Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: K5+A89EOMsZyhJZkvu0qi1BdwrCCRPpg1RDRy0iqIXg=
Subject key identifier: 7A:0F:C2:A3:06:4D:49:CF:B6:2D:51:5B:3B:2A:7B:D0:B2:D2:CC:CF
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 01A08A55CF84BDDB5F3DC6973314B0F476B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 062D
Signing time: Thu 10 Sep 2026 08:01:14 +0000
Manifest this update: Thu 10 Sep 2026 08:01:14 +0000
Manifest next update: Fri 11 Sep 2026 08:01:14 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: 6EPDKYmMQ5XVeFKx49E9SlcdTcIOTfioLO1vz+Bv/aE=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:cf:84:bd:db:5f:3d:c6:97:33:14:b0:f4:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Sep 10 08:01:14 2026 GMT
Not After : Sep 11 08:01:14 2026 GMT
Subject: CN=7a0fc2a3064d49cfb62d515b3b2a7bd0b2d2cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:8f:40:7b:41:87:f1:27:45:19:29:13:84:
d7:e2:fe:8b:03:15:0f:be:17:25:0b:b1:02:70:60:
c5:00:07:28:84:3c:e0:fd:d2:b6:49:4f:63:90:d7:
c1:49:18:19:10:46:ae:ac:f5:79:b6:26:ff:3d:cc:
de:4a:b8:b5:fa:95:53:4e:dd:2d:9d:fe:da:d7:8d:
06:5f:77:6f:0e:f3:de:34:89:92:8a:f7:6a:9e:d8:
25:da:5f:2f:31:ef:70:73:45:4f:f4:6a:17:dc:57:
e1:a0:92:31:d5:be:f5:3a:07:27:72:a6:aa:ee:16:
84:16:bf:a8:eb:56:ba:66:44:08:cf:22:a7:5e:ea:
61:80:b7:0c:91:70:73:83:0c:df:ea:1e:0f:ef:d8:
c4:1f:98:18:26:7f:c6:15:24:83:45:7d:25:aa:ad:
20:df:c5:d0:f2:01:57:4b:f8:18:b5:81:ea:03:95:
2c:e2:72:2f:9c:4b:70:19:fc:3b:24:24:48:f0:d9:
d1:73:fe:af:01:ca:01:1c:be:cd:1a:cf:65:83:f3:
bd:fb:31:07:dc:c0:26:1d:6b:c8:70:4a:a1:9f:a5:
a7:18:9c:b8:97:b1:c9:c1:db:7a:75:6f:4d:a8:e1:
fc:e6:f6:a8:05:74:7b:b3:22:43:3c:e5:4c:b1:29:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:C2:A3:06:4D:49:CF:B6:2D:51:5B:3B:2A:7B:D0:B2:D2:CC:CF
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:56:8b:b5:81:e2:f1:66:2a:3e:9a:d9:0e:cf:89:81:61:
1c:f4:d9:ce:6f:33:7e:95:5b:8b:ca:81:45:17:0d:c8:40:22:
9b:f4:4d:90:c0:43:7e:15:b2:9d:d0:27:7b:47:85:f1:2c:ed:
0d:4d:d1:45:1c:0c:fd:e5:16:d6:82:63:5d:9c:60:d4:7d:63:
eb:3d:8d:f1:23:f5:b5:0c:4b:01:8a:53:f8:93:2f:e7:7e:6c:
c3:83:8c:e8:5b:f5:10:dc:33:a0:2b:4a:6a:56:45:24:48:ac:
ef:41:eb:d6:eb:51:10:1a:41:6a:e2:9e:bd:7c:c1:19:4a:b4:
50:fc:6f:09:d3:89:c9:33:53:d3:01:51:8d:ae:c7:bc:38:dd:
60:e6:fe:b7:a2:62:35:a2:9f:e2:5a:8f:74:eb:36:aa:ea:e4:
8b:b7:e4:1e:07:cf:27:43:72:1d:e7:e8:8b:b8:63:45:c6:dc:
2d:6c:ab:5c:44:dc:f8:5f:bb:ac:7b:94:d3:90:72:d4:b2:67:
f5:e6:be:8f:5d:8e:60:0e:72:c7:eb:0e:a1:c6:ef:8a:4a:32:
55:8e:8f:7e:f6:bd:85:f5:75:8d:22:cd:f6:44:4b:10:45:da:
f1:b5:b6:45:59:18:28:cc:f5:a3:5f:21:09:27:8c:bb:1e:df:
fd:c5:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:44 2026 by rpki-client