Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: L0OfsXE60mUXy37nRNDFlso02V8KJ3kKQ6letkytRbk=
Subject key identifier: 5E:BC:43:03:BA:2E:2A:45:56:A3:35:10:C0:73:3D:7E:AB:57:3C:21
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019E9CCE49E1C83372D1302736D76FF3F0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1709
Signing time: Sat 06 Jun 2026 12:00:25 +0000
Manifest this update: Sat 06 Jun 2026 12:00:25 +0000
Manifest next update: Sun 07 Jun 2026 12:00:25 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: q4bTp0gkgAJKzaDOctYM8dQPLim9zZDAE2IxyJYXI4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:49:e1:c8:33:72:d1:30:27:36:d7:6f:f3:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jun 6 12:00:25 2026 GMT
Not After : Jun 7 12:00:25 2026 GMT
Subject: CN=5ebc4303ba2e2a4556a33510c0733d7eab573c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:2a:11:90:e5:99:6f:1c:66:29:0c:42:9f:
16:c3:02:70:df:2a:2f:f0:9a:dd:05:76:ab:5b:3b:
00:56:63:bf:85:3c:ab:ac:3c:d7:47:10:d7:cb:46:
56:af:c4:f9:cf:0a:f0:78:c4:d2:0b:f6:b3:06:d8:
ee:b0:be:40:7c:a3:e9:3d:d3:54:cf:47:8d:d7:8f:
c5:c8:9f:dd:44:22:6f:d1:8d:95:4a:99:ba:72:7c:
56:57:5c:a0:6c:05:18:ba:63:7b:db:b7:f7:89:46:
12:8e:c2:05:e6:ca:8e:e7:43:13:73:c2:29:34:ac:
c3:be:78:75:0a:bb:bb:2b:0e:49:c6:5f:7e:81:c6:
89:e5:07:0a:dd:a8:8b:4e:f4:de:b7:19:b4:f5:68:
07:b8:59:02:ed:12:04:67:7d:a5:a5:e7:51:a6:88:
70:4a:df:5b:da:da:39:88:72:2d:d8:2d:22:d0:79:
47:f7:08:3c:4b:5a:29:f0:4e:84:34:2b:ca:2a:1d:
6c:4c:2a:27:cc:3c:22:a4:d3:54:ee:7d:fd:08:c9:
68:09:64:e7:d0:2c:02:4f:24:60:a7:b0:c9:53:ec:
d8:59:19:83:a4:d7:eb:45:0b:d4:42:45:85:4a:c3:
4f:ba:c5:fa:a3:ad:33:5e:3f:04:2c:65:9d:2c:e6:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:43:03:BA:2E:2A:45:56:A3:35:10:C0:73:3D:7E:AB:57:3C:21
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:67:35:89:3d:6a:a5:b6:b6:ff:cd:1a:f2:3a:f0:82:6c:
4a:4b:c8:bf:2b:9d:e9:1a:cc:c7:ec:93:17:29:2f:8e:83:87:
08:9a:52:29:c1:f2:1a:fa:4e:3d:5b:a4:d6:1d:18:21:29:8e:
a6:81:c9:fb:1b:40:19:d6:d9:27:1f:fa:53:18:f7:31:e7:56:
58:95:18:ad:fc:7d:6e:c2:1c:e0:fa:05:bc:3b:0f:24:0f:18:
8f:25:04:9e:f3:e8:57:87:fd:0d:6d:49:5f:3a:b8:32:5b:fb:
a8:6b:59:67:0f:99:0c:52:0f:16:39:50:27:a8:15:cf:05:29:
62:68:aa:c0:f3:26:b8:77:60:0c:ca:f6:bc:1c:c4:e2:6f:ec:
c2:7c:e7:36:83:fd:b8:66:79:24:ec:56:11:cb:e3:54:91:2f:
b9:dc:fc:e8:a8:5c:93:59:67:36:11:5e:ab:35:9c:97:b2:25:
d1:e1:af:9d:14:1a:ce:a1:7b:66:0c:1f:ec:3d:98:6d:d6:a5:
02:1a:05:59:82:72:8b:a8:b3:54:4b:f5:7c:dc:d0:75:53:90:
e0:e3:76:e1:00:f0:5d:af:e6:ce:59:63:b0:67:1d:53:9a:7a:
91:19:40:e9:13:35:97:c5:cd:d0:82:61:1c:72:9d:e0:28:83:
3b:bc:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:05:47 2026 by rpki-client