Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: 1wxBAXhsK4QMS5P1acGwVIGWUNxV4zeamjdtqn1Ko8Y=
Subject key identifier: 6A:E4:9C:14:3A:9F:BA:4F:18:B0:D5:F9:DB:4B:B8:89:2C:DC:AE:E1
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019CE4EC7DCDD387F193D9DC450506797BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 06AB
Signing time: Fri 13 Mar 2026 02:00:29 +0000
Manifest this update: Fri 13 Mar 2026 02:00:29 +0000
Manifest next update: Sat 14 Mar 2026 02:00:29 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: yS+oiuTgynxUh6RPYt3V21TwY00qtn5vIk5Yy//aqCw=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:7d:cd:d3:87:f1:93:d9:dc:45:05:06:79:7b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Mar 13 02:00:29 2026 GMT
Not After : Mar 14 02:00:29 2026 GMT
Subject: CN=6ae49c143a9fba4f18b0d5f9db4bb8892cdcaee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:32:b2:9b:26:d3:15:b0:1e:30:ab:3b:ec:
8f:3c:16:73:9e:da:32:d7:9f:ea:fe:55:54:17:ab:
a0:19:78:1a:8e:64:eb:6a:11:e9:e4:6d:22:d2:e0:
80:fa:a2:df:5a:c1:6e:51:2e:d7:ca:24:8e:87:09:
75:60:b6:03:3e:7f:ef:25:6d:a7:41:9e:6d:47:7b:
fb:e6:25:1d:bf:25:33:79:ff:93:3f:25:cb:f4:7e:
f0:7a:69:0c:33:bc:e8:10:83:9d:48:17:8b:d5:53:
07:63:15:aa:8d:63:09:43:81:50:0e:18:03:77:f5:
9f:73:cf:a1:1c:12:fb:8d:11:62:66:46:79:56:10:
34:5e:88:20:12:3b:c4:27:f3:0f:63:d6:95:0b:76:
2d:f8:a1:4b:75:1e:60:39:59:34:f5:06:c8:71:0e:
63:89:b7:b4:bb:e3:98:19:0a:2d:d8:91:d7:eb:f8:
66:54:c7:99:bc:9f:aa:36:70:7f:b8:41:47:a3:ea:
6b:35:03:bf:62:14:33:d9:d3:99:f0:ce:b7:33:54:
57:6c:bf:3b:61:3c:2e:5a:24:9e:29:a9:74:f6:b5:
c2:97:ed:39:e7:b8:24:c3:e8:0f:4a:d3:c1:1c:52:
8b:3f:00:e0:e1:58:3c:27:d3:77:5f:fa:c0:a0:25:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:9C:14:3A:9F:BA:4F:18:B0:D5:F9:DB:4B:B8:89:2C:DC:AE:E1
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:5b:9d:7d:17:2f:cc:41:40:f1:fe:57:4f:0c:db:b2:17:
af:62:09:11:6d:7d:e0:d1:4c:fc:28:24:9b:6f:a7:85:60:eb:
42:7b:09:00:e5:65:09:81:56:ce:75:eb:0c:d7:22:bd:44:f0:
0b:d9:88:a7:9b:c6:ed:d2:0f:39:fe:60:69:16:64:b7:91:d5:
d1:5a:0d:0f:b3:d8:82:fb:9c:a8:eb:ae:4c:8d:4f:a0:04:cc:
51:76:0c:84:bb:37:cf:52:fa:e8:4f:4a:ae:8c:c1:43:b4:21:
bb:74:db:ce:9f:6d:e1:d5:ca:3e:25:2b:e8:d1:f4:5f:3e:be:
3a:0e:d7:68:aa:ec:1a:07:8c:21:13:22:54:bf:f0:89:e3:13:
db:af:5f:ca:1c:32:ce:c5:42:64:6a:10:26:4c:6b:e3:9a:79:
be:b8:05:a6:48:d2:cb:e1:83:e3:3b:67:77:27:cb:78:89:70:
ad:af:fb:99:84:06:5b:a9:64:ca:67:f2:00:d5:8d:34:3b:23:
c1:82:a0:bb:fc:a9:01:22:46:d0:60:bf:d2:b0:70:d8:e2:4d:
20:f4:39:d9:91:54:aa:9f:45:a5:18:d3:37:cf:1b:24:77:13:
3a:2b:b6:6f:f8:e5:be:dc:4a:12:23:26:61:4b:2b:5f:b7:ba:
e7:1a:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:08:57 2026 by rpki-client