Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier: PE0lecZ67FcmlzyxFRlicWRML1P+mOW6CVXTJS9tV0w=
Subject key identifier: 86:7C:EB:49:FE:C3:41:95:C7:07:FF:A3:71:60:E2:FB:37:FE:5F:B6
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 019D37F7789C4CACA0BF53A1CD19FC2BD59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: aALDXxvElJYyPa8mso3hsNxG29uH9+AzUsjhZ5X494Y=)
2: UidN5UAlQ-QinMDVuU713qtde6s.roa (hash: SjCITC39fupPmxLMbA+D8zpJhx9IA929/zeseDSrizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:78:9c:4c:ac:a0:bf:53:a1:cd:19:fc:2b:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=867ceb49fec34195c707ffa37160e2fb37fe5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:2b:3e:43:89:b6:cf:d6:23:71:1b:ad:5b:
12:ca:85:d2:6f:0f:59:2c:87:d9:31:83:ee:85:37:
29:87:1a:39:59:bd:09:3c:fc:a6:fb:29:40:2d:d2:
bf:68:50:26:ca:d7:c0:0c:b2:b8:bf:99:09:75:ff:
95:e4:c0:b6:90:b4:86:0c:d6:71:c0:5c:65:b0:b2:
b3:a9:ee:53:8a:bb:20:cc:d3:9a:85:17:c1:2e:d4:
33:f0:a9:da:1f:8e:8a:11:1c:92:1a:66:81:60:ee:
16:ae:20:21:00:e9:a9:45:83:c3:34:f2:99:05:53:
34:46:ad:40:e4:f9:1f:46:0d:44:c3:f4:45:dd:47:
f2:00:dc:33:a9:36:61:07:32:48:c4:43:24:fb:52:
43:57:85:84:2a:c2:21:b0:cc:41:73:49:af:c5:0a:
97:f3:99:dd:ca:02:02:e8:1c:6f:49:fe:49:4f:e7:
e7:af:7d:ba:2c:d4:ae:59:34:00:16:bc:8a:6a:0a:
94:ad:c1:d6:e0:97:80:6f:e7:1f:ae:ab:1e:3c:78:
a8:58:2f:9b:56:06:af:09:b7:8c:63:dc:4e:d3:a3:
27:81:e7:eb:11:35:f8:98:f6:2d:cd:0a:88:6b:10:
fa:a5:8b:4a:04:5e:05:67:45:74:ab:ca:26:3d:ce:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:EB:49:FE:C3:41:95:C7:07:FF:A3:71:60:E2:FB:37:FE:5F:B6
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:f8:dc:6f:72:24:f4:77:68:f8:91:21:d3:76:c2:af:35:
a6:b3:a7:f9:f2:aa:ff:4b:16:35:02:98:cf:25:da:3a:9a:07:
be:ef:38:10:52:a4:55:17:4c:a8:b2:f8:1f:15:5c:aa:0c:19:
9f:0c:44:d8:e1:25:89:3b:af:63:12:63:62:c0:5c:b7:ab:f9:
17:71:0f:ab:01:98:a5:a0:f1:f6:10:11:93:93:ba:e5:4a:65:
a0:9d:0b:ef:62:40:f1:f4:87:57:18:0c:1c:6a:f8:6e:20:c3:
5e:ae:9a:8a:ab:75:b9:d3:43:74:9c:97:93:57:50:3c:49:7d:
8f:56:70:87:4f:16:31:99:e9:d8:e8:cf:ce:5e:dd:74:f1:89:
a2:f5:8d:6c:69:68:76:60:2f:be:7d:5c:e1:3f:53:66:ec:5b:
08:60:99:c2:8c:c5:3d:e2:df:41:59:ef:4c:5a:10:3a:35:a8:
a3:4e:6e:84:f1:86:29:b1:74:c3:ef:22:cc:08:d5:79:a2:bc:
52:62:d0:e8:bf:84:9f:27:26:26:39:e3:a3:5a:5a:59:b1:0e:
af:dd:48:4c:60:e9:5f:4a:ae:40:cb:47:65:66:f5:75:19:ef:
df:56:3c:8d:bb:90:12:a2:56:d4:0c:f1:cb:10:b1:62:44:66:
44:44:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:08 2026 by rpki-client