
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: VW6KCsOovjxr20yeItESj/K6Utuw9lMdB1HXSt1pW5k=
Subject key identifier: 4D:F2:62:39:5A:F5:C5:69:62:1B:67:97:9E:06:96:17:1F:5C:14:D0
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019CCABFC9841563B13458FAEA2581422916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 065B
Signing time: Sun 08 Mar 2026 00:01:32 +0000
Manifest this update: Sun 08 Mar 2026 00:01:32 +0000
Manifest next update: Mon 09 Mar 2026 00:01:32 +0000
Files and hashes: 1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: +cgMKh0DwOxkUf9h0vPxiXuTbepgvvpyxpkqtw8OY+M=)
3: okNjrlPSLJ97WbWID906BW9GXVE.roa (hash: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:bf:c9:84:15:63:b1:34:58:fa:ea:25:81:42:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Mar 8 00:01:32 2026 GMT
Not After : Mar 9 00:01:32 2026 GMT
Subject: CN=4df262395af5c569621b67979e0696171f5c14d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:96:0f:ed:f4:29:3e:be:41:92:b6:b4:40:
88:c5:40:fb:95:b7:1d:ca:48:0b:d3:bb:a7:11:a8:
82:0b:9b:8d:35:99:9e:f1:0f:2a:51:60:c8:02:82:
8e:b7:6b:3a:79:21:93:6e:24:f0:6a:2f:d6:b6:7a:
f7:71:26:8f:2d:78:72:38:52:9b:1f:7a:b3:17:13:
ea:4c:e3:9f:b7:3c:d7:d4:16:0b:5e:ce:4a:a3:fc:
72:2d:29:38:78:8d:8c:c8:6f:db:d9:c8:82:f8:c6:
f5:a8:48:b6:b3:97:b6:97:b6:13:3d:c2:a4:01:65:
47:0a:94:3f:95:3e:21:ee:97:e5:39:22:cc:aa:57:
27:ae:f0:8a:14:06:39:b9:45:d8:7b:91:db:4c:4a:
ef:bb:a5:95:e0:77:9b:ac:57:9f:e9:55:f0:8c:59:
35:e5:9e:ec:e0:11:fb:81:09:cc:1e:6f:06:49:56:
9c:41:3d:85:51:8d:ce:a3:d0:2a:b8:da:45:46:5e:
77:6a:e3:73:93:31:04:87:62:c1:9b:6d:3d:87:4e:
2d:59:8f:9f:13:02:c8:53:ea:35:23:5e:fe:5f:24:
b5:08:fa:7b:51:4d:1f:d9:fb:1f:0e:3d:f7:8d:ff:
c2:73:b1:2a:cb:1e:00:c1:f7:0d:bb:b1:f3:f7:a1:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:62:39:5A:F5:C5:69:62:1B:67:97:9E:06:96:17:1F:5C:14:D0
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:78:df:6a:0d:d9:a9:35:d8:3f:7b:f7:cc:89:c8:20:54:f4:
4b:70:f7:62:e4:9d:84:b4:00:43:1a:3e:42:4d:5b:0d:b4:d8:
4c:93:95:1b:90:9d:26:82:91:cb:14:c6:36:04:cf:cc:a0:a7:
48:43:8e:ee:3d:4a:d1:84:f7:6d:e6:05:20:ff:2c:2c:0c:33:
0a:f1:ac:a8:24:f7:da:76:6c:a1:4d:25:c2:8d:88:9b:b9:af:
45:8b:a0:0e:93:cd:04:bd:0a:23:2f:2d:98:b8:31:4a:88:58:
e3:84:e2:cf:59:fa:07:9e:b1:e1:23:5a:3d:03:87:1c:7d:5a:
fd:15:a6:1d:60:66:16:39:da:ab:4b:c7:78:dc:e0:32:7c:08:
49:a3:a1:8e:0a:2a:c0:82:78:88:26:d2:bd:8f:8d:7c:cd:eb:
a7:fd:e3:c9:2c:db:e9:30:76:a4:5f:4a:cc:20:e1:ec:7d:b7:
c5:c5:f6:fb:6d:8d:dc:89:84:dd:69:0d:f2:13:fd:0f:ce:9e:
79:38:ea:6c:02:cc:74:25:1b:12:48:0a:e9:16:4a:42:fd:a1:
64:b8:36:c8:f5:91:4f:b1:8c:5b:fc:38:f5:44:ab:9f:44:4f:
35:1a:9f:57:31:51:d7:e3:05:c6:7a:00:ad:d8:b4:83:f8:2b:
a6:ac:8d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzKv8mEFWOxNFj66iWBQikWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjYwMzA4MDAwMTMyWhcNMjYwMzA5MDAwMTMyWjAzMTEwLwYDVQQD
Eyg0ZGYyNjIzOTVhZjVjNTY5NjIxYjY3OTc5ZTA2OTYxNzFmNWMxNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3WWD+30KT6+QZK2tECIxUD7lbcd
ykgL07unEaiCC5uNNZme8Q8qUWDIAoKOt2s6eSGTbiTwai/Wtnr3cSaPLXhyOFKb
H3qzFxPqTOOftzzX1BYLXs5Ko/xyLSk4eI2MyG/b2ciC+Mb1qEi2s5e2l7YTPcKk
AWVHCpQ/lT4h7pflOSLMqlcnrvCKFAY5uUXYe5HbTErvu6WV4HebrFef6VXwjFk1
5Z7s4BH7gQnMHm8GSVacQT2FUY3Oo9AquNpFRl53auNzkzEEh2LBm209h04tWY+f
EwLIU+o1I17+XyS1CPp7UU0f2fsfDj33jf/Cc7Eqyx4AwfcNu7Hz96FDcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3yYjla9cVpYhtnl54GlhcfXBTQMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHjfag3Z
qTXYP3v3zInIIFT0S3D3YuSdhLQAQxo+Qk1bDbTYTJOVG5CdJoKRyxTGNgTPzKCn
SEOO7j1K0YT3beYFIP8sLAwzCvGsqCT32nZsoU0lwo2Im7mvRYugDpPNBL0KIy8t
mLgxSohY44Tiz1n6B56x4SNaPQOHHH1a/RWmHWBmFjnaq0vHeNzgMnwISaOhjgoq
wIJ4iCbSvY+NfM3rp/3jySzb6TB2pF9KzCDh7H23xcX2+22N3ImE3WkN8hP9D86e
eTjqbALMdCUbEkgK6RZKQv2hZLg2yPWRT7GMW/w49USrn0RPNRqfVzFR1+MFxnoA
rdi0g/grpqyN+A==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:48:55 2026 by rpki-client