Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: Rp3KQPR5gP1RBC6xaHKHBbU5Ntt25cZa548ZvzNdQfE=
Subject key identifier: EC:2F:2C:40:11:0E:70:B7:82:15:0B:67:5F:D0:B1:CD:00:29:95:3E
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019FA3E10229C223707748F5B82B24B21C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0817
Signing time: Mon 27 Jul 2026 14:01:00 +0000
Manifest this update: Mon 27 Jul 2026 14:01:00 +0000
Manifest next update: Tue 28 Jul 2026 14:01:00 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: SKhRt/vE4epQ+dmAyi8kmcPzKNjwL9TW/W0R5/OzRmg=)
2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:02:29:c2:23:70:77:48:f5:b8:2b:24:b2:1c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jul 27 14:01:00 2026 GMT
Not After : Jul 28 14:01:00 2026 GMT
Subject: CN=ec2f2c40110e70b782150b675fd0b1cd0029953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:a3:41:b0:cd:1c:bb:33:09:d9:cf:c9:c2:
d0:4d:2a:75:73:19:7a:a9:b3:ad:13:89:80:68:1d:
3f:f8:f4:af:ed:90:50:f4:61:31:3e:64:b3:13:7d:
1d:c0:d8:8e:6d:0a:c7:cd:44:bf:2a:48:79:f4:6c:
63:01:1b:ab:ab:2f:c9:0f:b1:34:9b:91:59:54:67:
d7:8b:a4:7d:12:53:ff:d7:7d:03:79:2c:2e:8d:67:
23:eb:f1:0e:ed:02:79:b8:08:3a:25:6a:47:9b:d6:
83:75:e5:30:b1:64:90:fc:eb:e3:21:bb:78:a8:be:
b8:5a:4e:c7:8b:21:fb:1b:97:f7:9f:c8:92:4c:52:
65:67:ab:42:f5:dd:f9:66:cb:a4:52:ba:0a:c4:6f:
bf:69:e9:82:c1:a0:d1:c1:f7:8f:e2:44:47:32:88:
10:93:02:84:6b:30:0a:8b:05:c0:99:f8:70:b9:5a:
74:08:8e:e2:09:57:62:ab:8f:25:76:63:72:7a:d0:
d4:88:4e:15:4a:5a:f4:27:a1:bb:fb:3d:73:58:d8:
9a:5f:77:88:c9:ad:7f:71:de:7b:dc:a1:04:15:89:
0f:f1:e5:24:88:c4:96:75:0e:c0:07:b2:b5:2d:59:
4a:f0:ba:53:af:2b:ad:43:61:af:85:e4:5c:4f:ae:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:2C:40:11:0E:70:B7:82:15:0B:67:5F:D0:B1:CD:00:29:95:3E
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:7c:df:d4:97:67:c2:ad:e9:a9:70:7f:d2:b4:8e:0f:f8:
9e:30:ac:da:1b:f3:2f:2c:d0:b6:83:30:8b:3e:3b:1b:f0:83:
99:86:76:c3:87:0c:7c:a9:4f:1f:69:50:40:5d:5b:6b:ee:43:
50:fe:f5:1c:ad:08:2f:62:bf:56:fe:29:94:b8:5a:c2:59:30:
be:d6:91:01:ed:9f:5c:d3:9a:d2:bb:1d:4a:fc:a4:bf:d0:05:
cd:42:0d:fc:30:32:97:19:38:91:26:73:bd:8f:46:d4:d0:16:
c6:72:69:4d:dd:c2:6e:0f:95:05:b1:70:ef:54:12:05:eb:48:
90:db:01:6c:c4:ae:c9:15:d2:4f:6d:ad:3f:8a:6c:04:5a:4a:
e0:f8:a8:65:18:d6:24:42:05:b2:3d:7b:10:0b:7f:d8:0e:6f:
a4:6b:71:ec:7f:41:1c:23:18:3e:47:db:a4:15:7a:61:91:e4:
f1:6e:ba:79:ee:04:f1:55:1e:4c:44:b2:64:f2:bf:30:54:cb:
55:68:66:4f:9a:fc:be:b2:00:09:03:fe:a2:e8:db:0c:75:66:
f0:d6:18:56:01:d5:11:c6:a1:62:40:29:d3:b4:b9:8b:e0:10:
43:8e:ec:0b:3a:42:1c:5e:b7:20:9b:c3:8a:ea:ec:40:4b:0b:
ca:3e:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:56:46 2026 by rpki-client