Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: oRjBYf2qmjJ9csfAbNjUerSVD60Z9SRmxBviCEiLWJY=
Subject key identifier: A5:4D:1B:14:CE:30:18:35:F3:2C:F0:2B:89:F5:47:8F:8E:48:50:E0
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A02733413440C114F8190B7A2A9F2755FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0FE7
Signing time: Sat 22 Aug 2026 02:01:05 +0000
Manifest this update: Sat 22 Aug 2026 02:01:05 +0000
Manifest next update: Sun 23 Aug 2026 02:01:05 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: crDPbgHdZEh1D6ghuthn0adlEMzJ6tDPvUegIQnxeP0=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:33:41:34:40:c1:14:f8:19:0b:7a:2a:9f:27:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Aug 22 02:01:05 2026 GMT
Not After : Aug 23 02:01:05 2026 GMT
Subject: CN=a54d1b14ce301835f32cf02b89f5478f8e4850e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:23:60:37:0a:c5:36:85:9a:00:00:75:a8:
d3:a1:20:b9:68:73:e1:d6:04:b9:73:f7:67:62:5a:
2a:a0:f4:3f:09:f4:6f:4d:3d:2f:78:66:de:76:93:
92:35:dd:b9:84:b6:0f:83:59:e2:0c:9d:79:68:86:
ab:af:24:20:cf:ab:02:59:98:7b:ca:fc:14:8f:f0:
6c:56:1d:e1:b8:54:68:ee:5b:0e:ab:c8:4d:7e:c5:
7a:1e:0f:ac:e2:cd:6b:7d:f6:80:e2:f0:a7:24:48:
1a:bd:3b:93:71:f7:de:91:d6:35:41:ea:0f:76:d6:
2a:f6:16:25:03:70:f6:45:82:05:b7:de:6f:7e:73:
ad:eb:b3:d1:02:10:d9:f3:33:36:f0:e3:2c:cd:33:
20:d7:81:8a:e2:fb:5c:fb:c2:1e:92:12:97:83:ee:
58:74:09:6c:ac:e3:82:59:df:ef:6d:e4:07:57:20:
39:18:5c:22:31:2c:37:ed:93:6c:9f:16:62:ea:ab:
24:88:09:7d:85:ac:55:f9:ab:36:e4:43:03:79:85:
7c:c8:27:b8:ca:de:9d:52:47:fd:62:26:6d:b8:e5:
f9:e4:2f:b7:66:0f:4c:83:c1:78:e3:43:24:af:cb:
5a:2a:7b:4e:56:4f:6c:a2:1e:3c:b4:ea:27:1e:a6:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4D:1B:14:CE:30:18:35:F3:2C:F0:2B:89:F5:47:8F:8E:48:50:E0
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:a8:32:4e:65:e5:92:18:f6:e8:d2:4b:04:c6:b3:6c:a6:
0a:ac:18:3f:ba:c2:7e:b9:fc:05:ea:e2:8f:e8:9c:bf:4c:98:
fb:2f:f6:e5:ec:9b:8e:fd:f6:f7:29:59:26:70:11:a8:1a:c2:
aa:b1:c7:d4:1b:fc:6b:5c:89:b8:6f:0e:88:cb:ac:2f:74:9d:
a6:ee:9e:c8:52:60:1d:7d:e4:dc:25:7c:7a:68:a2:27:ae:5c:
31:1f:28:46:bb:50:11:7f:5e:02:23:81:0b:70:ae:a7:f6:ef:
31:08:0c:aa:51:39:e9:db:06:d9:f8:92:8c:99:4c:52:af:b2:
64:c9:3a:34:10:32:5b:4b:7b:80:f8:f9:62:47:5f:ee:c0:40:
95:b9:18:b1:01:40:72:e8:96:d3:40:0b:e3:5c:72:91:22:2b:
66:be:48:fb:d1:90:ff:e2:67:5f:08:55:9c:eb:c2:22:94:81:
1c:50:43:1c:d6:2c:36:ae:1e:a7:0a:a0:4c:74:43:e5:81:9e:
42:60:f6:b6:c2:20:d0:7e:65:cb:99:ec:e4:8f:ab:8a:47:cb:
5b:70:6f:b7:cf:47:d3:ce:5c:d3:59:48:89:d5:a8:c4:e6:97:
95:46:93:05:63:43:00:5a:fb:d2:ce:34:a2:ba:6c:be:5c:28:
a2:47:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:45:31 2026 by rpki-client