Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: 2OrbVGqjToST9csxBxqGOQ+1JTrDz3gUXTJAqJT4ilY=
Subject key identifier: 66:D5:43:43:4C:7A:41:3F:79:2F:4E:D6:C1:BF:93:B3:49:D3:43:79
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019EC8CB86A388BFBA85B52045B7D5792BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 195F
Signing time: Mon 15 Jun 2026 01:00:41 +0000
Manifest this update: Mon 15 Jun 2026 01:00:41 +0000
Manifest next update: Tue 16 Jun 2026 01:00:41 +0000
Files and hashes: 1: O_wCNsyDbT6MUYABz8-3j0us_9g.roa (hash: lcEmRT5pvsNkeswk2lk75S2Q+qGFNRLgl2uhLFsTeD4=)
2: bDIaKUq5ow0olhUpFCtBXBJMo6o.roa (hash: 9hfkjt3EwE+QLaV9BjMUSGSaxIGmTaaJQ1x9H7t99BU=)
3: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: inh/H1QjqPgxiD1W/Su10KQhVr8unSjLIb4cmWzXoIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:cb:86:a3:88:bf:ba:85:b5:20:45:b7:d5:79:2b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jun 15 01:00:41 2026 GMT
Not After : Jun 16 01:00:41 2026 GMT
Subject: CN=66d543434c7a413f792f4ed6c1bf93b349d34379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:ae:77:2d:c1:94:72:f0:52:43:64:20:65:
9b:cc:53:c0:5d:88:8a:81:aa:f7:c2:28:85:c3:07:
11:2e:e1:8b:4b:42:0c:7d:3e:74:70:4e:0f:fb:45:
f7:18:86:85:8d:d8:25:34:79:61:44:b4:e8:73:c0:
6f:c2:45:4e:ea:15:c9:1e:31:0a:17:a9:b6:06:55:
27:fc:78:13:3d:00:3d:d3:ea:3c:3f:6f:8f:ac:cc:
ac:e6:86:5f:d9:6b:14:8c:da:4b:7a:48:99:f1:ab:
81:3d:c5:e1:cf:c5:80:f8:1b:85:a4:fa:e2:c5:97:
40:e0:2e:f8:f4:3e:e8:d6:42:9c:e6:48:b3:8d:a7:
13:90:6c:f5:53:1a:11:51:7a:03:32:78:dd:4a:7d:
46:5e:b6:bb:dc:35:f4:e5:9e:0c:88:b7:99:0d:29:
c6:2a:13:fa:85:4d:cf:2b:a9:47:f8:dc:0a:60:5a:
68:5d:1a:9a:8e:13:a5:1b:00:68:44:e7:32:6c:c7:
d4:6b:a1:87:23:11:2a:9d:7f:95:e0:d9:8a:51:43:
0b:4a:79:8b:45:49:e3:60:46:de:30:45:00:1f:41:
e1:b4:f7:52:db:b7:16:65:b7:16:3e:cc:cf:f3:06:
a6:34:d3:08:a0:b0:5f:49:8d:4f:b0:03:75:ba:b9:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:43:43:4C:7A:41:3F:79:2F:4E:D6:C1:BF:93:B3:49:D3:43:79
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:c4:1b:29:1d:ef:4b:5d:3f:31:af:de:bf:4e:d1:18:71:
35:09:cb:91:a6:e6:69:cf:29:f5:8e:81:fc:d8:37:9a:01:0c:
f9:ab:d5:c1:78:6b:eb:95:34:a7:50:cf:73:e7:1e:ee:d7:f7:
e9:8b:f1:aa:ea:88:25:db:56:8d:85:89:d4:44:53:af:94:b3:
11:09:16:48:7f:ea:fe:a5:2c:53:25:db:6e:53:87:73:c4:c8:
aa:2e:54:62:66:d0:fb:1c:b6:3b:ab:cf:59:e0:d4:58:fb:65:
1b:44:64:c5:39:72:c9:1c:c8:f0:0e:c8:92:af:af:6e:1b:62:
c1:59:bf:31:af:13:af:9f:26:40:14:27:80:2d:36:a5:19:17:
dc:ff:ac:24:68:2b:67:51:99:fa:a5:b1:29:c6:ea:7f:c5:79:
e1:cd:61:e1:87:48:95:3e:ce:0d:45:65:57:13:b1:66:5d:31:
97:3d:b2:19:25:d7:1c:27:c3:94:87:9b:37:11:9c:9e:1f:39:
84:11:4a:68:06:2a:03:f4:db:c0:bf:56:17:1d:ca:e2:ef:eb:
4a:aa:e6:64:93:17:58:79:43:3e:de:aa:69:cf:b6:e2:c0:2c:
29:d8:91:9e:4e:bd:22:5c:7a:9a:e1:08:28:d4:06:df:1d:ee:
06:cf:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 09:45:11 2026 by rpki-client