Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: JwFwwyq5eq/FHJJ4EM/+SIXkt+8FpO/1aKmh15dZZLs=
Subject key identifier: 8A:63:97:18:A7:0A:28:CC:2E:55:45:37:F4:46:57:31:83:F2:8E:05
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01A0039473A184E995F622B51A2B7C4B3C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 04:00:55 +0000
Manifest this update: Sat 15 Aug 2026 04:00:55 +0000
Manifest next update: Sun 16 Aug 2026 04:00:55 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: uc+HqEzkU3oPywm6ADzxCQHwOAfteCU+z73+UJkJ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:73:a1:84:e9:95:f6:22:b5:1a:2b:7c:4b:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Aug 15 04:00:55 2026 GMT
Not After : Aug 16 04:00:55 2026 GMT
Subject: CN=8a639718a70a28cc2e554537f446573183f28e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:a7:8e:c8:05:9d:bd:db:0e:19:20:09:74:
3f:c8:3c:d6:ef:cc:e3:88:6a:af:b9:8f:98:72:5a:
45:31:d3:a8:71:9b:bf:d2:88:cf:69:e8:9a:08:24:
a0:1e:df:d1:85:df:b1:d2:97:12:39:40:a7:18:71:
57:3f:60:d7:c4:84:5f:a7:03:01:e3:d8:98:84:3e:
52:73:27:4d:f9:7e:f9:5f:26:ca:d7:30:94:8f:6e:
ed:ac:dc:1a:48:c3:b2:30:09:8c:c4:5a:b6:d0:ef:
2e:b3:cb:c8:0e:59:ec:d7:e4:62:f5:0e:3a:50:42:
cf:7b:79:e5:05:49:11:17:13:3d:04:a2:3f:bf:df:
c0:32:da:be:8d:26:33:c7:68:dd:67:2a:93:f9:0c:
94:8a:2f:dc:d1:37:c0:3e:5e:13:fd:77:28:49:42:
be:09:23:45:39:2a:7d:2e:a9:c3:a1:1b:d3:d2:5f:
a7:98:c7:2f:69:eb:79:f8:84:9b:7d:9e:4a:e6:31:
aa:9d:d5:1d:ac:64:23:47:89:6a:b5:c5:cb:ac:c7:
ed:c1:f4:5f:c9:63:9a:8f:18:4a:49:04:b3:79:cf:
d3:68:bd:96:e4:f9:6e:81:2f:9d:1c:de:e7:e5:23:
32:51:fa:0d:64:2b:84:ad:27:80:8e:54:ca:9c:8f:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:97:18:A7:0A:28:CC:2E:55:45:37:F4:46:57:31:83:F2:8E:05
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:8c:85:ab:e5:dc:86:53:25:99:0c:3b:3b:4a:6f:f0:a2:
2b:19:bb:cb:bb:1d:ce:57:e9:b2:86:7a:c9:98:7e:f0:3c:3d:
df:80:b1:e7:e0:de:80:37:4b:71:d7:a6:71:88:38:e6:fe:05:
ef:6b:a1:10:ea:3b:92:07:9f:27:22:bc:a6:b4:f3:44:7f:d4:
94:a9:63:df:69:02:c5:7f:89:f0:5a:93:0f:8c:f6:c7:25:c4:
7f:9d:dd:8f:e6:98:f6:47:9a:91:64:ba:65:fb:39:01:f7:60:
26:6a:e8:d2:72:28:04:3f:9a:b6:51:71:07:a6:e7:95:f1:6c:
a2:0c:52:ba:22:54:81:a0:1a:d5:70:c4:e2:26:40:0b:2d:0c:
89:07:fe:8c:ca:85:27:bb:b9:89:0e:e6:2d:bb:cc:01:11:e1:
74:48:72:bc:30:55:1f:95:69:d0:7e:2d:9e:58:e0:22:40:30:
1f:c1:05:e8:4a:35:00:9d:24:6f:54:6c:63:ad:f9:21:43:d6:
06:b1:67:e4:b0:5a:9d:ec:c2:4f:0b:ba:18:84:4a:20:2e:24:
e6:1e:55:78:d1:10:7b:5c:f6:70:01:2b:d6:67:ad:f1:32:fd:
4b:99:63:18:2e:f9:58:f7:cd:aa:01:17:62:9f:aa:1b:43:28:
67:49:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:00 2026 by rpki-client