Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: E/1d2MVmNvxHXNpvhJUTqU9i5C9lhEqL4ZzupGWzUic=
Subject key identifier: B5:65:69:45:78:D4:E8:A2:5D:26:66:24:FE:8D:D9:94:87:C1:D8:3C
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 019FA0DFC45188E8BB9F541030759AB43926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 10AE
Signing time: Mon 27 Jul 2026 00:00:46 +0000
Manifest this update: Mon 27 Jul 2026 00:00:46 +0000
Manifest next update: Tue 28 Jul 2026 00:00:46 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: Jwi1Sdn7Zfhadzv3EEAfZR0P/ZSQLYEaIVb8wQrnCUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:c4:51:88:e8:bb:9f:54:10:30:75:9a:b4:39:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Jul 27 00:00:46 2026 GMT
Not After : Jul 28 00:00:46 2026 GMT
Subject: CN=b565694578d4e8a25d266624fe8dd99487c1d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:09:d3:06:69:da:81:2d:a7:d7:e9:1f:08:
fc:b4:90:03:6e:26:9f:b5:be:c6:05:44:6b:94:56:
f5:15:a4:6c:3d:b3:4e:2b:8b:bf:ea:1a:4c:7e:20:
11:f2:0c:76:e4:82:74:ae:ee:4a:bb:e8:14:4c:71:
c0:d0:18:bb:76:4e:e9:4d:80:99:55:f8:96:6d:16:
8d:c4:e4:4c:65:fb:1e:7c:84:7f:f9:5c:69:da:18:
c6:b7:a1:bf:4b:0e:46:d9:d9:a9:25:66:34:7d:56:
77:1d:21:d6:a8:cf:8a:9e:a1:12:9c:85:2e:5d:90:
4b:89:39:2a:44:11:8e:29:eb:49:d0:c9:6d:f8:9c:
c2:10:d2:32:31:9d:41:b5:50:a2:82:69:40:7e:20:
f7:d0:2d:09:aa:b8:8b:9d:c2:c6:15:07:3d:b6:b4:
33:52:c3:09:72:45:5e:3c:f3:07:0a:d6:90:2d:c4:
8f:00:52:62:50:25:50:8f:dd:f4:ba:6f:5f:3d:ef:
3d:cd:a6:81:bd:11:b3:15:0f:b5:f0:1b:eb:39:ba:
65:bb:67:7a:4a:a0:b7:d6:e7:d8:d4:99:9b:4f:d3:
00:76:ed:e6:59:86:e2:c3:f6:91:a4:0a:e5:34:1e:
33:37:b4:e5:d0:e8:bb:1f:70:92:21:f6:54:c4:75:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:69:45:78:D4:E8:A2:5D:26:66:24:FE:8D:D9:94:87:C1:D8:3C
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:b9:6b:51:b8:19:98:36:ea:21:29:56:72:1f:ed:5e:22:
33:2c:79:39:d8:b9:53:8c:84:17:76:c0:50:1f:5d:f0:39:5e:
f2:00:1d:fd:65:e6:82:98:3f:e4:f6:2a:13:c2:9a:f8:da:c7:
f0:fc:9a:2d:45:0c:59:ed:e6:70:64:ba:ee:37:ae:41:9c:6f:
03:ac:d9:51:9a:95:d7:c5:e6:9c:25:71:9d:ac:ed:41:16:3a:
ed:c3:10:b2:2e:2c:6c:db:4c:ae:c8:7e:9d:18:74:ac:0f:c6:
80:31:92:e8:51:5c:23:ef:53:15:c6:c5:9e:63:68:13:3f:93:
6b:c5:42:df:35:72:8f:d7:94:f6:07:f6:8d:7b:89:65:6d:0d:
d3:b8:2e:f0:37:b5:bc:b8:67:ea:09:50:33:e0:23:b3:b4:5b:
26:95:99:66:be:d9:ab:20:33:94:56:42:26:2f:9f:3a:58:c9:
d1:69:38:94:5e:96:64:09:22:69:0e:10:5a:bd:db:ce:eb:48:
93:a5:f6:22:30:f1:77:c5:67:61:a5:e8:be:dc:58:55:04:9b:
c9:9e:18:0b:df:67:2c:8e:c1:2f:50:13:5f:e8:21:4f:52:f2:
b4:e3:2a:54:2a:ea:67:57:1f:c4:d0:d6:72:56:0c:e5:d9:34:
ae:02:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:09:31 2026 by rpki-client