Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: 8pDrdZYPCqLHI/6gn82Oy9/p4X2pbOxXh7jqKy6XZO4=
Subject key identifier: BE:73:83:0F:98:98:84:31:69:2C:77:87:4C:9A:EB:59:19:38:D9:F7
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019DB3C2E2B36C455192AC107718430C880B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 06D4
Signing time: Wed 22 Apr 2026 05:56:26 +0000
Manifest this update: Wed 22 Apr 2026 05:56:26 +0000
Manifest next update: Thu 23 Apr 2026 05:56:26 +0000
Files and hashes: 1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: B/PDTrLV/gMxAZBBM9oLs1e3BDmBhqF+cQzSJoE6NMw=)
3: nzoi5ELiYPVdX7dWLl29YPKr2do.roa (hash: XfKq9GRe31U7Cpf1qPZaJGW35vcUBv+Am8ozI+u8QQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c2:e2:b3:6c:45:51:92:ac:10:77:18:43:0c:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Apr 22 05:56:26 2026 GMT
Not After : Apr 23 05:56:26 2026 GMT
Subject: CN=be73830f98988431692c77874c9aeb591938d9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:a2:c6:a2:e9:f0:77:68:46:e5:52:80:ac:
fd:e9:c8:a7:fb:6b:ff:74:cd:f6:25:a8:85:11:7c:
4a:a0:b4:73:ea:a5:92:ac:bd:45:94:fd:9b:8f:1d:
ef:96:fd:92:09:d3:52:ac:20:d5:15:dd:ab:95:56:
9c:84:01:72:bc:25:78:22:da:3a:9a:7f:ec:3e:ec:
06:8c:e7:21:34:8b:87:e6:f2:91:dc:28:35:be:51:
0f:72:57:20:ec:90:7e:d0:5a:61:ff:12:6d:66:c1:
9c:07:ba:3c:d6:e9:60:3c:d9:21:17:0c:bc:3e:1a:
13:0c:1b:19:3b:82:7d:c7:43:6c:ba:c8:86:0d:2c:
9c:7c:e5:91:7b:12:bf:83:24:4f:9c:0d:8d:6a:47:
ff:cb:45:ce:eb:39:8b:d0:28:fd:6c:7e:38:5b:3a:
7e:8d:87:da:34:a8:5e:18:59:b1:bc:20:d7:f0:62:
4b:e6:4f:38:9b:9e:98:ab:b5:d6:48:33:cb:94:bb:
80:f4:91:d7:f8:ab:5b:82:bf:e6:8d:89:0c:e8:bf:
0f:a6:67:16:65:fb:8e:43:6b:d4:50:17:5f:df:20:
af:f0:48:96:1f:38:8d:18:2c:dd:69:ec:e3:94:ca:
f4:e2:e9:97:aa:c9:90:dd:11:c6:a0:55:f7:12:8a:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:83:0F:98:98:84:31:69:2C:77:87:4C:9A:EB:59:19:38:D9:F7
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:d2:29:53:94:8b:15:3b:64:20:43:a6:a8:33:24:24:93:
0e:6a:72:7b:b0:32:20:50:13:b9:cf:72:c2:01:26:22:3d:14:
a6:e4:da:35:ee:89:bb:53:04:86:e1:f3:7a:39:75:0d:23:c7:
13:5e:c6:d9:02:f5:b4:9d:d5:39:7c:18:02:ba:76:cd:09:37:
0c:4e:0b:59:a1:8f:bb:53:7e:69:f1:6e:e7:ac:8f:a3:03:fc:
cc:d2:a4:1c:cd:e7:a1:73:19:4a:b7:26:bd:84:44:46:1a:0b:
d5:30:ab:50:d1:ab:64:1d:1a:61:d1:c3:aa:61:9a:1e:25:ce:
ab:09:a6:d2:f3:33:2d:ad:93:10:b8:64:03:a3:e6:91:8f:34:
b8:19:a2:bf:70:7f:01:82:0c:e4:67:53:23:f5:6a:a2:d0:1d:
73:37:2e:5a:6b:c4:e0:b7:17:37:63:0d:73:ba:1d:79:9c:bf:
ca:83:43:ec:5e:9e:f5:60:b8:96:eb:3c:49:d3:78:34:a1:59:
ff:5d:10:8b:fc:0e:55:6d:f5:2d:88:6b:31:d8:e0:44:2d:e4:
d8:59:0e:96:31:ce:c9:75:e1:1b:e0:9b:a2:df:5c:ab:93:52:
97:51:1c:c4:09:e8:af:e2:a9:64:cf:63:bf:09:18:32:a7:95:
db:dc:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:00:28 2026 by rpki-client