Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: CKMLK75LKAfImrWG2IUroqsaj0CB18IA7yd6iUSlw/g=
Subject key identifier: F6:BC:29:9A:17:25:1F:FD:0F:69:CC:03:BC:D4:59:47:15:1A:D5:04
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 01A1889B0BB5FE3FE3ED494487DD28683DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 1884
Signing time: Thu 29 Oct 2026 17:00:24 +0000
Manifest this update: Thu 29 Oct 2026 17:00:24 +0000
Manifest next update: Fri 30 Oct 2026 17:00:24 +0000
Files and hashes: 1: LN8128RtX2TWg__j6TtcXwL_Eb0.roa (hash: l0oQB/ky1SV2K23tSgeEjaUc0KhSm1kwVFjEn/NMuWE=)
2: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=)
3: XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa (hash: CTnuJkHuEdvyE2199+HyL39pwCCPv/xCbcizmK9wVZQ=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: JlLZ68h1NwXShM7mG+7X27ZhhjYiZ41Kl6xBRUowff0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:0b:b5:fe:3f:e3:ed:49:44:87:dd:28:68:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Oct 29 17:00:24 2026 GMT
Not After : Oct 30 17:00:24 2026 GMT
Subject: CN=f6bc299a17251ffd0f69cc03bcd45947151ad504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:11:e8:00:28:25:91:c6:b2:84:74:bb:25:
ae:d1:56:7a:4d:5c:e8:87:58:99:1f:60:ce:d2:2f:
0d:0a:1f:32:f3:6c:05:d8:99:ec:83:69:37:1b:32:
2f:b5:86:4f:f8:df:1c:ae:d1:18:30:bb:45:2d:f4:
2b:ed:7b:4a:6d:68:49:40:ae:66:e1:d5:bd:a6:37:
68:c4:cc:e2:1f:1e:55:ee:81:7b:63:3a:8c:57:b0:
f8:14:df:68:39:21:8d:de:2f:f0:79:0b:35:f4:07:
bd:13:e6:bb:93:48:93:2c:25:ab:de:df:7a:b3:91:
58:71:ac:84:42:0c:bb:20:16:ad:ba:c0:01:59:d8:
e3:d4:6a:89:b6:5c:15:0f:c3:fb:f2:95:b3:93:34:
5c:34:69:73:a2:84:d5:80:3e:43:11:67:64:02:43:
a3:86:5f:dd:fd:46:73:d6:b7:6c:c1:e3:cc:a9:90:
50:ad:9a:4d:3c:b8:b4:31:19:77:41:00:4e:6b:1c:
22:4a:07:ef:11:65:4a:e1:27:dc:e1:08:b8:91:61:
f9:44:0a:c7:dd:6e:56:0f:ef:86:75:f3:1f:00:f8:
1d:d9:26:d0:59:da:16:f2:50:5b:14:b4:64:54:ff:
a9:61:5e:8d:e8:24:95:53:37:ed:16:c3:21:d7:c2:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:29:9A:17:25:1F:FD:0F:69:CC:03:BC:D4:59:47:15:1A:D5:04
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:5c:95:bf:dc:4f:f9:99:6a:e7:c9:78:46:22:f1:2d:52:
cf:9b:f4:41:4e:88:37:e5:72:83:80:80:5a:da:e8:2d:c8:a1:
13:f2:3b:04:cd:89:b9:bb:f2:0a:7c:9d:fb:07:c3:6d:02:ba:
40:c2:3b:e9:c5:3a:d9:16:f2:2a:9e:06:9d:67:2e:1d:a8:17:
1c:47:38:ba:63:65:c0:7c:40:58:02:ee:d3:03:ab:5f:3a:55:
87:d9:fc:3a:c1:01:28:99:5d:72:2c:01:19:dd:19:85:fa:e5:
37:b3:96:1b:41:3b:cd:be:fa:e9:02:33:14:f2:19:77:a8:5f:
67:36:8c:7d:b2:4f:a1:51:78:0f:c3:1b:4b:c7:c6:1c:fb:ff:
21:b4:df:d6:a8:29:03:74:82:5c:6e:ef:8a:af:d4:23:ae:d7:
b4:d3:cb:40:b3:39:a9:e7:65:5a:65:87:1f:f8:ce:2e:ce:2e:
c6:a2:8c:10:af:2e:60:da:f0:a1:65:77:38:de:09:ac:34:8d:
52:59:1e:74:f5:ae:2b:01:d8:e2:f7:80:59:4b:e9:30:73:35:
30:e0:6a:e7:b7:e1:b4:2c:7e:65:4d:c5:3e:30:8c:b7:67:3b:
d7:4e:77:66:4a:a9:bc:72:27:41:1e:e9:5f:6b:65:53:a3:16:
93:2b:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:27:54 2026 by rpki-client