Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: O02m/eEjqm6qbkgby4V9Lg69wLP8XmVcipT11TRBttQ=
Subject key identifier: DC:0A:C1:E9:B3:BB:F4:56:70:36:9E:63:09:1C:28:6B:28:F3:A2:15
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019FA11707C400F08F3B3DD203204709B047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 097A
Signing time: Mon 27 Jul 2026 01:01:08 +0000
Manifest this update: Mon 27 Jul 2026 01:01:08 +0000
Manifest next update: Tue 28 Jul 2026 01:01:08 +0000
Files and hashes: 1: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: WIm6KvWeicPnz/n3THin6vDUyiGPb1PflldyC2cBYTk=)
2: W47tZvu_CAnfpr4QCettmz3h4VA.roa (hash: m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=)
3: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (hash: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:07:c4:00:f0:8f:3b:3d:d2:03:20:47:09:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jul 27 01:01:08 2026 GMT
Not After : Jul 28 01:01:08 2026 GMT
Subject: CN=dc0ac1e9b3bbf45670369e63091c286b28f3a215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:ca:d1:de:a9:b2:bf:66:87:11:8a:1b:84:
9b:3d:78:10:ff:63:8a:e9:8d:46:47:71:98:22:1b:
28:7e:94:e9:0b:cf:34:d8:50:d4:ce:ad:f6:e3:b9:
07:a1:69:98:3b:ab:09:91:0d:8a:fd:58:fc:ef:ad:
0f:57:f9:ee:24:68:5e:db:94:35:57:e7:00:01:43:
4e:9a:94:01:aa:a3:6c:ec:30:e0:0f:62:26:fe:96:
d9:4b:25:8b:49:96:8a:03:f0:98:03:f0:f4:38:a1:
9a:ec:00:25:62:50:65:cf:30:cb:c1:77:78:f7:81:
c8:09:33:2c:88:a7:75:cf:aa:32:19:62:00:ae:f4:
69:d2:e0:33:bf:e5:6d:65:6b:ba:0e:18:77:4d:e4:
d0:97:72:ee:a4:ab:54:25:85:87:a6:e6:e8:f6:65:
12:77:fb:a2:25:fc:8a:d8:18:c2:6d:c7:3c:1a:e1:
e5:a9:2a:84:8b:4f:d8:b5:65:42:07:e0:da:ca:97:
c9:98:b3:89:00:30:22:0f:58:e2:05:b0:6a:1d:bb:
6c:a6:41:7c:46:c6:66:7a:ab:82:71:0f:7b:23:30:
67:13:31:89:f0:ef:8c:c9:90:8e:81:7b:2f:1c:87:
eb:43:ef:df:d2:96:21:5f:36:0d:af:5a:84:18:d3:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:C1:E9:B3:BB:F4:56:70:36:9E:63:09:1C:28:6B:28:F3:A2:15
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:da:cb:f1:3b:0d:27:ea:32:d0:43:cb:71:9e:ff:f9:26:9a:
48:37:7b:4a:da:5b:37:b1:5d:52:ab:57:5f:54:cd:3d:2d:f7:
b6:06:7e:23:95:40:6d:a0:2b:87:fd:4c:89:97:4d:59:3b:20:
5b:52:5d:9f:fd:b7:3a:51:22:ed:d7:66:58:30:56:da:a7:ed:
57:ed:6a:cd:78:82:4f:63:22:e0:60:10:9c:4f:63:9c:93:3a:
ec:18:a3:07:84:dd:ca:bd:14:a2:37:6f:05:31:ae:61:8d:c1:
42:93:db:6d:87:ff:73:f0:c5:99:d1:91:90:ee:a2:42:d7:84:
ff:a6:60:02:34:6a:61:10:ad:69:58:6f:ea:5f:1e:6e:91:ea:
66:01:93:ed:35:8d:57:6c:54:3f:2a:3f:09:a2:54:57:8e:f3:
49:79:1b:8e:d3:9b:dc:c4:ed:6c:0c:3b:43:44:db:a4:c1:56:
4d:c1:6c:8e:5d:11:57:88:d6:97:80:62:70:ce:3a:ed:ee:17:
23:fd:9d:42:4c:0b:fd:0a:39:3d:72:c5:e0:88:cc:03:e1:1e:
30:77:55:20:24:e1:ae:d3:50:f3:c3:1c:6f:63:b0:77:40:51:
4c:1d:08:82:8e:a5:f7:e0:cb:4f:92:c4:ee:72:52:01:9a:98:
1f:b8:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:17 2026 by rpki-client