Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: uN+ppUMtnysWEcFg0e/tq0EgPAUKmcUU1ShphkrW6+M=
Subject key identifier: 4C:5D:79:28:79:91:16:C0:E5:3A:ED:D7:1A:B5:1F:F5:8B:FE:83:9E
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019FA2972BFC3A2F45FABEE2E036CE8769B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 05B5
Signing time: Mon 27 Jul 2026 08:00:43 +0000
Manifest this update: Mon 27 Jul 2026 08:00:43 +0000
Manifest next update: Tue 28 Jul 2026 08:00:43 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: OgHJFvUfawgZrbatDbDvvvmR5yoWUk/+soAd303rakc=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:2b:fc:3a:2f:45:fa:be:e2:e0:36:ce:87:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jul 27 08:00:43 2026 GMT
Not After : Jul 28 08:00:43 2026 GMT
Subject: CN=4c5d7928799116c0e53aedd71ab51ff58bfe839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:ab:fa:ed:cd:12:2b:dc:98:48:1c:ed:99:
6f:69:8a:8a:2e:8f:b2:51:52:e4:65:47:dc:50:81:
1f:3b:aa:71:cf:ca:14:8b:36:ce:5d:ee:21:75:9b:
f4:8d:88:39:77:b1:62:8f:1a:d4:c8:60:81:82:96:
5d:0a:55:2c:38:8b:19:24:a9:51:5c:57:4c:e7:06:
06:de:7e:d0:1b:2e:04:11:14:0e:de:cb:11:ad:d8:
22:a6:96:fb:8f:9b:9c:df:60:89:d1:a1:3f:99:ff:
c7:82:6a:7f:99:06:77:e9:48:70:fe:7a:f5:30:a7:
58:c2:5b:41:20:fb:39:b6:02:1e:cf:ac:2f:09:07:
b8:75:9f:82:0b:7e:e3:1a:8c:97:0a:2d:ee:4a:f3:
ee:0e:10:ee:e5:b3:27:e1:eb:c6:40:4d:6f:cd:58:
ac:45:f7:b5:cc:5a:96:d5:48:b7:44:36:60:57:b0:
5c:7a:c2:30:99:10:bd:58:31:52:db:c3:79:d8:5c:
94:17:43:63:cc:35:f0:84:d9:41:c1:03:27:39:a5:
38:c4:d2:04:33:5a:d4:b5:72:84:76:20:6a:57:70:
ba:7e:c7:5a:02:0d:07:23:be:d1:c1:3b:7b:48:a5:
ce:96:cc:3a:df:6d:b3:ec:b0:e0:38:ec:e8:ac:69:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5D:79:28:79:91:16:C0:E5:3A:ED:D7:1A:B5:1F:F5:8B:FE:83:9E
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c3:9e:98:b6:1d:04:6e:cc:5a:10:c9:74:33:40:7c:1f:52:
a1:c3:06:e1:53:cb:3c:73:5f:01:08:a1:bf:e4:3d:48:73:3a:
44:6a:01:44:b2:b6:44:4a:2b:11:a7:2c:0a:e2:fe:7c:f9:28:
bf:ff:d1:29:58:86:1b:53:1f:84:45:dc:52:5e:fc:cb:a7:f7:
33:bb:3e:ec:74:e9:b8:4a:f1:d8:b2:cb:39:48:92:20:25:8c:
2e:e3:28:13:c3:42:5a:1a:ac:d3:3d:19:48:2c:03:11:61:ea:
41:53:08:6b:dd:f8:4c:d8:02:d8:42:1d:2b:49:51:58:38:b6:
20:eb:ed:99:cc:3a:75:6b:ae:5c:77:55:d3:2e:4c:37:24:38:
6f:a7:60:d5:80:d4:84:e4:c4:d0:8d:2f:fc:51:07:54:96:8d:
9d:ff:35:38:e2:17:2c:42:01:bc:57:34:f7:58:42:f5:13:3e:
f7:20:32:c3:17:e9:f5:0a:d2:df:31:00:13:ae:0a:dc:51:a1:
b8:ae:4a:d7:9a:4b:ba:ad:ee:f7:87:8f:45:3a:07:62:ff:d9:
68:7f:39:ee:f9:13:d7:bd:8d:17:bb:a0:dd:5e:e3:6b:37:c3:
52:e1:ae:f1:89:78:98:8f:16:e0:ae:b3:f1:9b:2b:b7:39:93:
5d:11:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:16 2026 by rpki-client