Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: JgEKO3ajBPy07gUSLZ3V66YvTqYePDhTYhHGBQjoOts=
Subject key identifier: 5D:21:55:D7:87:21:AE:23:07:8E:A0:E4:41:80:FA:AD:88:7A:85:7D
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019DCF3DD9FC4A220BB1B039E89BA1952164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 02D9
Signing time: Mon 27 Apr 2026 14:00:30 +0000
Manifest this update: Mon 27 Apr 2026 14:00:30 +0000
Manifest next update: Tue 28 Apr 2026 14:00:30 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: 8EW9Sfg3Nz2lWZthFscCJgFvVVRqL5YKQ9ZEDiqJGng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:d9:fc:4a:22:0b:b1:b0:39:e8:9b:a1:95:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Apr 27 14:00:30 2026 GMT
Not After : Apr 28 14:00:30 2026 GMT
Subject: CN=5d2155d78721ae23078ea0e44180faad887a857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:40:f3:69:da:b7:c5:99:e0:ee:48:dc:c7:
d5:5d:c3:3a:cc:0a:ad:d0:c8:d6:90:4b:94:a3:ec:
7d:40:a3:3d:2c:d6:f7:d4:ea:45:2b:70:39:07:c4:
b3:66:3a:ee:fe:86:ab:fb:56:bc:d1:12:98:94:92:
b3:00:a4:e4:37:e2:ff:5a:70:be:1d:18:fe:5e:73:
36:b9:d8:18:d1:ce:3d:10:d5:80:01:a4:30:ba:c5:
ae:89:45:a6:db:d7:81:1d:23:58:10:c9:39:66:9e:
e8:5e:a9:d1:82:a7:a5:8d:a0:ec:5c:2d:e1:e9:85:
92:32:eb:14:06:cc:16:79:15:f5:3c:cd:7e:c7:a3:
33:c6:e6:ca:eb:43:61:05:7f:c5:cb:35:29:3d:5a:
93:8d:e6:78:26:61:93:28:57:b2:f0:e3:65:20:7b:
a3:73:5b:89:b4:97:ef:60:74:31:0f:ae:ac:a3:96:
36:3c:77:92:ee:c7:12:8c:ad:65:0d:06:48:6a:9a:
a0:ea:fc:05:1b:0d:cd:4f:44:b2:87:a7:a8:25:35:
eb:4c:0a:d2:20:bc:fa:53:d5:9e:09:d8:99:20:82:
0c:79:8c:c8:eb:ee:ea:ed:0a:8a:63:a0:08:c5:82:
0a:2d:4a:f8:c4:f7:80:ee:49:22:9d:5c:85:aa:21:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:55:D7:87:21:AE:23:07:8E:A0:E4:41:80:FA:AD:88:7A:85:7D
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:e6:a8:c3:53:33:e3:99:8d:10:d6:e3:9f:f7:83:91:1a:
0f:a3:c1:ca:59:49:b1:33:30:08:15:1f:f8:eb:50:aa:9f:ed:
e0:27:e2:a7:97:65:37:3d:5f:02:36:5e:0d:78:94:79:d2:f2:
0b:3b:61:55:a1:8f:0f:19:ea:19:7b:29:61:de:b7:93:62:ee:
b4:66:0c:f1:9d:75:a2:c5:29:ec:97:85:0a:28:a7:8e:a5:7a:
75:a8:c6:db:b8:c4:a0:7f:11:7d:6a:70:4c:f8:2e:7f:47:d3:
3b:c0:db:84:f8:36:ce:7e:c5:3c:61:6f:68:2c:46:1b:57:4d:
2b:c2:c6:81:ab:b0:07:5d:0c:59:e7:d6:54:aa:01:21:3b:f2:
86:b9:d5:18:de:ca:d7:d3:68:d8:d3:74:56:49:35:e0:81:08:
aa:55:e6:f2:5e:6c:76:47:8f:e5:c6:04:60:b0:18:d4:63:8c:
54:fc:e9:fa:6e:de:ac:00:cf:2e:e4:62:07:4e:c9:b6:5a:c3:
72:8f:9f:8b:99:da:df:02:48:9f:cf:76:96:2c:7a:4a:32:53:
3f:ec:82:10:ee:66:96:e3:1f:7c:74:4d:f2:d4:fd:38:2d:2f:
78:03:a9:46:15:6a:0a:2b:e3:40:ca:0c:d2:07:1f:4d:25:76:
3c:c4:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:00 2026 by rpki-client