Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: yRx2tG+RgVFcW3KTAkk8308l+5A0vTxKzvXSX4HPAZk=
Subject key identifier: C3:00:E0:A0:DB:5E:CF:6E:5E:F6:6E:E6:AC:7A:C5:ED:FF:AA:FD:36
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019F2848BABC0964BC6487AB1194E33A1F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0F63
Signing time: Fri 03 Jul 2026 14:01:22 +0000
Manifest this update: Fri 03 Jul 2026 14:01:22 +0000
Manifest next update: Sat 04 Jul 2026 14:01:22 +0000
Files and hashes: 1: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: Eb9sgyDx9T75I5g9fhtEee1YkE7g+AwWOabZ2HHEaPM=)
2: fcvKERERQZNn6V8xkWFBGNVtQEI.roa (hash: ZYmpRwAPIJhFA25uVJy0Dchmbob90u8kUS0f+gTnbP0=)
3: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (hash: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:48:ba:bc:09:64:bc:64:87:ab:11:94:e3:3a:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jul 3 14:01:22 2026 GMT
Not After : Jul 4 14:01:22 2026 GMT
Subject: CN=c300e0a0db5ecf6e5ef66ee6ac7ac5edffaafd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:ce:4b:35:13:b0:7a:d3:b0:b3:dc:93:34:
da:13:76:d0:bd:e5:6b:8c:81:b5:70:b8:4c:79:df:
c7:42:86:e2:d3:c0:0a:c8:0a:e9:dd:61:c6:23:2b:
d9:b2:37:4d:ae:c7:5f:5a:7c:3c:64:17:a7:df:01:
34:ab:4b:29:ec:eb:4d:07:91:8b:ba:94:78:4d:5e:
31:52:e4:d5:6f:86:73:30:da:9f:62:bc:6c:d1:33:
59:48:f7:9a:07:50:0f:ea:57:64:60:29:df:bb:c0:
0b:c0:70:bf:f7:47:81:3d:25:e1:b3:76:12:b6:db:
fe:24:bf:31:1c:70:92:be:04:47:fa:53:f2:ad:de:
dc:5a:6f:1a:40:7f:dc:3d:87:ce:15:a1:91:4c:f1:
2d:6e:65:dc:57:db:60:f0:16:fe:bf:05:58:0c:f1:
c7:70:0b:28:f2:8b:c3:2d:22:0f:88:d4:69:02:08:
32:6b:4e:3e:1f:6a:fd:a6:23:a5:db:5b:53:4e:d2:
8b:a0:9d:55:08:2e:d7:ee:47:c1:bf:1a:72:85:9f:
63:b6:4f:e1:47:fc:3e:7a:6b:fc:b1:de:37:78:8c:
69:19:8b:df:6f:c7:d9:94:be:2c:ea:cf:66:6a:4d:
af:b8:b7:9f:32:23:cc:4e:83:79:3e:b2:2a:a7:02:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:E0:A0:DB:5E:CF:6E:5E:F6:6E:E6:AC:7A:C5:ED:FF:AA:FD:36
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:18:67:80:8a:0a:4e:b6:e3:24:81:3b:e6:b9:ee:c4:88:2c:
8b:2a:7c:66:cf:3a:4c:8e:3f:0b:c7:8e:1a:00:70:b0:93:dd:
98:92:c9:9b:bb:fa:5f:54:19:fe:11:54:3b:bf:57:c4:81:6d:
68:77:e4:95:13:d2:3f:84:16:83:43:09:28:f2:72:ea:a9:26:
d3:ac:ba:54:56:67:6c:ad:bf:96:49:cb:d0:7d:bf:bf:31:3e:
78:8a:ca:4e:75:52:70:74:fe:a7:7e:41:75:0d:e7:1f:dc:40:
95:b4:47:47:da:fb:c7:85:e1:f1:75:c1:a0:8d:dd:d1:c8:a4:
88:19:f7:d7:d6:a2:0a:5c:92:cf:09:54:9f:ae:16:e4:75:83:
8a:69:0e:01:46:01:c5:87:42:8a:bd:1f:ef:8d:ce:72:68:7f:
25:0d:d9:28:3c:7e:4a:78:1e:b1:ca:d7:58:f2:3b:59:94:54:
bf:c0:c5:e6:f6:bf:60:b5:e3:a7:64:75:55:43:1f:ad:46:b9:
2e:8f:3f:f6:68:f5:6f:4f:4e:53:55:7f:9f:f0:43:05:fa:2a:
62:8d:d5:69:3a:6f:98:26:cf:64:35:ee:23:9d:2c:c6:d1:e3:
4d:b0:10:e6:4c:71:e5:cd:de:de:f8:31:89:84:dc:34:c8:a8:
58:45:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:02 2026 by rpki-client