Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 3oJu2xWCTy9chN6zDjn7NHEJsYbLudiiX2UF6atuTAg=
Subject key identifier: 97:15:0B:07:55:9F:ED:DD:9C:3A:76:0C:68:EB:46:FF:A8:4E:1B:AD
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019F19E8616F4B2651277EC28DAA1ED9F518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 19:01:27 +0000
Manifest this update: Tue 30 Jun 2026 19:01:27 +0000
Manifest next update: Wed 01 Jul 2026 19:01:27 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: MWqSZRsFNZ1HsI6h2vGzJcQ0+KZoOJj+guEaDPAWySs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:61:6f:4b:26:51:27:7e:c2:8d:aa:1e:d9:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jun 30 19:01:27 2026 GMT
Not After : Jul 1 19:01:27 2026 GMT
Subject: CN=97150b07559feddd9c3a760c68eb46ffa84e1bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:76:7c:46:0d:7b:17:9c:ee:87:b2:79:77:
44:40:88:1a:27:bf:d1:16:ab:ce:f8:ac:1b:f9:59:
e5:67:f7:65:02:8e:b4:2e:b5:35:ce:2e:dc:8b:51:
09:3b:87:74:1f:e8:56:3a:24:8a:dd:d8:30:6a:13:
58:0a:4b:20:65:c8:35:2e:10:45:ce:ab:b4:25:d4:
c6:ea:77:b5:84:fc:4a:2d:21:33:48:2f:21:95:0f:
f1:f6:82:2d:6a:f1:9f:75:38:49:51:b1:01:c3:42:
43:25:7b:1b:b0:6c:0c:71:97:15:83:22:26:0d:d4:
51:2b:0f:d7:64:a4:42:11:02:85:39:1f:7d:98:97:
6f:23:da:cf:f4:d3:8e:44:2a:cc:8c:d6:79:08:d7:
82:b0:98:e0:12:8a:80:3a:ee:7c:04:0b:f0:ec:83:
7b:1d:5c:27:a0:36:2b:8a:57:78:39:4e:0c:f6:d5:
66:9e:c6:51:43:68:bd:95:78:df:b1:98:66:95:1f:
65:0e:7a:aa:e8:61:2d:95:20:94:cc:f7:2a:75:75:
bd:be:c0:4a:85:34:b0:d3:9c:9a:d7:f1:34:fd:32:
e4:0c:3f:aa:14:90:cd:f6:9e:14:b2:85:5d:a8:1a:
1e:2e:eb:97:0d:83:21:4a:7b:8d:ba:62:fd:c0:33:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:0B:07:55:9F:ED:DD:9C:3A:76:0C:68:EB:46:FF:A8:4E:1B:AD
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9e:7f:07:1a:92:32:ab:27:9b:e2:35:ae:d0:28:6a:0f:9b:
ca:f7:9e:32:00:cf:46:cb:6a:20:08:63:e1:8b:36:ff:24:ce:
9f:40:5a:4a:21:a1:a9:ad:30:ec:1c:45:52:9a:a1:fa:ec:8f:
22:48:98:c3:26:3b:fc:3e:82:21:42:2e:7f:a2:a9:f6:ee:42:
95:cb:30:5d:bc:89:7f:de:44:44:7b:43:43:8d:7c:5d:05:3f:
d8:65:42:8e:cb:77:49:0d:03:c5:98:81:87:b5:bf:0e:84:72:
b2:4f:c3:c8:38:85:72:4a:a9:91:38:b0:c4:e3:dc:35:95:2c:
73:e8:f2:ee:80:db:54:c2:40:de:5a:cb:57:e3:9b:55:1b:4e:
52:c6:48:fa:cc:82:0b:fa:e8:6d:34:1e:cf:70:bd:71:5e:f7:
9f:43:5d:61:52:60:01:38:a4:93:9c:66:60:c3:cb:a5:17:6f:
49:f8:2b:73:09:17:fb:1c:23:26:20:26:49:df:80:c8:dd:b4:
04:a1:51:48:39:ae:fc:ba:ad:37:d6:1b:4f:8e:3f:59:74:6f:
d5:43:a6:07:3e:87:b9:0a:58:bd:b8:69:e8:cb:4f:d0:89:35:
b9:35:11:56:4f:e7:e3:50:c2:ed:1a:81:9b:92:64:75:ce:61:
eb:a3:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:41 2026 by rpki-client