Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: aB9+HLznDIEIRUfcoT976v/+TCptck3x0CrBlwcE70s=
Subject key identifier: 02:5A:84:5A:B3:4B:55:CB:1D:5E:FC:F4:5F:2E:3C:5B:C2:B1:46:97
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019EBAD9309C106660C624CD35F66BBF464B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 0353
Signing time: Fri 12 Jun 2026 08:00:56 +0000
Manifest this update: Fri 12 Jun 2026 08:00:56 +0000
Manifest next update: Sat 13 Jun 2026 08:00:56 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: G84dMyyGxNdUAJ5IsXeow0+SsDYZB1ipv+S9cotb03o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:d9:30:9c:10:66:60:c6:24:cd:35:f6:6b:bf:46:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Jun 12 08:00:56 2026 GMT
Not After : Jun 13 08:00:56 2026 GMT
Subject: CN=025a845ab34b55cb1d5efcf45f2e3c5bc2b14697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:8f:ea:23:6f:2a:02:76:55:6f:f3:ee:f2:
45:a2:cc:5f:b1:b3:68:cf:4d:d1:22:6b:86:73:dd:
09:04:66:66:0e:d4:f8:d1:24:72:d7:65:a8:b4:33:
69:f2:cc:7c:d8:da:78:3e:3d:b0:0f:59:26:e5:50:
a0:3e:aa:10:38:8f:53:82:a0:1a:38:bb:50:bc:10:
32:ae:81:8e:13:e0:f3:94:94:32:cd:2b:bd:aa:f4:
5d:2c:4e:e5:20:1c:b0:44:13:e0:4a:08:52:ec:f1:
e3:a3:e0:ab:b5:02:29:10:08:e4:c3:7a:12:47:97:
b9:7d:42:cd:4b:03:7c:54:d4:f8:21:79:79:37:57:
27:80:c3:7f:cf:4e:af:ae:6c:5e:99:1b:fc:8d:47:
c1:ba:e9:77:ff:c3:3a:6a:fd:66:29:5e:27:d6:0d:
de:21:3a:b9:d4:21:90:c3:49:b0:69:da:f4:73:65:
0d:4e:e0:61:8e:d8:d1:a2:93:be:d7:99:da:0b:76:
e2:48:57:4b:d9:32:25:f6:1a:e9:14:35:39:85:34:
6a:04:6f:f0:20:d5:ee:24:0d:47:d9:bd:c2:cd:38:
01:88:ed:40:26:da:76:69:48:33:be:e7:a1:62:87:
28:f1:92:10:07:b2:60:4c:99:e8:24:d9:db:d3:3a:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:84:5A:B3:4B:55:CB:1D:5E:FC:F4:5F:2E:3C:5B:C2:B1:46:97
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:fe:d4:cd:6a:6f:90:6d:47:47:9d:d3:46:30:27:c0:b6:
41:7e:ed:27:05:66:16:95:7b:88:0a:22:78:e3:e5:d6:14:3b:
be:db:f1:a9:07:4d:7e:81:ee:b9:44:5b:bc:aa:49:6b:24:1c:
00:0a:8e:fb:37:43:56:14:6d:c7:ec:ca:a2:4d:64:77:d5:5f:
4a:b7:52:34:f6:77:6a:27:64:26:05:57:b8:d6:b9:b0:a4:92:
e0:7a:e9:f2:77:98:78:35:94:64:3f:9f:77:f2:df:96:a4:29:
bb:15:fb:0f:4a:d1:5f:78:18:49:c7:03:b8:8a:38:b6:7f:9c:
67:3a:b6:58:10:eb:d7:a5:d5:a6:f1:be:11:34:79:43:20:32:
0d:b7:e4:61:ce:6d:41:54:51:bf:41:80:d6:7d:16:ea:3f:87:
17:8c:57:7b:27:b7:42:b0:95:44:9f:73:54:f7:14:34:ad:95:
05:6f:d2:4c:83:f5:7b:b3:27:0c:13:b2:f5:a8:d1:88:5e:3c:
48:06:c4:70:04:c0:06:2c:ff:f0:17:73:d7:7f:30:d6:49:42:
99:6e:25:91:3a:07:20:68:8f:4f:ac:5e:68:b6:54:68:36:1c:
eb:13:4c:c5:82:e7:9d:9f:b2:3c:8e:d4:63:4b:39:10:89:31:
12:e1:f4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ662TCcEGZgxiTNNfZrv0ZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk
OTc4ZWEwHhcNMjYwNjEyMDgwMDU2WhcNMjYwNjEzMDgwMDU2WjAzMTEwLwYDVQQD
EygwMjVhODQ1YWIzNGI1NWNiMWQ1ZWZjZjQ1ZjJlM2M1YmMyYjE0Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKSP6iNvKgJ2VW/z7vJFosxfsbNo
z03RImuGc90JBGZmDtT40SRy12WotDNp8sx82Np4Pj2wD1km5VCgPqoQOI9TgqAa
OLtQvBAyroGOE+DzlJQyzSu9qvRdLE7lIBywRBPgSghS7PHjo+CrtQIpEAjkw3oS
R5e5fULNSwN8VNT4IXl5N1cngMN/z06vrmxemRv8jUfBuul3/8M6av1mKV4n1g3e
ITq51CGQw0mwadr0c2UNTuBhjtjRopO+15naC3biSFdL2TIl9hrpFDU5hTRqBG/w
INXuJA1H2b3CzTgBiO1AJtp2aUgzvuehYoco8ZIQB7JgTJnoJNnb0zo4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJahFqzS1XLHV789F8uPFvCsUaXMB8GA1UdIwQY
MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt
N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk
LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFT+1M1q
b5BtR0ed00YwJ8C2QX7tJwVmFpV7iAoieOPl1hQ7vtvxqQdNfoHuuURbvKpJayQc
AAqO+zdDVhRtx+zKok1kd9VfSrdSNPZ3aidkJgVXuNa5sKSS4Hrp8neYeDWUZD+f
d/LflqQpuxX7D0rRX3gYSccDuIo4tn+cZzq2WBDr16XVpvG+ETR5QyAyDbfkYc5t
QVRRv0GA1n0W6j+HF4xXeye3QrCVRJ9zVPcUNK2VBW/STIP1e7MnDBOy9ajRiF48
SAbEcATABiz/8Bdz138w1klCmW4lkToHIGiPT6xeaLZUaDYc6xNMxYLnnZ+yPI7U
Y0s5EIkxEuH02g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:14:36 2026 by rpki-client