Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: a9WHv83gjr9Ilzj4CIDjr+kwSv9ApTp556QeoFxWC+Q=
Subject key identifier: 5C:FD:28:82:F9:A3:47:39:EA:D4:07:C4:AD:C8:D2:03:5D:38:1C:D4
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019F867AE417FCCB9FFF431148A9D562758E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1782
Signing time: Tue 21 Jul 2026 21:00:28 +0000
Manifest this update: Tue 21 Jul 2026 21:00:28 +0000
Manifest next update: Wed 22 Jul 2026 21:00:28 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: D1ZVgNtuFBdn2xjfIJ3mRy4k6HB4xW5GI/+o9jfUEM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:e4:17:fc:cb:9f:ff:43:11:48:a9:d5:62:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jul 21 21:00:28 2026 GMT
Not After : Jul 22 21:00:28 2026 GMT
Subject: CN=5cfd2882f9a34739ead407c4adc8d2035d381cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:f1:57:33:c0:85:3b:1a:13:9c:5a:59:de:
8f:7b:3b:5b:3e:a4:2a:61:e5:11:c1:40:7e:96:50:
06:82:14:68:b4:c2:2b:3f:b6:dc:20:a1:f8:51:79:
f3:25:5e:97:af:43:e8:2e:50:ca:af:cb:f5:2c:fe:
82:52:bb:09:19:72:12:24:67:13:a8:1e:87:8a:57:
15:6d:3f:79:cb:bd:2c:0e:19:cc:b4:ef:b5:bc:de:
b8:d7:f7:38:5d:ac:82:21:b9:a5:16:e7:78:81:cf:
44:8c:a6:3a:17:8c:7e:bf:7d:bc:22:76:8c:c3:ab:
66:60:96:e6:87:cc:ac:13:cf:8e:75:d1:d1:98:33:
c3:73:e5:b9:b9:d1:6f:8d:af:b0:6a:5f:05:c7:68:
99:8a:0a:c8:a6:6e:f3:5c:04:56:2a:d1:4d:33:58:
df:3d:20:ee:0c:30:5c:73:12:d3:14:7b:46:23:61:
4c:0a:9a:4b:46:d7:a6:79:69:cd:02:a9:de:71:08:
eb:50:6b:8d:05:6a:41:db:5a:c4:b4:6f:d3:65:18:
71:df:0d:59:95:ff:75:32:3b:12:e5:34:99:45:fc:
04:d0:09:d5:d7:54:39:a5:7b:51:d5:16:c6:8f:c0:
cc:55:71:e3:dd:f5:3b:2c:1a:59:7d:94:4b:fc:87:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:28:82:F9:A3:47:39:EA:D4:07:C4:AD:C8:D2:03:5D:38:1C:D4
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:02:a4:be:b6:c8:c9:31:a6:53:b3:a3:23:a5:2a:da:a6:43:
15:a4:12:43:e9:1e:63:ce:f0:56:65:c4:ac:00:38:dc:6a:4f:
a2:22:6b:61:ad:04:22:e9:6e:76:35:35:1b:a1:f2:12:e0:0e:
81:7e:dc:ba:e5:91:44:d9:fa:18:a2:c5:3d:ac:f1:64:e2:89:
33:2f:70:cc:89:d6:6f:d4:d7:09:6d:74:c8:bf:53:8d:bc:3f:
8a:3c:b9:3a:16:27:7a:44:a2:5a:92:1a:2b:ef:fd:5c:ec:a8:
1a:9a:02:dd:cb:93:82:7d:f2:8f:a5:30:b9:68:6f:06:26:e7:
bd:85:54:49:d1:52:3d:ec:5f:01:e5:92:85:1e:bf:a8:2f:3a:
a0:e3:f5:4b:71:a7:7a:7c:bb:80:53:f7:4b:4e:b5:a7:b5:53:
e4:07:fc:ec:6a:e3:f1:03:7f:58:5b:cb:02:62:ec:b7:14:5e:
6d:80:37:9d:b0:f0:8a:f4:e7:cc:6d:ef:24:3c:6d:fd:56:ab:
c9:75:04:c2:45:f0:69:70:d4:d7:d0:97:db:83:52:90:d6:32:
67:0f:95:fe:38:73:f6:41:a3:7d:d1:9c:a2:a0:30:20:78:24:
97:b5:22:ec:59:0f:b5:05:fe:66:d6:df:8b:f6:75:42:1b:d4:
0d:ab:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:29 2026 by rpki-client