Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: p2QH8gWIc2KbDmU4EfjN1zO97++T+27QNAlvVBpf4vM=
Subject key identifier: 1F:F8:76:72:8C:20:72:D8:07:24:BB:B1:13:3F:5B:95:E6:C9:52:D3
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019D371BD584FC27C5DF66F04689ACF34587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:01:04 +0000
Manifest this update: Sun 29 Mar 2026 01:01:04 +0000
Manifest next update: Mon 30 Mar 2026 01:01:04 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: 8XPC0Sk7y9YOoPmUI5d07zYkS8jkkFa80dJCFAWLijE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d5:84:fc:27:c5:df:66:f0:46:89:ac:f3:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Mar 29 01:01:04 2026 GMT
Not After : Mar 30 01:01:04 2026 GMT
Subject: CN=1ff876728c2072d80724bbb1133f5b95e6c952d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:ec:2e:87:33:8d:0b:94:ac:8e:8d:66:9e:
5a:d7:bb:83:b4:49:c9:a5:9f:63:3c:fe:80:d6:bd:
c0:3c:b6:2d:73:ec:cb:de:c3:cf:1d:75:99:65:28:
35:d6:6d:f3:20:39:6b:fd:2c:3c:a8:32:f7:cd:9a:
84:c8:72:c1:c1:1a:7f:bf:07:1d:fe:33:d5:80:39:
d7:2c:2e:54:af:ae:bd:c4:59:76:60:71:3f:79:a8:
57:cb:9b:49:1a:30:ed:6b:f1:6c:69:16:34:fb:49:
a2:46:d5:b4:8b:97:f8:38:67:66:50:66:68:5b:30:
b1:9d:db:a1:a5:29:bc:43:fd:84:ed:cf:1b:dd:e7:
db:47:72:49:e5:b0:e5:12:a1:9a:8c:03:8d:19:59:
03:c8:d4:41:bd:8e:66:d2:93:cc:8c:81:e7:fc:29:
27:4e:30:26:48:f5:8f:84:cd:8d:de:29:be:91:20:
86:6d:1d:65:b6:a3:b9:1b:2f:ba:b8:9f:5d:d1:cb:
ca:92:bd:12:53:4c:ae:25:04:ce:ab:7b:ff:fd:1c:
85:d0:3d:37:79:79:b7:06:ae:5d:f3:24:d5:64:da:
21:04:a4:55:d0:c3:58:3e:0a:d7:52:2e:15:9e:4a:
36:99:57:3a:e1:75:e8:f0:d1:23:5e:4e:ce:8b:35:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:76:72:8C:20:72:D8:07:24:BB:B1:13:3F:5B:95:E6:C9:52:D3
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:aa:5f:89:f1:0e:a3:73:d4:9f:e3:35:cd:ad:63:cf:73:
3b:47:a2:31:6a:c1:c4:29:8f:36:f6:15:3f:4e:ce:2c:c2:33:
da:46:01:06:83:96:14:2d:9e:dd:3e:6f:d0:bf:8e:84:8f:e5:
70:5d:5f:06:57:23:79:1e:26:de:20:e0:3b:5f:f3:b7:30:80:
2f:26:f1:41:e2:8d:50:0a:20:3c:4a:fa:f4:f6:66:b8:cb:16:
e0:40:6a:24:8e:b0:15:4b:a9:43:5d:c1:05:06:4b:5a:e0:c8:
12:48:77:fb:82:55:92:0f:c4:f7:aa:f2:c8:8c:68:28:be:ec:
a9:30:38:ee:c7:b3:b2:f8:f3:96:2f:48:4b:b2:8e:54:9f:47:
8a:6c:de:62:44:05:cb:55:47:78:be:39:d3:2a:b7:2e:28:92:
d2:2a:da:6a:5e:6f:02:7b:b5:e8:57:85:02:b4:a0:5a:78:4e:
ca:f7:24:23:91:79:b3:77:53:12:8d:81:78:25:0a:51:08:29:
2e:24:d9:c8:d3:df:16:55:ee:6d:83:dc:c1:db:58:ff:9b:f7:
14:30:d9:b6:12:90:c0:a1:42:e2:20:08:a2:bc:1b:c9:64:1b:
82:dc:45:5c:82:fd:7c:a3:bc:18:f7:7b:dd:35:26:56:58:ca:
0a:64:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client