Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: bknDjCeJfrggBsGGPZXupaaJILqE7pnTRNvTnKDF+tM=
Subject key identifier: 12:B5:74:93:EB:3A:3D:D2:AD:DF:36:E4:B4:C7:97:4B:7B:DD:14:56
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019F5890F8B539AE42A812498E1CA37A4F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 19A7
Signing time: Sun 12 Jul 2026 23:02:03 +0000
Manifest this update: Sun 12 Jul 2026 23:02:03 +0000
Manifest next update: Mon 13 Jul 2026 23:02:03 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 4GUGV/fGG4u+/jrwC5aekOfRFTdSkwHQrNSim1cmqhc=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:90:f8:b5:39:ae:42:a8:12:49:8e:1c:a3:7a:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jul 12 23:02:03 2026 GMT
Not After : Jul 13 23:02:03 2026 GMT
Subject: CN=12b57493eb3a3dd2addf36e4b4c7974b7bdd1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:e9:89:e9:20:2d:82:50:86:a2:f5:26:f1:
18:d0:f8:95:48:af:9d:98:06:e2:ae:aa:8a:83:ab:
07:fe:34:fb:cc:a4:97:bd:ec:98:3f:d7:f6:cf:e4:
b1:cc:a3:b5:9c:80:cf:bc:02:af:17:4e:7f:a2:03:
6e:a0:fd:ea:6c:e7:f7:85:84:dd:d7:c2:58:12:29:
ac:1e:2b:ee:1a:6e:00:ad:dd:bb:6c:da:f4:97:4f:
05:f7:6c:74:00:7c:77:3d:6e:2f:4a:8c:07:71:40:
ef:81:3d:8f:e9:ef:10:bf:c2:8e:d7:b2:98:c7:45:
a8:4b:a9:b3:78:96:6a:5a:74:74:ce:fc:ca:7f:5c:
cb:86:e7:cb:72:24:85:99:94:39:38:c3:31:48:4a:
2f:a0:f2:bb:b6:69:7c:db:02:95:1a:a3:05:bf:7d:
9c:18:50:54:e5:98:eb:6c:4f:c7:35:75:47:34:40:
10:52:35:b3:c9:3e:23:3a:b2:19:70:3f:fa:db:70:
8a:38:ac:7f:93:ed:15:ca:17:4d:e6:d1:9a:b6:ac:
07:26:f7:32:77:3a:8c:2f:9b:b9:e0:b9:ce:d5:93:
02:b7:19:21:6e:70:46:ca:7d:34:d0:97:ae:6a:5d:
f3:34:5c:cb:a5:71:a8:4c:c1:23:46:c0:60:89:bd:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:74:93:EB:3A:3D:D2:AD:DF:36:E4:B4:C7:97:4B:7B:DD:14:56
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:42:6b:f6:78:73:92:f9:eb:25:d9:c9:0f:6d:e7:f5:7e:a4:
0e:33:26:e0:56:a0:fd:90:e4:a1:4d:68:27:4c:42:30:f9:43:
cf:6b:a7:f9:55:cb:eb:4c:2e:86:46:38:3a:96:28:a8:14:7a:
56:fc:c8:30:67:4b:81:75:6e:45:e0:45:a0:b1:fe:48:c0:d5:
3c:de:ea:e2:f7:4a:6e:13:05:bb:f4:b1:8e:ee:25:46:3a:f4:
11:16:31:97:ba:fb:bf:d8:34:0f:83:6b:81:1a:9e:01:f4:25:
5a:d7:f3:6b:33:14:49:9d:67:60:b7:22:53:8f:2d:d5:7c:9b:
9e:c2:0f:c0:90:b3:92:0f:7b:7e:ab:20:da:2a:9f:b3:4b:ab:
ed:06:6b:8c:ef:3d:aa:18:61:4b:ca:33:aa:c7:0d:4f:ba:75:
0a:35:d8:6f:53:20:10:9b:d0:be:2e:d8:f9:9a:6e:fe:90:da:
49:f0:cf:96:07:02:13:23:14:19:16:00:4e:16:eb:35:f2:1e:
97:da:22:0d:23:e4:55:19:5f:f2:45:b7:c4:ad:6d:c6:f2:33:
fa:23:da:06:2f:4b:8a:16:49:db:c7:c8:65:a9:d3:d9:7b:c4:
44:ff:31:64:59:8a:c6:3c:4d:ce:fd:a0:3b:0a:b0:59:06:b5:
8f:77:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:15:26 2026 by rpki-client