Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: wIyULMrDyInxwElY+tXF9bCz3qZg0PsKMz4+uevPFvI=
Subject key identifier: F8:0F:88:E1:50:E9:5F:3A:7A:B5:59:2A:BA:FE:2C:AB:BE:EA:6D:66
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019E2B4CB363BB347EFBB5D275D36A18DBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0EE0
Signing time: Fri 15 May 2026 11:01:47 +0000
Manifest this update: Fri 15 May 2026 11:01:47 +0000
Manifest next update: Sat 16 May 2026 11:01:47 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: M3n+izo1y27iUR8RbdfMfSix+ZTZnwLe6RmuReMy3W4=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:b3:63:bb:34:7e:fb:b5:d2:75:d3:6a:18:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: May 15 11:01:47 2026 GMT
Not After : May 16 11:01:47 2026 GMT
Subject: CN=f80f88e150e95f3a7ab5592abafe2cabbeea6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:20:a0:c0:87:3f:b8:89:cb:8f:15:72:b1:
28:a3:7c:a4:6f:1d:cd:b0:30:03:1e:bc:d4:d9:57:
ba:70:f1:93:61:c6:dc:5e:1f:df:a0:40:4d:b1:07:
f5:89:55:3a:aa:6d:11:bb:3d:fe:59:00:59:b6:9e:
ac:62:d3:5a:8e:d4:ca:9c:c2:84:2b:61:6c:a6:f5:
46:e2:d0:55:cd:73:12:0d:d9:1f:3d:fc:d3:97:d8:
fe:4e:ac:7f:c2:0f:a6:a5:2b:1a:54:0c:63:86:8d:
dc:49:4e:e1:76:d3:28:d7:e3:5b:32:0b:c6:36:d8:
23:cb:58:92:a2:7b:35:72:e4:fe:df:9b:67:da:16:
57:5d:6d:9a:9f:01:d8:99:49:af:8b:4d:70:c3:91:
e1:fe:e8:e2:b2:b9:32:92:ba:b7:e3:99:25:1b:ab:
79:57:08:cb:4b:34:3d:d4:28:a7:4d:8c:fc:cc:0b:
0b:37:e6:c7:bf:01:cf:a8:3b:f8:07:0a:88:ba:61:
84:cd:da:f9:7e:75:4f:f2:a9:e9:ad:d3:e4:07:fa:
ea:12:45:7b:02:a0:a0:2f:42:65:35:82:41:fe:06:
3c:57:33:80:28:d6:1b:2f:12:10:ab:07:4f:a9:68:
09:8c:c4:80:2c:bb:fd:fa:ce:b9:6e:0b:d2:5c:f3:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:88:E1:50:E9:5F:3A:7A:B5:59:2A:BA:FE:2C:AB:BE:EA:6D:66
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:f9:46:47:4a:08:0a:a1:8e:58:80:9d:cf:19:36:0e:dd:
18:fb:8d:c9:16:fd:67:28:e5:1a:53:2f:3b:8a:2d:c8:71:90:
9a:9e:8b:a7:fe:e4:28:44:7d:28:c0:bb:4a:09:c3:ae:e8:4e:
a3:00:2c:31:5d:9b:c9:a8:8f:3d:55:cc:75:b1:47:cf:35:57:
84:94:0a:37:bd:7f:19:70:03:bb:ef:18:14:49:24:31:16:71:
6a:26:8a:62:3d:9c:fe:ba:1e:07:77:48:59:e6:99:e0:13:d9:
d4:0f:c0:58:fb:a2:88:4f:89:86:cd:7f:dd:f3:2e:18:bb:fc:
fe:fb:4d:27:dd:01:15:73:4e:ba:27:c2:22:4c:b4:45:db:2a:
0a:6e:69:83:3f:72:55:8c:84:df:77:3f:36:28:10:68:c2:2f:
23:43:94:69:ee:10:8b:18:c2:5b:a2:c6:ec:61:97:d4:54:56:
53:da:ce:69:0f:ef:73:24:51:7a:b3:1e:43:72:e9:a5:c5:0e:
68:80:52:ec:a1:c6:63:10:2e:91:45:78:39:cf:5d:ac:e8:60:
e3:b9:2b:15:f6:c2:90:f6:1d:79:60:4d:98:7e:0e:c0:ef:29:
65:83:ef:a7:64:8d:3a:dc:dd:eb:22:dc:0a:16:83:86:17:6f:
0f:26:60:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rTLNjuzR++7XSddNqGNv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi
MWRkNDYwHhcNMjYwNTE1MTEwMTQ3WhcNMjYwNTE2MTEwMTQ3WjAzMTEwLwYDVQQD
EyhmODBmODhlMTUwZTk1ZjNhN2FiNTU5MmFiYWZlMmNhYmJlZWE2ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mAgoMCHP7iJy48VcrEoo3ykbx3N
sDADHrzU2Ve6cPGTYcbcXh/foEBNsQf1iVU6qm0Ruz3+WQBZtp6sYtNajtTKnMKE
K2FspvVG4tBVzXMSDdkfPfzTl9j+Tqx/wg+mpSsaVAxjho3cSU7hdtMo1+NbMgvG
Ntgjy1iSons1cuT+35tn2hZXXW2anwHYmUmvi01ww5Hh/ujisrkykrq345klG6t5
VwjLSzQ91CinTYz8zAsLN+bHvwHPqDv4BwqIumGEzdr5fnVP8qnprdPkB/rqEkV7
AqCgL0JlNYJB/gY8VzOAKNYbLxIQqwdPqWgJjMSALLv9+s65bgvSXPO2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgPiOFQ6V86erVZKrr+LKu+6m1mMB8GA1UdIwQY
MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt
MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj
LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuj5RkdK
CAqhjliAnc8ZNg7dGPuNyRb9ZyjlGlMvO4otyHGQmp6Lp/7kKER9KMC7SgnDruhO
owAsMV2byaiPPVXMdbFHzzVXhJQKN71/GXADu+8YFEkkMRZxaiaKYj2c/roeB3dI
WeaZ4BPZ1A/AWPuiiE+Jhs1/3fMuGLv8/vtNJ90BFXNOuifCIky0RdsqCm5pgz9y
VYyE33c/NigQaMIvI0OUae4QixjCW6LG7GGX1FRWU9rOaQ/vcyRRerMeQ3LppcUO
aIBS7KHGYxAukUV4Oc9drOhg47krFfbCkPYdeWBNmH4OwO8pZYPvp2SNOtzd6yLc
ChaDhhdvDyZgTQ==
-----END CERTIFICATE-----
Generated at Fri May 15 17:53:22 2026 by rpki-client