D
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:69:cb:02:ca:14:24:ce:31:7e:8f:d6:32:56:be:83:b9:
d1:6f:70:95:32:17:be:a5:ec:59:40:58:47:24:4e:5a:56:01:
64:9c:18:ce:c7:73:1a:4f:b8:52:f4:0b:c2:8b:c4:3c:0c:42:
17:12:1f:71:54:49:fb:86:e5:b1:ec:a8:8c:0a:c4:bc:14:90:
ab:92:c9:d9:30:26:2e:b1:dd:72:9b:a6:89:f8:3a:fb:af:75:
c7:30:52:71:8c:8b:a1:49:d8:fb:81:a6:cc:0b:6c:6f:d9:f2:
4c:c6:40:2a:b6:15:0f:0e:64:55:a4:12:00:4e:91:71:8e:83:
10:68:39:7e:cd:73:5c:45:3c:a0:82:2f:9e:4c:f1:10:04:6e:
a5:bd:29:e0:1c:6f:e9:3c:3c:85:64:8c:66:d8:db:c7:2d:70:
41:ca:00:cf:ca:b3:b2:e4:54:33:05:47:7f:7e:b9:60:e5:48:
ea:4c:79:df:ed:97:fc:c0:f0:84:73:56:0a:cc:7e:06:0d:ad:
4c:eb:10:57:24:ca:2a:59:67:51:2a:54:0a:a7:64:ce:8f:c1:
87:f4:0f:c3:d8:90:2f:be:b8:62:66:53:9d:68:08:18:b4:89:
ec:05:27:bc:73:f2:e9:8c:bb:5f:c8:03:e1:79:08:40:84:c5:
9c:4a:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:41 2026 by rpki-client