Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft (raw, json)
Hash identifier: g0bqtjWd7m3/jU+XaJxUd0sD9LHq0yEhba4NuV1okeE=
Subject key identifier: 3A:09:8F:BF:80:13:01:8C:2B:FA:5B:B9:EC:90:19:AC:A1:EA:7C:94
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 01A02AA260389BC98C507011A976DC31F11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
Manifest number: CC
Signing time: Sat 22 Aug 2026 18:01:19 +0000
Manifest this update: Sat 22 Aug 2026 18:01:19 +0000
Manifest next update: Sun 23 Aug 2026 18:01:19 +0000
Files and hashes: 1: A57R9BRoN3kCl5qh8WaGx0tGaO0.roa (hash: S5yffNC54PqNZ1mJ9sOGMjtx2mUlj70FeAxaew+aYks=)
2: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (hash: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=)
3: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl (hash: yv7dnceUsL82ss4zry+XmeI7E1u2BsSQkW37w/6I/pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:a2:60:38:9b:c9:8c:50:70:11:a9:76:dc:31:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Aug 22 18:01:19 2026 GMT
Not After : Aug 23 18:01:19 2026 GMT
Subject: CN=3a098fbf8013018c2bfa5bb9ec9019aca1ea7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:17:e1:58:aa:f7:c9:9b:f2:ee:e8:ed:ce:
00:28:c3:19:f2:31:81:12:e7:b6:fa:38:2e:81:f7:
87:cc:f7:b8:c4:b4:e7:ec:30:da:cf:09:f0:ab:fd:
88:8c:b6:ea:4f:60:12:9b:96:de:5f:04:db:a6:59:
31:81:90:83:84:96:90:88:0b:2d:ed:52:39:6c:3f:
9f:ba:0c:6a:65:45:db:60:db:fa:60:6d:b0:05:8b:
ed:97:d5:f5:c0:c3:e1:4f:2f:53:cb:c7:cf:24:65:
24:f1:54:96:24:ef:e2:c1:d3:f1:63:ad:46:fc:3e:
0c:c2:1e:5b:c4:85:3b:f3:9d:58:16:68:b4:4c:67:
4e:ae:dd:e3:84:0a:65:b7:bd:46:e9:92:ee:6b:1f:
18:49:76:2a:38:39:6f:1e:0b:38:b3:5d:5a:e2:5b:
95:08:d1:04:b2:68:70:a4:ba:9e:5f:43:a0:18:ac:
78:43:9d:5d:9a:7f:91:60:3c:20:f2:9e:b9:93:0d:
ff:7a:4e:7d:f6:4f:e5:64:1b:11:f7:71:7c:4d:a8:
18:7e:23:2f:c7:28:ff:0c:9e:40:24:7e:bb:27:dc:
68:0c:a1:9b:f2:75:0e:20:5b:df:aa:f2:45:ec:3d:
ea:40:02:4f:ac:20:6f:a1:2e:34:28:b9:92:18:bc:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:8F:BF:80:13:01:8C:2B:FA:5B:B9:EC:90:19:AC:A1:EA:7C:94
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d1:88:64:cc:05:ef:12:75:32:df:02:ac:72:3a:00:dd:00:
52:c3:41:e1:91:9e:2c:95:b2:c5:c0:e1:12:5f:1f:87:4b:d7:
16:d8:6c:1e:44:da:94:34:76:63:0b:5b:44:f0:a9:12:4e:1c:
f8:4c:97:de:f3:e7:36:93:b4:23:a9:6d:66:a0:34:8f:36:d0:
21:e3:35:79:e1:db:38:6c:63:00:40:2b:d9:15:a5:34:9f:63:
5a:ce:0a:b9:5c:3c:87:f2:bb:30:3f:00:fc:de:27:d0:43:d1:
92:d6:61:8a:d4:07:1b:08:3c:47:f1:47:75:57:1b:ae:cd:d0:
ce:93:c5:e8:21:49:c9:17:22:e4:34:b4:06:f7:fa:07:7b:9a:
5c:5c:1d:a4:1d:34:bb:28:d7:c9:2f:f3:c4:0a:c5:25:9a:50:
f8:c0:f6:80:2e:c3:b1:c6:68:3e:56:55:3d:29:68:91:1e:d1:
1b:d8:95:10:af:77:4e:f0:84:c0:2c:68:0a:7a:ee:e9:cd:2b:
86:db:40:f4:84:29:97:29:4e:c3:bc:b0:bc:0d:85:6e:dc:dc:
33:4c:de:fd:74:51:7b:8c:12:56:40:eb:23:24:ad:2e:f1:86:
62:5c:31:0e:fd:05:52:2c:33:e7:ab:7b:60:96:69:38:70:31:
cd:e8:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:24:17 2026 by rpki-client