Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: tcckWs4BfdFe8cbz+DDx8d1jWrPcKxUIOie9WZvv2+I=
Subject key identifier: 7D:A0:E1:9D:17:C0:E3:E0:C3:34:9C:71:A3:31:56:F7:1B:46:CB:6D
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019DCE993C1DADB0AD3408B2115BB79C3FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0724
Signing time: Mon 27 Apr 2026 11:00:41 +0000
Manifest this update: Mon 27 Apr 2026 11:00:41 +0000
Manifest next update: Tue 28 Apr 2026 11:00:41 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: /JrbCeQns3M1Mr1McaDPEWt3KikI55vckVd7e5k1H3E=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:3c:1d:ad:b0:ad:34:08:b2:11:5b:b7:9c:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Apr 27 11:00:41 2026 GMT
Not After : Apr 28 11:00:41 2026 GMT
Subject: CN=7da0e19d17c0e3e0c3349c71a33156f71b46cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:f9:16:c8:32:3c:a3:ac:b0:ee:83:27:9f:
34:cb:c8:01:b6:1b:f3:1a:1b:f7:76:cd:1b:8e:32:
ab:76:c9:31:60:ca:fd:de:ef:9e:90:77:fb:b6:e0:
85:41:fa:12:fd:53:83:4d:e7:40:b0:13:6b:f2:c6:
19:d5:e8:8c:c6:1f:d4:6b:df:d2:21:d5:71:fd:88:
ea:35:9f:fc:b3:a9:c0:28:a4:d3:72:a1:59:91:4e:
25:67:bc:6a:be:0d:e4:fb:5e:02:74:b8:4b:af:e7:
18:bb:c0:68:7f:c9:f4:90:1f:36:26:fa:0c:d4:53:
30:85:f4:80:d6:e9:2b:cd:5e:c4:87:92:2a:45:a7:
47:0c:00:6f:63:b4:e9:19:d1:f5:4f:7f:ef:05:1f:
ed:52:ec:f7:6c:2c:34:8f:39:62:56:b6:ea:54:5b:
1f:20:aa:27:42:b9:0f:9f:25:5f:af:4f:f7:d4:e6:
bb:c7:d8:c9:4b:3d:8c:57:af:aa:c9:99:bd:9f:40:
ba:dc:6f:6b:5b:8b:6d:e4:ae:c6:12:e3:17:d7:9b:
e3:63:b9:b9:a2:2c:a9:51:f7:75:61:d2:f7:aa:1e:
a4:a1:8f:39:51:a5:6e:d2:8e:ff:e8:c9:88:7b:6f:
31:0f:c6:4f:bc:15:5a:38:cd:db:4f:24:d6:bd:6b:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:E1:9D:17:C0:E3:E0:C3:34:9C:71:A3:31:56:F7:1B:46:CB:6D
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:da:db:0c:ad:ac:09:f9:a3:fe:d5:f7:07:fc:20:90:65:44:
f2:0c:00:a6:b0:91:0e:2e:c6:80:46:98:a3:c3:65:dd:7f:b5:
18:7d:3c:be:f9:d2:11:3c:55:65:61:76:a4:79:29:9d:86:fd:
06:70:10:fd:1b:ec:6b:3b:2c:a3:84:ce:1e:fe:72:9e:e1:c5:
27:49:f3:f2:07:ed:eb:ea:f5:62:f7:85:92:02:6e:2b:bc:c0:
24:38:ed:6a:c6:87:87:49:49:1e:cc:9f:c4:c7:c6:77:a4:8a:
81:d6:3f:c4:08:8f:52:ee:03:eb:f6:45:db:fe:74:aa:31:d7:
57:31:3d:74:4b:02:90:17:8f:dc:b9:ea:22:d6:22:76:f0:36:
62:ec:ff:99:71:77:ef:e1:43:bc:cb:0c:3e:81:d4:76:0f:41:
4c:6a:57:44:c4:5a:b6:76:b5:74:69:0a:60:b4:a3:9d:18:0f:
47:85:d1:ed:36:74:d6:53:8a:48:9d:d3:8f:c7:19:12:a5:17:
83:c2:10:fa:1f:ff:73:98:e9:34:f1:05:6a:eb:fd:d6:10:56:
15:f6:d7:98:80:10:a2:fb:fc:dc:3c:b2:2e:e8:d9:5c:ac:a9:
c0:b6:cd:21:36:7c:a9:f0:d7:02:a3:83:89:af:51:a1:93:46:
04:42:4a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmTwdrbCtNAiyEVu3nD/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjYwNDI3MTEwMDQxWhcNMjYwNDI4MTEwMDQxWjAzMTEwLwYDVQQD
Eyg3ZGEwZTE5ZDE3YzBlM2UwYzMzNDljNzFhMzMxNTZmNzFiNDZjYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhT5FsgyPKOssO6DJ580y8gBthvz
Ghv3ds0bjjKrdskxYMr93u+ekHf7tuCFQfoS/VODTedAsBNr8sYZ1eiMxh/Ua9/S
IdVx/YjqNZ/8s6nAKKTTcqFZkU4lZ7xqvg3k+14CdLhLr+cYu8Bof8n0kB82JvoM
1FMwhfSA1ukrzV7Eh5IqRadHDABvY7TpGdH1T3/vBR/tUuz3bCw0jzliVrbqVFsf
IKonQrkPnyVfr0/31Oa7x9jJSz2MV6+qyZm9n0C63G9rW4tt5K7GEuMX15vjY7m5
oiypUfd1YdL3qh6koY85UaVu0o7/6MmIe28xD8ZPvBVaOM3bTyTWvWt+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2g4Z0XwOPgwzSccaMxVvcbRsttMB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9rbDK2s
Cfmj/tX3B/wgkGVE8gwAprCRDi7GgEaYo8Nl3X+1GH08vvnSETxVZWF2pHkpnYb9
BnAQ/Rvsazsso4TOHv5ynuHFJ0nz8gft6+r1YveFkgJuK7zAJDjtasaHh0lJHsyf
xMfGd6SKgdY/xAiPUu4D6/ZF2/50qjHXVzE9dEsCkBeP3LnqItYidvA2Yuz/mXF3
7+FDvMsMPoHUdg9BTGpXRMRatna1dGkKYLSjnRgPR4XR7TZ01lOKSJ3Tj8cZEqUX
g8IQ+h//c5jpNPEFauv91hBWFfbXmIAQovv83DyyLujZXKypwLbNITZ8qfDXAqOD
ia9RoZNGBEJKbw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:52:55 2026 by rpki-client