Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: /o7D9I6uRu7d3mg3kM9sfZ9n0hSgRKGuGF35RE0N8bE=
Subject key identifier: 61:EA:FA:E3:14:46:A1:B5:DA:26:DE:45:50:8D:42:30:D5:E6:CC:57
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019D382DD413B911189EEE9D6B420211AAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 0226
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: dyouo7UYlQz/q2cE/zPlqmKGJRACXuoxgB4yHL853ko=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d4:13:b9:11:18:9e:ee:9d:6b:42:02:11:aa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=61eafae31446a1b5da26de45508d4230d5e6cc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:52:d8:01:9d:4e:d3:38:56:35:c4:c4:99:
94:32:2f:d3:70:e1:0b:86:b3:c9:7e:8c:3c:82:2e:
31:f8:46:99:6d:91:94:c3:4a:e4:b0:d6:92:14:9a:
4b:fd:aa:e1:fb:a5:ba:43:8b:70:ab:fd:96:70:d0:
cd:79:57:11:cb:90:ee:4f:d9:b7:5e:91:8a:34:10:
94:6f:ca:fc:0b:24:02:b8:32:d5:d6:da:b7:ce:f6:
f7:0c:91:94:8b:31:a9:f6:ec:b4:ae:83:d9:ce:b3:
5d:09:0a:6e:7d:b4:a3:e0:2f:cb:be:02:3f:c3:47:
85:6e:f8:2b:60:53:b6:28:21:95:6e:02:ea:32:e8:
17:b3:bb:6d:85:6f:bf:69:f5:fc:5e:27:6d:42:35:
f1:dc:f0:f6:7b:a9:6d:08:e3:76:46:91:16:4c:5f:
10:79:9e:d2:d1:62:32:56:5d:5b:52:5e:bb:b8:23:
57:41:a5:5a:42:93:02:79:2f:80:c2:a6:a3:43:78:
ca:89:c7:1a:9f:d9:56:86:de:5a:82:d9:b1:ff:c1:
ea:ea:60:e0:9b:63:0b:59:35:0a:1e:33:8d:1b:73:
62:dd:d0:a2:80:c0:ea:42:3b:38:96:d3:4f:bd:01:
c3:68:38:25:f9:9a:d4:f8:2c:53:ba:0c:e8:22:9b:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:FA:E3:14:46:A1:B5:DA:26:DE:45:50:8D:42:30:D5:E6:CC:57
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:4d:12:36:79:eb:46:35:c6:3f:c7:f3:97:ed:e6:6e:0e:
bd:74:41:77:85:5c:1c:12:62:be:0f:0e:6e:79:89:2d:33:99:
3e:f8:8b:dd:12:f4:da:1e:4e:49:b1:7c:db:78:31:0b:9c:38:
4a:6e:e8:78:b4:c8:35:07:93:ef:a3:55:8b:07:c0:a6:f0:05:
4d:62:1e:a0:73:ca:ed:3c:e3:d3:66:00:51:33:96:e0:8d:01:
f4:74:1d:20:69:af:1c:7b:27:bf:94:37:a1:f5:13:ad:b3:44:
c4:12:23:62:92:f2:f8:da:a2:6a:05:2e:58:23:00:49:e7:79:
41:da:5d:61:04:a5:1b:7d:35:bb:e2:a6:38:89:1c:0c:48:25:
d4:d7:dc:2d:bb:e2:31:f0:f6:73:98:fa:26:34:c8:76:c2:5c:
a4:80:7a:7c:c8:e4:ef:00:4a:ba:e5:08:01:9f:26:6f:26:a1:
aa:b6:ac:a6:ef:8c:2a:19:13:ac:34:7d:1c:f0:0f:16:46:d3:
47:7a:4b:8d:de:96:ae:48:44:b2:8e:a4:7f:70:0a:d2:5b:a2:
c3:87:bc:f4:3a:0a:17:fa:57:50:ce:9e:03:8b:82:d8:a7:90:
9d:6e:95:1a:66:b6:c2:c7:fc:f1:ea:45:fb:ad:16:ea:7f:ba:
54:86:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client