Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: Uihl44M4VpzNpdJYazm7L2Q72wzlHuum13K/EJvNFlk=
Subject key identifier: 02:8D:29:B7:FF:26:E5:44:97:D0:B6:FF:6B:60:48:85:4D:65:E0:07
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01A08D8DE2B078D102CFF4EABDA46E4D53ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0890
Signing time: Thu 10 Sep 2026 23:01:21 +0000
Manifest this update: Thu 10 Sep 2026 23:01:21 +0000
Manifest next update: Fri 11 Sep 2026 23:01:21 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: R6Db7J+4djme17L0A2NmYPYt/ASCNnf38sKWcNDjGfQ=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:e2:b0:78:d1:02:cf:f4:ea:bd:a4:6e:4d:53:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Sep 10 23:01:21 2026 GMT
Not After : Sep 11 23:01:21 2026 GMT
Subject: CN=028d29b7ff26e54497d0b6ff6b6048854d65e007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:65:d5:ec:d3:c7:9e:13:e9:47:2f:19:b2:
00:3d:63:d5:7a:e1:cb:f4:41:4c:a9:db:fd:5f:83:
83:d7:c8:1d:99:c0:2e:5f:9b:1a:b4:2c:95:f5:47:
a6:7a:3c:9c:b2:2f:2c:1f:5b:a7:62:c2:4a:d1:71:
88:98:ef:b6:10:9f:b6:e9:d0:4b:83:fa:9a:f0:4e:
e2:71:fd:c4:1e:dc:ce:d7:a1:fb:29:15:7b:fe:27:
0c:a7:27:c8:e4:53:57:0e:ef:91:4a:c4:87:5c:a1:
a7:1c:52:15:07:e8:5a:64:64:1e:e2:74:4d:23:bf:
18:c8:d5:20:0b:3a:a1:e5:05:f9:8a:29:ba:e4:a8:
b4:21:bd:60:07:9e:3b:04:e4:f9:da:5b:65:4d:9a:
bb:ce:09:68:bd:2a:9d:f5:86:e4:72:51:9e:e1:e4:
35:bc:77:52:2b:88:e5:9f:58:b5:d7:06:b4:9c:44:
03:07:2d:a7:8e:ea:09:79:cf:77:dd:d2:cf:9b:40:
d1:02:21:2e:9c:96:fd:39:ca:d5:89:d3:52:bd:f0:
da:1c:04:0f:c6:23:44:36:84:6a:83:9d:31:df:92:
29:91:8b:1f:47:4f:6a:6f:09:4e:f9:51:cb:f0:a4:
12:e8:21:de:b3:76:8f:a3:68:58:f1:55:c4:71:5b:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:29:B7:FF:26:E5:44:97:D0:B6:FF:6B:60:48:85:4D:65:E0:07
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:61:2f:48:05:75:4e:8e:23:26:f1:f3:b8:9e:f1:dd:49:
17:9a:bd:84:f2:9c:a9:ef:35:a0:f6:fc:57:4d:90:13:e7:ad:
c0:27:bf:fb:71:fc:7a:4b:e7:28:f5:d9:1d:3d:23:85:dd:bf:
a6:3e:00:14:15:0c:61:8f:dc:64:b5:fc:bf:30:62:d3:77:0b:
c3:50:71:32:f3:b8:5d:93:93:af:8c:6c:55:8e:ad:b9:43:54:
00:78:67:43:e8:14:2a:51:67:4f:14:e8:2b:f1:3e:f9:3f:a5:
2e:5f:80:9e:7f:0a:5a:d0:2a:cc:24:48:b2:4c:a5:d6:aa:6b:
19:2c:ba:d2:ec:65:35:50:bb:be:84:20:9f:d4:21:81:69:04:
e7:86:05:f6:b3:22:df:ee:99:c0:f1:ad:a4:42:ed:fd:17:ff:
09:35:52:c9:22:63:a2:43:f1:5f:14:ee:ae:ed:e4:d1:36:55:
62:ad:3d:94:ed:a2:5f:04:84:cb:e9:bf:24:83:e6:39:9a:b2:
47:7f:57:c8:33:c1:cd:15:2f:01:2d:2e:11:5d:dc:0d:5d:8c:
50:e0:d6:67:94:a7:38:c7:25:a6:d4:8c:fa:79:4f:45:53:10:
1a:c0:c3:af:16:0b:03:5b:07:1c:1e:17:52:2a:06:f0:da:d7:
26:6a:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:00 2026 by rpki-client