Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: Oi6yFjdU7Pz2OEDn0E7YAU8/86NoplFiA2lEupEP8Zo=
Subject key identifier: B9:A4:80:92:7A:BF:09:93:47:A9:78:9B:6D:3B:69:9F:B4:BE:47:A3
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 01A177705DA14632920B1E95336E633B7F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 0459
Signing time: Mon 26 Oct 2026 09:00:14 +0000
Manifest this update: Mon 26 Oct 2026 09:00:14 +0000
Manifest next update: Tue 27 Oct 2026 09:00:14 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: vR/tbPv5RAGanflVIL8SEg7fVJHacjz5OQP19H8DDSU=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:5d:a1:46:32:92:0b:1e:95:33:6e:63:3b:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Oct 26 09:00:14 2026 GMT
Not After : Oct 27 09:00:14 2026 GMT
Subject: CN=b9a480927abf099347a9789b6d3b699fb4be47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:20:09:d7:33:c3:ac:3e:34:0e:e3:88:fc:
1a:36:a8:1a:1d:08:0d:13:0d:c8:62:db:32:52:15:
75:a7:9f:90:3c:8d:fe:3c:fb:16:04:5b:8b:6a:ce:
a5:9a:28:c0:c5:89:2e:e7:02:b6:db:6d:85:6f:8c:
33:e9:0b:f1:7b:aa:39:68:05:74:50:68:d6:31:aa:
75:fa:2c:33:9d:c9:7c:57:60:c6:69:43:85:7c:1d:
04:fe:e9:c2:3c:35:33:46:fa:c5:6f:8c:59:25:6c:
8e:fa:01:25:20:ce:a7:db:77:22:e8:70:11:71:20:
89:4f:63:11:2a:5d:1f:b1:f1:7b:2f:9e:a2:73:82:
d8:bb:50:83:21:76:ba:00:ec:d7:84:a1:9a:d6:32:
70:2e:c2:f6:ad:72:09:c5:23:ae:09:56:ac:a5:56:
fe:9d:9b:57:3e:fd:5c:81:20:d0:7c:8d:9d:5a:6f:
89:93:32:7c:9d:50:36:0c:a0:be:62:52:6f:1d:a6:
0d:93:a3:f9:a4:8c:bd:52:8f:3c:78:7f:61:47:13:
bd:25:5a:12:6d:81:b4:0b:ab:17:6e:d6:29:fe:3e:
0c:f1:42:db:cb:7d:48:4a:45:96:e6:15:56:28:17:
54:24:fd:70:de:cc:86:67:cb:e2:67:57:c2:6f:65:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:80:92:7A:BF:09:93:47:A9:78:9B:6D:3B:69:9F:B4:BE:47:A3
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:ab:03:12:cd:df:c0:e2:31:8f:5a:15:62:34:20:ef:52:
2f:0a:bf:87:64:10:4d:d4:e5:30:57:dd:d2:dc:21:84:b5:93:
3f:9f:c4:6f:d9:93:d0:2b:e9:5f:f7:a9:ab:61:35:75:7a:0b:
ab:a0:c2:84:fa:29:5f:92:f6:b5:70:d1:5c:fb:a2:48:9d:e8:
73:52:63:64:6a:cd:f8:d0:c4:6f:3f:77:f9:3c:d1:13:5e:89:
5e:50:f9:57:97:8a:2f:3a:27:4c:d0:b6:9c:a7:d0:07:97:0b:
f2:a7:ba:1f:3c:26:68:ee:30:75:51:ae:eb:c8:83:23:20:f5:
28:e5:7b:37:07:1e:a0:24:fe:a1:d1:a5:06:fb:75:61:49:27:
4e:c4:95:f6:65:cb:61:45:9b:e0:71:0b:a7:bc:22:e6:c5:80:
5a:33:00:59:35:fe:42:04:fa:82:d6:7a:82:69:e7:9a:cc:ae:
35:a0:b8:15:bc:21:fa:eb:13:ed:75:b6:ce:99:15:d0:34:a2:
6b:e3:b5:fb:bf:36:26:15:de:0b:f2:5b:80:34:f8:43:e7:d4:
05:39:8f:e6:d6:0a:ca:4f:ff:25:1b:b5:05:9c:61:a5:3f:7e:
c6:41:d7:38:3b:d8:d1:52:67:ad:2a:3b:3b:59:4f:d6:5a:95:
f9:e5:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:49:41 2026 by rpki-client