Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: A1A7kCJmYt6X5PKKvksnY8gPT10y5qbeUyRppm3MTdY=
Subject key identifier: F5:E3:61:7C:4F:B5:66:B3:13:91:BD:0F:AC:B5:CD:3B:71:22:03:51
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 01A16B3621AD6C0F53E21664974A5DF0DEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 187D
Signing time: Sat 24 Oct 2026 00:01:11 +0000
Manifest this update: Sat 24 Oct 2026 00:01:11 +0000
Manifest next update: Sun 25 Oct 2026 00:01:11 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: c00ylmDI+oBm9c9B2KjCGsoBOwoNw3jugzH7TNO3r1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:36:21:ad:6c:0f:53:e2:16:64:97:4a:5d:f0:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Oct 24 00:01:11 2026 GMT
Not After : Oct 25 00:01:11 2026 GMT
Subject: CN=f5e3617c4fb566b31391bd0facb5cd3b71220351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:a8:ee:9e:55:c4:0a:45:6e:37:21:c5:bc:
a5:73:69:60:0f:b0:ca:5c:11:8a:77:27:bd:51:57:
c6:d4:4b:79:d9:98:4c:f0:d4:6a:a1:17:d2:c8:a4:
ba:05:db:d3:16:25:40:be:eb:45:31:f4:16:40:64:
4d:8f:a9:c0:fe:0f:45:df:ee:be:ae:5a:6a:64:9e:
dd:02:82:9b:8f:cb:f1:90:fa:ee:14:7b:13:08:e4:
e9:8e:e7:0c:cc:9f:65:a1:c8:a2:ec:6e:3b:9b:33:
d8:26:44:2d:60:ca:49:5d:4d:ef:76:c3:6d:60:19:
94:79:1e:33:f2:99:75:54:b2:c7:4f:42:ae:24:83:
f2:00:a5:ce:73:02:61:e7:73:08:1b:4d:1c:32:4e:
10:d8:e3:a8:c1:0b:53:40:12:26:4e:e3:88:c0:71:
75:44:36:93:b0:ae:3d:c5:76:5f:b6:52:bc:bf:dd:
10:c8:50:a1:36:30:8c:fa:dc:bb:31:95:e5:b3:1e:
50:27:3c:61:b3:b2:3d:06:f3:3a:90:0d:93:51:da:
d9:24:c7:2e:a1:dd:ef:f2:77:f8:18:30:66:9b:d5:
7f:ba:97:9e:2e:74:85:dd:51:0c:b4:75:ec:e4:0c:
15:55:3d:49:83:b4:e9:e8:85:2f:aa:52:3e:16:ad:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:61:7C:4F:B5:66:B3:13:91:BD:0F:AC:B5:CD:3B:71:22:03:51
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:93:34:e7:3a:f8:d8:a8:38:72:a9:27:cb:6f:8b:95:98:
af:d2:47:00:4f:2b:70:fd:72:4b:7e:1f:32:f0:ba:aa:7e:4d:
ba:85:73:44:f6:f5:40:60:f4:24:9f:62:b9:fc:ac:5a:26:a0:
cd:79:4a:3a:09:44:5d:25:07:d1:26:ff:a7:d3:2e:e0:25:2a:
91:b0:2b:5f:c1:67:a9:4c:7b:2a:ea:e6:76:62:2c:40:13:b8:
91:1d:5a:31:8d:ca:f2:1a:b6:5c:99:25:bb:d6:17:c2:c7:4c:
ee:95:fb:91:ed:cf:dd:9a:93:0d:eb:1a:24:2c:88:53:38:e0:
10:f6:16:85:90:cb:bb:56:a1:b8:b2:b6:b9:e5:e0:be:e8:82:
63:1b:6c:b5:19:30:43:06:7d:e6:07:52:4a:e5:04:bc:d0:f0:
1f:7d:e9:f2:45:be:94:19:93:a7:64:5e:44:32:7a:89:48:a9:
86:e5:7f:f9:45:fa:96:c2:7f:93:56:64:81:eb:46:e0:f5:4c:
f5:5a:52:9a:63:5a:1e:fb:b9:a5:66:b2:24:89:19:ad:4c:ae:
1e:1d:9c:39:8a:eb:d3:56:dc:12:c1:8b:ca:e5:58:47:f5:ed:
8b:02:d5:f1:b1:df:05:62:b3:e4:25:f7:78:32:56:0a:77:12:
1b:27:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:45 2026 by rpki-client