Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: nL00e7d3HeIPaRLHT5vW3pj73GWf9QUZqjXv78L1gBQ=
Subject key identifier: A9:AB:5C:97:AB:A9:60:FF:3A:7D:6C:B9:D4:BE:64:CE:C6:D7:B7:5B
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019D39E5442A3700525A42A21948F782C90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0E63
Signing time: Sun 29 Mar 2026 14:00:19 +0000
Manifest this update: Sun 29 Mar 2026 14:00:19 +0000
Manifest next update: Mon 30 Mar 2026 14:00:19 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: WnHUn1vzc4CfB5Yp8ch3NVfa1OMjvGrQQOFA5Rte7/c=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:44:2a:37:00:52:5a:42:a2:19:48:f7:82:c9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 29 14:00:19 2026 GMT
Not After : Mar 30 14:00:19 2026 GMT
Subject: CN=a9ab5c97aba960ff3a7d6cb9d4be64cec6d7b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:a3:79:6d:14:33:c8:20:83:3e:03:ed:74:
55:76:25:72:d6:e3:25:48:8e:13:a8:d5:e7:76:7c:
a6:49:ce:b3:de:a7:72:d8:4d:13:6f:24:54:c8:98:
da:c8:60:c2:97:42:2a:b4:86:67:66:fe:0e:82:98:
df:8f:f9:33:34:4d:dd:09:49:71:f2:72:37:6d:bf:
2a:9c:4f:a4:f9:2d:3a:f9:8a:fc:10:cf:61:69:97:
33:4a:34:b3:49:60:76:7a:c9:ad:6d:c9:87:a2:43:
37:13:76:bf:23:cb:61:b6:41:16:2c:39:cd:c5:4a:
6a:07:18:06:65:8c:b2:0f:b3:45:c0:63:26:07:67:
77:65:d2:2a:3b:de:af:e6:8a:74:d8:42:5e:61:ed:
09:0f:6d:df:60:39:fc:f8:8f:c7:16:9c:9a:11:0c:
44:83:c4:5b:c4:5a:43:c9:70:f3:6e:d4:ce:38:86:
79:7c:c4:92:95:4d:0a:17:4b:86:d3:f5:0d:cd:9c:
e1:da:e0:f9:0f:7f:33:fb:40:5f:ed:13:34:2a:a4:
1e:63:18:f9:36:a0:4f:4d:32:26:87:0c:97:15:b1:
b8:9f:4e:cd:71:e3:ae:95:83:62:5c:ed:0e:9f:b1:
23:2c:1c:53:89:17:80:41:50:65:0a:bb:0f:1e:7c:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:5C:97:AB:A9:60:FF:3A:7D:6C:B9:D4:BE:64:CE:C6:D7:B7:5B
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ca:41:39:35:39:3c:20:a5:94:64:e7:0f:3c:f6:2c:db:43:
23:7a:c3:c8:44:6d:21:41:7b:d5:9d:0c:f1:49:9f:c0:26:9f:
d0:04:7a:3f:42:57:af:51:1e:3d:c8:31:22:47:43:f2:62:66:
86:6d:7d:e4:63:18:8c:a1:24:75:6b:03:31:0a:32:46:cf:27:
48:55:0b:9a:36:5b:03:4f:64:24:c2:8d:e6:8e:d7:68:ed:01:
cf:3a:be:7d:17:35:c7:4f:ad:12:47:10:75:69:e2:cf:be:21:
ab:75:1e:62:ab:cb:a8:5f:dc:bf:66:f8:ae:63:48:ad:e3:4a:
e8:eb:aa:e4:f1:3f:ff:fa:5b:14:52:91:b5:23:a0:0f:b9:88:
25:d8:02:61:59:1d:53:c7:ff:d2:e2:df:f0:b3:b7:30:49:5d:
5e:38:1c:2e:8e:b4:d8:f2:f9:74:07:3b:18:cf:ce:db:17:d7:
05:a7:61:82:df:5b:ac:ca:47:76:90:36:ec:87:fa:20:89:1b:
a9:3d:57:e1:23:0d:e7:e9:be:bc:d6:dd:85:f6:46:d5:bb:55:
e2:23:62:0c:31:67:77:c2:dd:7f:de:3a:03:db:0b:f1:f4:5a:
70:80:50:93:3f:73:5e:58:b2:f7:01:77:39:b6:81:7b:98:d1:
11:cb:9b:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UQqNwBSWkKiGUj3gskLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi
MWRkNDYwHhcNMjYwMzI5MTQwMDE5WhcNMjYwMzMwMTQwMDE5WjAzMTEwLwYDVQQD
EyhhOWFiNWM5N2FiYTk2MGZmM2E3ZDZjYjlkNGJlNjRjZWM2ZDdiNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVejeW0UM8gggz4D7XRVdiVy1uMl
SI4TqNXndnymSc6z3qdy2E0TbyRUyJjayGDCl0IqtIZnZv4Ogpjfj/kzNE3dCUlx
8nI3bb8qnE+k+S06+Yr8EM9haZczSjSzSWB2esmtbcmHokM3E3a/I8thtkEWLDnN
xUpqBxgGZYyyD7NFwGMmB2d3ZdIqO96v5op02EJeYe0JD23fYDn8+I/HFpyaEQxE
g8RbxFpDyXDzbtTOOIZ5fMSSlU0KF0uG0/UNzZzh2uD5D38z+0Bf7RM0KqQeYxj5
NqBPTTImhwyXFbG4n07NceOulYNiXO0On7EjLBxTiReAQVBlCrsPHnyyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmrXJerqWD/On1sudS+ZM7G17dbMB8GA1UdIwQY
MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt
MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj
LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8pBOTU5
PCCllGTnDzz2LNtDI3rDyERtIUF71Z0M8UmfwCaf0AR6P0JXr1EePcgxIkdD8mJm
hm195GMYjKEkdWsDMQoyRs8nSFULmjZbA09kJMKN5o7XaO0Bzzq+fRc1x0+tEkcQ
dWniz74hq3UeYqvLqF/cv2b4rmNIreNK6Ouq5PE///pbFFKRtSOgD7mIJdgCYVkd
U8f/0uLf8LO3MEldXjgcLo602PL5dAc7GM/O2xfXBadhgt9brMpHdpA27If6IIkb
qT1X4SMN5+m+vNbdhfZG1btV4iNiDDFnd8Ldf946A9sL8fRacIBQkz9zXliy9wF3
ObaBe5jREcubyw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:43 2026 by rpki-client