Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: W47YyaJza/cdDX0wEwpODb4/jtGdDcRC5oQSNuvzBME=
Subject key identifier: 13:9C:B6:AD:7E:22:3C:8B:8B:38:FD:7A:E8:F3:3D:4B:EB:E2:6C:7F
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01A17D052B8EC7AB1ACFE28D87AF47C8EA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 090C
Signing time: Tue 27 Oct 2026 11:00:53 +0000
Manifest this update: Tue 27 Oct 2026 11:00:53 +0000
Manifest next update: Wed 28 Oct 2026 11:00:53 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: EaJcZbheWYCMnybBx3Wd9WcBD2I8+EvCTK1ouwhAyM8=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:2b:8e:c7:ab:1a:cf:e2:8d:87:af:47:c8:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Oct 27 11:00:53 2026 GMT
Not After : Oct 28 11:00:53 2026 GMT
Subject: CN=139cb6ad7e223c8b8b38fd7ae8f33d4bebe26c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:8d:ce:a9:04:46:af:a6:5d:1d:ba:ef:4b:
57:1c:80:8c:b4:ef:ae:4f:2e:37:7f:f2:fc:a1:82:
86:e8:a0:7a:86:59:9b:93:5c:b3:df:66:c4:ef:e8:
24:08:27:64:ed:d9:42:f8:c3:88:23:18:2d:71:ba:
33:a4:15:33:d8:da:d8:f4:cb:d6:f9:5e:19:f5:d1:
d0:60:18:98:08:be:4c:8f:c3:ae:66:d4:75:9e:9f:
77:b4:b3:5e:a2:a4:93:76:a0:5b:d5:32:50:e6:65:
d4:bf:1f:64:b9:53:f0:5c:5d:1d:98:52:90:19:32:
2c:c1:05:d1:4f:0e:fe:37:5f:55:7a:2f:43:4a:39:
d9:7f:9f:ae:b3:60:53:d4:3f:55:ef:a4:0e:09:fc:
76:a3:b4:b3:7d:ff:45:ee:a9:bf:5a:b0:5e:a1:07:
83:eb:b9:70:7c:9f:ac:5d:ee:7e:46:cd:f4:f6:01:
8d:6f:fa:64:27:7b:90:2d:a4:a8:88:ac:bd:f8:b4:
85:48:dc:af:f7:aa:dd:dc:e4:2f:4e:6f:3b:f8:cc:
7e:88:3b:a0:05:1b:94:1e:c1:68:11:3b:23:83:22:
51:94:99:50:30:d2:a6:85:22:78:2f:91:d3:a8:5b:
d4:ac:b5:ce:ce:da:14:89:0a:d9:d7:c8:60:32:e3:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:B6:AD:7E:22:3C:8B:8B:38:FD:7A:E8:F3:3D:4B:EB:E2:6C:7F
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f2:68:af:da:1c:68:31:76:2a:45:9d:60:6d:7c:ce:f9:08:
e9:d5:9a:a7:04:f3:5e:61:d9:f0:39:0f:2c:3b:c0:b9:28:e5:
30:09:ae:36:83:dc:cc:a5:08:ab:a8:8c:7b:31:a1:11:2b:f8:
7c:a3:77:59:bf:5d:16:86:a7:d2:5e:e5:70:65:5c:0b:40:cd:
ce:6e:5e:18:ea:07:62:b8:09:60:2a:d3:24:6e:2c:1f:cd:78:
d0:37:76:0b:e6:f3:c5:e1:a7:d8:38:f3:ba:f5:e1:d1:ee:3d:
cf:38:64:0a:03:c4:52:5d:6a:95:3c:a2:7f:66:e0:1e:47:21:
24:03:42:b9:92:2d:a1:32:86:e5:fe:d6:07:65:06:2d:8b:9b:
26:a0:5e:e9:21:4a:5f:2f:29:68:9a:c4:f9:4c:08:f3:4f:2d:
09:df:a1:d4:4b:b8:76:8f:83:89:ba:d2:bf:47:2f:fa:1a:0e:
1f:86:3a:68:e9:18:c4:21:7e:fa:10:77:6f:7b:62:9a:6a:aa:
e8:0f:3c:0b:6a:51:94:b7:a8:45:b8:46:3c:72:0a:83:6e:40:
0e:97:48:c5:83:95:09:30:24:35:a0:9e:0e:e5:ad:cc:b2:68:
3a:c0:71:1c:dd:4f:4e:db:65:4b:25:1f:3b:3a:a2:29:51:2c:
e2:93:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:50:13 2026 by rpki-client