Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: 3D8qjM35F4mj5goDpM3Iw/AcV67Y96mpqNMq/VcXgdg=
Subject key identifier: 44:A8:5D:92:82:06:61:1C:F9:4D:06:0F:1B:2E:72:B2:48:69:AE:79
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019FA14D872E43D8106E394568B12736C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 1787
Signing time: Mon 27 Jul 2026 02:00:40 +0000
Manifest this update: Mon 27 Jul 2026 02:00:40 +0000
Manifest next update: Tue 28 Jul 2026 02:00:40 +0000
Files and hashes: 1: LN8128RtX2TWg__j6TtcXwL_Eb0.roa (hash: l0oQB/ky1SV2K23tSgeEjaUc0KhSm1kwVFjEn/NMuWE=)
2: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: dZF5yv+gr88MKXOhTqDqYHTqvCenXQ7wp3x1lS9x+nc=)
4: w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa (hash: 2ZZ8GWyxnopSnEx+KCqhJpc+c1KzSn/YRlcq0uuBarM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:87:2e:43:d8:10:6e:39:45:68:b1:27:36:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jul 27 02:00:40 2026 GMT
Not After : Jul 28 02:00:40 2026 GMT
Subject: CN=44a85d928206611cf94d060f1b2e72b24869ae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:dd:2e:0c:d6:72:8c:33:aa:b5:47:64:9d:
38:23:b6:5b:08:1c:d5:15:31:17:dd:e1:6c:b1:b0:
18:33:51:b1:3c:6d:2d:d2:07:6a:61:4f:d8:73:18:
f7:59:17:6b:9e:11:6e:63:50:e3:51:9b:e2:84:37:
b2:8b:83:59:17:13:ff:b0:58:36:21:65:0f:91:e7:
c7:0c:aa:e9:e0:98:1f:d6:d6:b1:7c:6c:58:80:05:
1b:d9:f9:5a:2e:7a:bd:ff:7c:30:c8:ca:ab:cb:61:
85:f8:f3:20:44:a6:6e:ea:2c:72:e3:5b:46:d5:6a:
0b:78:9e:29:64:58:82:9b:f7:cd:db:b1:d6:6c:c9:
d8:0f:e9:c7:a3:4e:92:6c:c8:e5:5c:e1:48:69:79:
d3:72:ad:5a:ae:81:9a:28:4f:e7:67:59:c9:25:80:
ab:a9:01:8a:5a:35:98:de:ce:4e:51:81:a5:5d:b1:
78:d5:90:53:3c:b7:b7:fe:d8:dd:c6:f4:f7:90:2c:
3a:3c:85:ac:ab:39:a1:65:58:f4:33:88:9a:57:89:
42:f3:2d:96:7a:f1:1f:a8:47:70:ea:df:85:96:f4:
28:7e:0c:62:b0:c1:42:48:12:aa:29:2c:18:02:dc:
59:82:da:d7:b7:59:20:c9:fb:21:50:43:e5:f2:51:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:5D:92:82:06:61:1C:F9:4D:06:0F:1B:2E:72:B2:48:69:AE:79
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:dc:f2:60:94:75:ed:23:b8:ae:38:f8:8a:2c:3d:39:3e:
47:31:80:3a:8e:c9:72:db:38:eb:bc:e4:da:f7:9c:7c:25:ef:
46:dd:33:fc:6b:32:19:92:92:cd:53:21:50:36:05:52:24:a5:
b3:77:30:b7:47:fd:c9:db:15:09:67:90:0c:a8:9d:a8:7b:19:
11:5e:ac:58:8f:55:1c:e1:c7:d2:71:86:55:2a:e8:e2:d1:15:
9e:6c:5f:b1:ee:31:ae:0b:42:ed:2a:57:59:ac:20:d4:43:5b:
7e:6f:ef:00:a0:37:91:de:f8:55:6c:9a:c3:03:48:bc:6a:31:
92:30:30:e8:13:73:9e:3a:0b:56:91:26:bc:4b:59:f9:2b:23:
a3:54:8a:ba:5a:0f:e2:82:99:c9:34:9e:23:c3:f1:0e:68:4d:
58:58:36:75:14:9d:a8:70:d8:ec:26:59:9b:0c:3e:45:f4:24:
d4:1a:31:08:d5:ce:56:6c:ec:ad:d5:67:e5:87:11:7a:0b:40:
a7:b9:23:85:82:88:85:93:b2:1f:fd:b3:5f:10:f3:c4:2d:40:
ac:c3:1e:2b:81:2d:56:99:22:c7:a3:75:a7:a8:f5:b4:21:a9:
a0:76:f4:cd:e0:84:22:45:89:6f:51:04:2c:9b:07:f7:0e:08:
a2:34:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:46 2026 by rpki-client