Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: EsSmVAydPLKZFpcqe3efH6Sbdp1oUhd4KwsY8+ZFhJw=
Subject key identifier: 32:FC:CD:69:85:23:74:49:93:F5:C3:53:31:BD:E3:6E:D6:12:C7:C7
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01A001A680F7369A846F354D356AD52B3704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:01:24 +0000
Manifest this update: Fri 14 Aug 2026 19:01:24 +0000
Manifest next update: Sat 15 Aug 2026 19:01:24 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: sUBo3W3/W9cbii2vGEp9R6KPOnMaiubxMGIO+Lthh+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:80:f7:36:9a:84:6f:35:4d:35:6a:d5:2b:37:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Aug 14 19:01:24 2026 GMT
Not After : Aug 15 19:01:24 2026 GMT
Subject: CN=32fccd698523744993f5c35331bde36ed612c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:f8:5c:9a:33:97:bd:3a:5b:27:00:59:99:
65:2b:dc:45:a3:a0:90:82:61:48:b9:8e:cd:88:6a:
d8:a1:08:b1:8b:cd:40:48:ce:9c:c0:dc:08:ab:3c:
1a:06:a8:15:03:52:fe:1d:76:03:d8:6b:57:e6:15:
44:33:e4:38:9d:41:ce:41:b9:1d:05:c5:ed:86:12:
ef:7d:38:59:d7:d1:7a:40:88:6c:7e:eb:fa:d8:6b:
d4:8f:e3:f6:72:70:8e:b0:72:e4:74:cb:a6:be:ce:
1f:ff:21:0e:a8:0b:11:12:6a:c6:8e:1c:5b:10:cc:
8e:bb:25:09:fe:2a:d4:28:19:93:6b:75:8b:ac:9b:
3c:cf:89:ce:8a:d4:6b:93:59:55:dc:56:4a:f6:57:
9c:91:65:0c:ba:45:1f:2b:c5:5c:16:e5:97:62:42:
22:ca:e8:47:f5:e1:92:be:1b:b2:c0:21:f2:20:76:
a8:ea:81:b6:37:53:2e:c7:59:eb:d5:d2:45:f4:68:
6a:ef:66:18:a3:f8:3c:9e:ba:fe:2d:7e:ca:4b:64:
ce:86:d0:75:54:4b:95:86:85:1d:41:ba:b8:fa:1d:
29:54:f2:a3:68:2e:9c:14:10:c1:e4:9a:57:38:eb:
96:d5:2b:2f:67:60:da:97:33:6f:61:68:3d:6d:ec:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:CD:69:85:23:74:49:93:F5:C3:53:31:BD:E3:6E:D6:12:C7:C7
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9f:1a:be:3f:79:eb:01:bc:ba:28:6c:55:f2:9d:61:4d:34:
7e:89:60:07:68:f4:91:5c:48:fc:1b:f2:d2:dd:41:3c:6f:41:
aa:db:dd:a2:b5:0d:24:c5:ae:25:cd:26:a2:70:8a:32:4e:2b:
c9:a8:e5:7d:e9:7e:97:c2:5b:d9:5f:ad:91:36:0a:92:34:32:
59:3a:99:ee:66:a5:e5:09:bc:eb:47:47:cb:65:8f:a9:b2:49:
22:c9:3b:35:23:00:54:4b:77:c1:66:d7:01:a5:38:c2:65:fe:
0a:ba:5c:ad:c7:ee:fb:00:54:cd:76:aa:d6:8c:48:1f:50:a4:
1a:48:60:17:b2:f8:8f:f5:14:c5:b9:6b:3a:62:f2:17:12:6d:
4d:55:62:5b:40:bf:33:06:c3:da:16:88:ea:a3:f3:cf:45:aa:
fd:40:11:1e:20:e9:11:bc:40:39:4f:2f:2c:43:06:96:a6:8c:
b9:9a:5b:2f:1f:6a:4c:8a:0e:5f:31:de:02:06:ea:60:3d:28:
f6:22:da:81:7a:94:27:9e:f9:ae:cb:e2:09:ca:9d:c0:f2:3e:
d4:c0:65:7e:b2:5f:46:db:ae:6c:da:a9:54:27:2e:b0:ea:a0:
03:ee:9a:e6:b5:0b:49:e4:c2:73:a3:52:b6:92:3c:98:a8:be:
fe:08:1f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpoD3NpqEbzVNNWrVKzcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx
YjM2MmYwHhcNMjYwODE0MTkwMTI0WhcNMjYwODE1MTkwMTI0WjAzMTEwLwYDVQQD
EygzMmZjY2Q2OTg1MjM3NDQ5OTNmNWMzNTMzMWJkZTM2ZWQ2MTJjN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9j4XJozl706WycAWZllK9xFo6CQ
gmFIuY7NiGrYoQixi81ASM6cwNwIqzwaBqgVA1L+HXYD2GtX5hVEM+Q4nUHOQbkd
BcXthhLvfThZ19F6QIhsfuv62GvUj+P2cnCOsHLkdMumvs4f/yEOqAsREmrGjhxb
EMyOuyUJ/irUKBmTa3WLrJs8z4nOitRrk1lV3FZK9leckWUMukUfK8VcFuWXYkIi
yuhH9eGSvhuywCHyIHao6oG2N1Mux1nr1dJF9Ghq72YYo/g8nrr+LX7KS2TOhtB1
VEuVhoUdQbq4+h0pVPKjaC6cFBDB5JpXOOuW1SsvZ2DalzNvYWg9bewoTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL8zWmFI3RJk/XDUzG9427WEsfHMB8GA1UdIwQY
MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt
NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0
LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh58avj95
6wG8uihsVfKdYU00folgB2j0kVxI/Bvy0t1BPG9BqtvdorUNJMWuJc0monCKMk4r
yajlfel+l8Jb2V+tkTYKkjQyWTqZ7mal5Qm860dHy2WPqbJJIsk7NSMAVEt3wWbX
AaU4wmX+Crpcrcfu+wBUzXaq1oxIH1CkGkhgF7L4j/UUxblrOmLyFxJtTVViW0C/
MwbD2haI6qPzz0Wq/UARHiDpEbxAOU8vLEMGlqaMuZpbLx9qTIoOXzHeAgbqYD0o
9iLagXqUJ575rsviCcqdwPI+1MBlfrJfRtuubNqpVCcusOqgA+6a5rULSeTCc6NS
tpI8mKi+/ggfQg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:38 2026 by rpki-client