Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: /3LSF/n0x9XfLyXdNNjZeED63DtYP9s7fyKJQgwolj4=
Subject key identifier: 20:FA:B4:C3:B2:39:CA:48:A0:56:4A:43:F5:E7:D6:9B:53:27:57:6D
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019DB321D4C057F06FCA13EFF8046F62BF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1690
Signing time: Wed 22 Apr 2026 03:00:31 +0000
Manifest this update: Wed 22 Apr 2026 03:00:31 +0000
Manifest next update: Thu 23 Apr 2026 03:00:31 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: c1/ajLnW9N+khhs08pgYqG1yqKafksGnArz80fleYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:21:d4:c0:57:f0:6f:ca:13:ef:f8:04:6f:62:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Apr 22 03:00:31 2026 GMT
Not After : Apr 23 03:00:31 2026 GMT
Subject: CN=20fab4c3b239ca48a0564a43f5e7d69b5327576d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:86:e9:a4:92:ef:8c:6f:47:40:ce:7a:ea:
0b:d2:ae:e2:31:3c:b8:50:2f:5f:92:6f:75:46:3d:
f4:58:9f:79:cf:30:4d:ba:9f:90:04:f7:01:0e:39:
41:fc:02:42:6e:96:5b:2b:a9:5c:57:a5:4f:0e:cf:
b3:06:be:14:a5:c6:89:45:4e:a6:da:0b:23:71:8a:
de:67:1e:a9:95:66:6c:e6:69:de:ee:2e:45:00:d9:
b2:2b:66:5f:d2:ca:c9:10:d7:e3:0a:5c:6a:02:9f:
b6:2b:09:8b:32:75:14:a9:b6:f9:17:82:28:7c:3f:
c7:63:07:23:6a:d9:4f:d6:0f:74:38:31:a9:ba:dd:
5c:b3:d3:e9:d4:0f:30:17:b7:12:d7:07:1d:52:b1:
45:e4:3a:c5:cb:24:3a:9d:d3:8b:cf:26:d6:b1:eb:
47:b4:fc:f3:2f:74:74:84:7d:34:6f:83:17:bb:49:
e8:5c:2e:52:a2:cb:9c:60:69:39:bc:68:52:19:95:
0b:6b:7b:ad:e6:e3:ea:e7:c7:25:d2:8b:b3:9c:9c:
51:bf:43:3a:9a:87:40:cb:25:1a:b3:30:9d:96:a4:
b4:94:d5:27:01:24:a7:7a:2e:c5:9d:de:67:cd:c7:
e3:e3:3f:d4:11:c4:18:22:8a:8b:df:f8:bd:ac:57:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:B4:C3:B2:39:CA:48:A0:56:4A:43:F5:E7:D6:9B:53:27:57:6D
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:95:46:51:ba:02:90:e8:ec:77:97:be:ca:4a:3d:04:f0:0f:
1e:b7:bc:d4:fe:fd:1b:63:b9:b5:b1:8a:d8:21:7a:c5:da:54:
fb:33:5d:be:88:de:47:28:78:6b:9a:1c:a7:83:7f:8e:2b:3e:
af:f7:74:12:0d:46:b9:7e:97:fb:4d:45:d5:ca:e7:ce:4c:9b:
9d:5b:3c:48:03:d5:98:4f:82:fc:0d:a0:ea:ee:df:6b:74:2c:
20:7b:1a:53:fc:c6:0f:a5:37:08:fd:54:e5:10:df:16:db:11:
80:27:64:97:cb:b1:ad:86:55:bd:38:a2:24:9e:21:46:9f:63:
09:cd:30:a9:d4:89:ec:d7:db:1c:6f:2a:60:c9:09:a8:f5:b6:
72:60:0c:7c:5f:1e:6e:d4:28:28:4d:0c:61:fc:a1:0d:7f:3e:
97:67:a9:ef:6d:9c:36:bf:5f:b2:c1:0e:b7:e1:36:ac:6f:2b:
82:03:73:1b:9b:87:c6:47:6d:22:7d:1f:ce:cd:9b:93:0c:48:
75:84:e3:01:40:9a:36:f7:17:0b:9c:28:d4:ce:9e:08:fb:ae:
22:7c:6b:fe:7a:36:bb:2d:18:3f:54:66:0e:2f:01:4c:fa:e7:
6d:26:d0:61:78:85:b6:65:f3:0c:f3:bc:22:b6:49:1b:c4:16:
16:15:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:40:03 2026 by rpki-client