Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: mIk1Acd1PENIGLX1SOJTLsuqCBjbkIXcQtJRV5b0pcg=
Subject key identifier: EA:0C:01:66:0A:0D:B4:08:5D:75:C9:09:81:06:E1:8D:31:8F:A4:8C
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 019D39E56006DA88425A08424141DEAEA794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 0A3E
Signing time: Sun 29 Mar 2026 14:00:26 +0000
Manifest this update: Sun 29 Mar 2026 14:00:26 +0000
Manifest next update: Mon 30 Mar 2026 14:00:26 +0000
Files and hashes: 1: EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa (hash: PphogVMUEL4OlBwVhraxAAhyGlhiT8gvlTRah6rK8+U=)
2: RFEKzhn-pHan5b3ES1uTHS32Yf0.roa (hash: BUdHJjCTC35G+E5RK3wJNAdK3qHwCYOchA/eJ1lutxw=)
3: frDx6maqwpFdsbhlxcMmFrttL0I.roa (hash: sAaL1XRVCAxgFQY7HpJXtsidkEm2o400k7w79WGxyVU=)
4: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: +ko3J8SoVw5WAj2AGzIhqmHuql01iAwwW6gfhzX5fEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:60:06:da:88:42:5a:08:42:41:41:de:ae:a7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Mar 29 14:00:26 2026 GMT
Not After : Mar 30 14:00:26 2026 GMT
Subject: CN=ea0c01660a0db4085d75c9098106e18d318fa48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:8b:da:e3:0f:71:e1:c4:fe:a2:1c:87:6f:
c9:0a:a4:29:ee:ff:ae:cf:50:41:d6:d7:c3:8e:a7:
bb:ca:7b:88:15:dd:92:33:7b:23:24:74:ff:65:22:
51:7d:45:c6:d2:07:3b:08:02:7f:83:b6:48:b8:08:
99:71:b6:60:47:42:47:bf:50:d4:c8:fa:c0:62:4a:
53:9d:a7:b2:d0:50:ab:d7:2f:b1:c1:8d:a3:f0:c1:
fc:0c:22:8e:a8:75:0c:dc:99:19:dc:ca:42:36:fc:
9b:7f:dd:f2:1c:04:03:60:9b:5f:dc:9d:df:90:3f:
59:80:a3:cb:2c:53:fc:5d:00:1a:58:5a:c9:5d:5a:
9f:8d:63:25:b8:b0:0f:1f:b9:7b:1a:e7:1b:1f:c7:
c7:36:93:f2:ce:a1:f6:fc:7b:fa:4b:86:cb:07:74:
36:6a:c9:2b:72:47:2e:66:7e:b3:f8:88:9a:bf:21:
43:f5:48:ef:a4:0e:a7:59:29:3d:53:72:ba:f2:e0:
b7:f5:32:a3:58:1f:ef:35:ae:67:03:d0:c0:dd:ce:
fe:be:dd:b9:84:aa:f5:47:32:74:55:63:db:99:4e:
72:8f:60:6f:38:af:96:bf:1a:69:82:de:2c:e7:3e:
a9:f4:30:a0:b2:7a:f8:7d:88:f8:94:44:dc:0a:c9:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:01:66:0A:0D:B4:08:5D:75:C9:09:81:06:E1:8D:31:8F:A4:8C
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:42:3d:32:02:a7:82:95:c6:be:5b:5f:ff:b9:d2:2f:79:
fb:5f:43:b4:23:93:3f:c8:da:d8:4c:81:f9:e1:c3:31:39:f0:
ed:0f:ae:68:3e:bc:00:49:16:e5:55:41:ca:c8:1e:bf:d3:f6:
81:b5:42:da:fc:07:31:51:89:9d:52:9e:b5:1d:84:d1:2d:15:
49:3f:06:de:4d:23:db:f4:3f:f6:ae:5f:6e:d1:b8:77:3d:5d:
97:dc:71:bd:b4:ee:81:fd:dd:3d:c3:e3:18:46:82:5b:8a:90:
41:c2:24:94:bd:69:a7:aa:26:73:1c:93:1b:5a:ac:99:b8:ee:
ac:95:41:0f:a2:af:41:e0:06:9e:13:a1:84:2d:b5:44:fd:8d:
2a:e7:12:2e:30:ec:f9:0e:56:09:97:7f:90:b0:70:c6:d3:58:
16:df:2e:52:33:0f:08:86:e0:78:dc:bb:2f:ef:4f:5e:76:ee:
a4:7e:e5:48:88:7a:f6:bb:2c:67:a8:96:b7:ef:41:18:3b:e8:
85:a0:f2:ad:14:19:c3:92:f1:2f:13:20:95:12:b5:d1:70:29:
3d:b3:11:19:ff:47:2d:0c:c8:d7:85:1c:69:57:dd:11:9a:a3:
e0:3c:1d:15:af:27:52:21:f4:38:a1:af:7a:f3:f5:77:39:a9:
0b:b4:c1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WAG2ohCWghCQUHerqeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0
YjYxYTgwHhcNMjYwMzI5MTQwMDI2WhcNMjYwMzMwMTQwMDI2WjAzMTEwLwYDVQQD
EyhlYTBjMDE2NjBhMGRiNDA4NWQ3NWM5MDk4MTA2ZTE4ZDMxOGZhNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hSL2uMPceHE/qIch2/JCqQp7v+u
z1BB1tfDjqe7ynuIFd2SM3sjJHT/ZSJRfUXG0gc7CAJ/g7ZIuAiZcbZgR0JHv1DU
yPrAYkpTnaey0FCr1y+xwY2j8MH8DCKOqHUM3JkZ3MpCNvybf93yHAQDYJtf3J3f
kD9ZgKPLLFP8XQAaWFrJXVqfjWMluLAPH7l7GucbH8fHNpPyzqH2/Hv6S4bLB3Q2
askrckcuZn6z+IiavyFD9UjvpA6nWSk9U3K68uC39TKjWB/vNa5nA9DA3c7+vt25
hKr1RzJ0VWPbmU5yj2BvOK+Wvxppgt4s5z6p9DCgsnr4fYj4lETcCsn4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoMAWYKDbQIXXXJCYEG4Y0xj6SMMB8GA1UdIwQY
MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt
OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh
LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLFCPTIC
p4KVxr5bX/+50i95+19DtCOTP8ja2EyB+eHDMTnw7Q+uaD68AEkW5VVBysgev9P2
gbVC2vwHMVGJnVKetR2E0S0VST8G3k0j2/Q/9q5fbtG4dz1dl9xxvbTugf3dPcPj
GEaCW4qQQcIklL1pp6omcxyTG1qsmbjurJVBD6KvQeAGnhOhhC21RP2NKucSLjDs
+Q5WCZd/kLBwxtNYFt8uUjMPCIbgeNy7L+9PXnbupH7lSIh69rssZ6iWt+9BGDvo
haDyrRQZw5LxLxMglRK10XApPbMRGf9HLQzI14UcaVfdEZqj4DwdFa8nUiH0OKGv
evP1dzmpC7TBKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:42 2026 by rpki-client