Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft (raw, json)
Hash identifier: bW1QF1cXkjRXfMp7oy26adufFEw+/HyIhV2hK1eVi18=
Subject key identifier: 4F:5C:F3:22:73:71:98:ED:65:91:9F:8D:07:DF:8D:0F:08:F0:0E:C7
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 019F40F64ACB8CA7B5C6EB56D670C84EFD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
Manifest number: 53
Signing time: Wed 08 Jul 2026 09:01:50 +0000
Manifest this update: Wed 08 Jul 2026 09:01:50 +0000
Manifest next update: Thu 09 Jul 2026 09:01:50 +0000
Files and hashes: 1: A57R9BRoN3kCl5qh8WaGx0tGaO0.roa (hash: S5yffNC54PqNZ1mJ9sOGMjtx2mUlj70FeAxaew+aYks=)
2: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (hash: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=)
3: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl (hash: Kq0Zz1LPBnvnMjelqqv8v/KExPzeLbLfza++HwM5SqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:f6:4a:cb:8c:a7:b5:c6:eb:56:d6:70:c8:4e:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Jul 8 09:01:50 2026 GMT
Not After : Jul 9 09:01:50 2026 GMT
Subject: CN=4f5cf322737198ed65919f8d07df8d0f08f00ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:06:09:73:8a:df:65:8c:b4:b5:02:36:4f:
2c:85:90:8d:4c:ec:33:2a:13:0e:62:6d:c2:33:c2:
3a:91:5d:ce:ba:4f:a7:07:26:68:91:db:95:c6:6a:
88:e8:ec:87:1b:85:7c:1d:33:1c:b1:07:57:f9:ed:
e7:f6:08:69:0e:e2:11:27:fa:8b:41:a9:2b:be:f7:
44:e5:4e:7c:a7:49:f2:cb:ed:74:af:9d:a2:3a:69:
01:61:80:79:b3:77:26:0c:bb:16:1f:9f:fe:f6:1f:
1f:bd:4a:6d:6f:02:e4:47:5a:8b:52:50:d2:bb:7e:
49:38:85:88:b6:99:63:b1:84:77:7b:59:6c:11:22:
b8:75:a0:5a:c1:bd:16:86:86:20:85:f0:c3:33:f8:
5f:61:e7:f0:28:86:e5:d6:f1:53:1f:1b:64:83:6b:
47:2c:11:4f:8d:53:40:58:64:f1:73:cc:25:b9:52:
2c:28:8f:ae:b5:99:d0:6e:d8:48:28:1d:40:68:58:
c9:14:cb:28:76:0c:47:5d:66:c3:4d:8d:77:e1:cc:
e2:45:93:72:99:d0:ff:cf:c1:07:29:0e:94:7a:59:
b8:a3:e9:1a:ac:95:b1:b7:df:32:9f:e7:ad:c4:f1:
ef:b8:4b:fb:5c:ee:ac:c6:75:78:61:ad:a5:4d:a3:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:F3:22:73:71:98:ED:65:91:9F:8D:07:DF:8D:0F:08:F0:0E:C7
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:c2:de:62:a1:1d:5c:e7:9e:fd:55:14:cc:e1:ab:7e:db:
eb:03:c2:a1:81:4b:4e:4b:44:85:4a:8e:fb:ef:11:a7:24:af:
45:74:22:59:7f:6a:b2:00:29:52:af:a1:88:66:d2:15:43:23:
38:09:ac:f6:35:b3:73:0f:c9:83:17:c2:af:3a:be:7e:2d:19:
68:f6:2d:f5:10:a3:56:d8:27:24:be:d1:09:ee:8b:16:e7:92:
30:ba:b6:f7:a9:38:06:2b:cc:fe:47:72:37:86:14:a9:dc:eb:
ea:ed:61:4f:bd:b2:ac:45:57:58:6f:2c:cf:fe:94:5b:c0:1e:
75:f1:9f:7c:79:e6:ea:a3:1f:71:14:84:0f:b1:52:86:12:d6:
e1:df:86:91:6d:08:a3:20:da:56:15:c5:c7:4c:55:ff:03:1b:
84:0a:35:54:7d:c3:bd:c6:06:67:28:e3:44:3a:65:8d:62:87:
23:af:02:d2:4b:8b:52:fe:da:95:f2:b0:07:04:bf:db:f4:a1:
6b:37:22:69:ad:7c:33:20:e5:b5:05:44:ff:cf:3e:22:24:07:
85:34:6f:07:f6:c2:e0:e9:51:a5:a4:0a:a2:77:83:31:43:33:
d4:ff:f9:90:14:2c:fc:76:9b:ce:8c:e0:3a:47:03:11:a7:b1:
bf:2c:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:44:06 2026 by rpki-client