Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: NzCkyOcCZe1HU+IFCNYcvGPbTB+3KyYYXOUO8fxQOzo=
Subject key identifier: 38:F0:23:12:37:CD:C6:D1:6F:52:1F:5C:21:AE:C6:91:6E:1E:A3:AC
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A136A36723D25780531D4ED14E499DB826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 1074
Signing time: Tue 13 Oct 2026 19:00:40 +0000
Manifest this update: Tue 13 Oct 2026 19:00:40 +0000
Manifest next update: Wed 14 Oct 2026 19:00:40 +0000
Files and hashes: 1: Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa (hash: Yf29YV0BbQQtiRrP1gHJzaYdNv3Dn8ojz+UE6LkKdVc=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: DOjS06xHhF8373n/rgJ+Ak5mg6PcZOIYews54L5B46Q=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:67:23:d2:57:80:53:1d:4e:d1:4e:49:9d:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Oct 13 19:00:40 2026 GMT
Not After : Oct 14 19:00:40 2026 GMT
Subject: CN=38f0231237cdc6d16f521f5c21aec6916e1ea3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:be:11:0d:8b:06:7d:54:18:85:c4:db:d2:
6a:f2:91:46:84:45:a5:26:6b:02:d7:17:bb:ef:30:
dc:a2:f8:ab:0f:1f:a8:8d:8d:4b:c8:e3:cd:2f:89:
95:d7:a7:85:ba:9d:36:fb:2e:f7:56:ed:6d:a4:01:
b3:1f:dd:56:df:5b:86:08:1a:01:39:db:4f:79:e7:
a2:74:c5:0d:15:35:5a:22:3d:61:6c:9b:52:db:37:
8b:60:f4:3e:fb:df:47:9e:91:4d:16:7d:03:88:76:
1a:60:ad:e7:5a:54:06:5a:80:6a:dd:3f:4f:a5:07:
2c:c8:7f:11:8c:72:9b:95:47:e6:6b:8a:27:41:69:
24:b8:bb:09:ce:88:1d:67:c5:f9:33:5c:8c:19:80:
47:ac:c4:f3:ea:c7:8f:bb:ed:65:61:0f:e9:a5:4e:
7b:49:af:a4:8e:4d:7e:33:7d:bd:97:3b:26:f8:9c:
e5:0a:20:79:19:41:69:65:62:74:7f:26:52:16:32:
8b:54:3e:bc:99:6e:ba:85:4f:9a:22:17:0a:8a:ad:
80:aa:a3:6c:de:52:44:60:cb:b1:2d:ff:56:f3:23:
10:5b:fe:a5:d6:2d:c6:84:9a:e8:50:69:44:d4:7c:
8f:55:b9:cd:95:8f:87:af:d3:bd:20:0c:5f:fb:f0:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:23:12:37:CD:C6:D1:6F:52:1F:5C:21:AE:C6:91:6E:1E:A3:AC
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:e1:41:8a:9e:01:78:1b:a6:39:df:1c:08:9e:f0:3f:93:
a4:74:23:39:83:be:cc:f4:83:ed:b4:99:08:70:20:d1:f7:d3:
19:a0:7a:e5:3d:7f:81:b2:f4:6f:fb:be:3e:c8:b6:11:e1:72:
33:85:bb:0f:04:95:1e:ea:dc:29:ae:70:a5:78:29:bc:47:a1:
44:9b:60:9c:18:c9:d4:5b:9f:97:82:89:d1:b9:e7:e3:9c:b7:
58:9b:1b:99:51:1f:bd:7e:de:e9:84:de:f5:27:a8:3f:cf:cc:
94:80:8a:62:79:30:c2:27:15:cd:93:38:bc:ce:59:13:3d:44:
86:85:be:b5:c4:2f:e2:13:a9:79:ba:b9:57:59:ad:12:2c:f6:
bf:e9:ed:f7:63:59:a8:38:4b:0b:0b:57:33:41:7f:0d:7a:2b:
ae:d5:0e:3f:ff:51:35:fa:c8:df:e8:4d:40:62:5c:c4:3b:2d:
7e:2c:45:cf:c0:02:02:2d:2a:2e:ff:e3:68:de:58:b9:0c:a3:
f7:ca:8c:e8:1e:9e:60:7d:87:64:e6:12:3d:87:7a:bf:4b:d1:
59:fb:8b:2a:bf:bd:b1:34:fb:ab:49:a7:29:93:06:e4:b6:53:
dd:78:6c:34:a3:01:2f:90:7c:4d:8b:0f:11:43:1b:8a:c2:7c:
59:d8:e5:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2o2cj0leAUx1O0U5JnbgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi
MWRkNDYwHhcNMjYxMDEzMTkwMDQwWhcNMjYxMDE0MTkwMDQwWjAzMTEwLwYDVQQD
EygzOGYwMjMxMjM3Y2RjNmQxNmY1MjFmNWMyMWFlYzY5MTZlMWVhM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzu+EQ2LBn1UGIXE29Jq8pFGhEWl
JmsC1xe77zDcovirDx+ojY1LyOPNL4mV16eFup02+y73Vu1tpAGzH91W31uGCBoB
OdtPeeeidMUNFTVaIj1hbJtS2zeLYPQ++99HnpFNFn0DiHYaYK3nWlQGWoBq3T9P
pQcsyH8RjHKblUfma4onQWkkuLsJzogdZ8X5M1yMGYBHrMTz6sePu+1lYQ/ppU57
Sa+kjk1+M329lzsm+JzlCiB5GUFpZWJ0fyZSFjKLVD68mW66hU+aIhcKiq2AqqNs
3lJEYMuxLf9W8yMQW/6l1i3GhJroUGlE1HyPVbnNlY+Hr9O9IAxf+/CY6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjwIxI3zcbRb1IfXCGuxpFuHqOsMB8GA1UdIwQY
MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt
MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj
LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLThQYqe
AXgbpjnfHAie8D+TpHQjOYO+zPSD7bSZCHAg0ffTGaB65T1/gbL0b/u+Psi2EeFy
M4W7DwSVHurcKa5wpXgpvEehRJtgnBjJ1Fufl4KJ0bnn45y3WJsbmVEfvX7e6YTe
9SeoP8/MlICKYnkwwicVzZM4vM5ZEz1EhoW+tcQv4hOpebq5V1mtEiz2v+nt92NZ
qDhLCwtXM0F/DXorrtUOP/9RNfrI3+hNQGJcxDstfixFz8ACAi0qLv/jaN5YuQyj
98qM6B6eYH2HZOYSPYd6v0vRWfuLKr+9sTT7q0mnKZMG5LZT3XhsNKMBL5B8TYsP
EUMbisJ8WdjlNA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:43:45 2026 by rpki-client