Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: Zx26+ScXt+xE7n6X5BT2IF/xb5C//UA1G5eQvFoIqF4=
Subject key identifier: 90:2F:A9:C7:9B:AC:BB:4D:F5:BD:8C:9D:0C:FF:83:15:F3:C1:68:C2
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019FA3E06D27347659262ED0EC9EECDE8CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 16D3
Signing time: Mon 27 Jul 2026 14:00:21 +0000
Manifest this update: Mon 27 Jul 2026 14:00:21 +0000
Manifest next update: Tue 28 Jul 2026 14:00:21 +0000
Files and hashes: 1: PmSCD4wgzFyU2AqXpshqRaKIPuc.asa (hash: 25QFICONcsuYG4Rf1aqXoo/9TTjRkFuSaxU7izwH5pM=)
2: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: ktUdtIGtyw0s4hTaznuCbPxTz7cEgcOUwnSLIGYfVsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:6d:27:34:76:59:26:2e:d0:ec:9e:ec:de:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jul 27 14:00:21 2026 GMT
Not After : Jul 28 14:00:21 2026 GMT
Subject: CN=902fa9c79bacbb4df5bd8c9d0cff8315f3c168c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:7d:dc:d8:9d:fe:3a:23:fc:f8:d2:6e:f7:
35:62:90:b8:36:7e:57:94:6a:9e:94:ec:6d:fa:0e:
b2:be:b9:33:5f:29:4b:7a:d4:a2:39:50:50:36:cf:
b7:11:5b:c3:9e:7c:00:0f:bf:f3:9d:d2:1a:00:7d:
e0:00:f6:a1:42:a7:4b:f1:fb:b1:26:d3:22:ee:1f:
ed:f3:3b:70:ce:3b:2d:a6:dc:b2:2a:08:9c:82:dc:
1f:3c:84:02:22:6c:ba:4c:16:e9:78:c9:9b:ac:67:
2d:31:3a:d0:13:63:4f:fa:9d:59:e2:80:52:5d:7e:
f2:23:d1:fd:02:3d:51:9d:b2:4b:71:33:91:8c:6c:
2c:f3:24:7f:17:12:26:93:f8:dd:84:f3:1e:8e:64:
ff:2e:65:ea:0e:1e:29:f9:e6:ba:ae:a9:ba:c5:f8:
72:03:17:94:75:cf:02:85:3c:63:74:d6:30:ff:63:
7e:04:36:60:20:96:67:03:5b:bf:dc:e0:cc:9b:96:
8e:ef:6d:f7:45:c3:df:16:40:85:5d:16:32:07:df:
9f:0a:9f:3c:0f:6c:d7:b7:94:7e:1d:b5:86:cc:fd:
c0:99:24:75:3d:c5:c9:e7:3a:3a:83:48:bf:d0:ee:
bc:b8:24:83:55:9a:35:11:80:4a:6f:58:e5:3b:b8:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:A9:C7:9B:AC:BB:4D:F5:BD:8C:9D:0C:FF:83:15:F3:C1:68:C2
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ad:df:c1:df:c7:f4:2b:f3:d9:ee:8b:02:3a:fa:9c:f2:9c:
4d:ad:27:49:32:52:a8:ca:04:73:1a:fd:c8:6a:01:b2:06:ca:
9c:b7:f1:fd:a3:70:66:c5:cd:24:ff:ef:75:e3:59:31:52:92:
6c:aa:11:ab:ef:0b:4c:87:7e:72:47:8c:0f:39:e1:17:b4:88:
2b:e9:fc:a3:6b:22:86:36:9f:04:17:f3:12:04:42:df:56:71:
de:0b:5c:c2:ce:00:57:6b:57:65:fe:ff:5d:c3:8f:4c:46:4f:
b7:78:0c:a8:c0:4a:5e:3e:66:1c:b0:89:e6:23:7c:ea:34:2e:
33:fb:a9:d2:2e:43:e9:9e:5f:83:c0:d2:df:de:6a:47:69:ac:
39:84:43:d8:c7:f5:43:4f:65:15:b5:8f:b3:7e:3c:81:e9:4c:
44:0d:2f:eb:53:6e:80:15:51:d0:05:3e:99:aa:83:d6:fc:99:
4f:76:47:83:c0:d1:d4:3b:cf:38:6d:c3:a7:ad:d8:61:de:80:
19:05:8b:d9:9c:94:ba:a6:39:3e:73:94:59:c0:5b:a9:35:53:
9a:b3:68:86:71:83:03:56:79:9c:f4:fd:33:36:3e:92:58:66:
a1:6d:d8:32:80:27:05:a9:c2:a7:83:a5:aa:3a:1c:b2:6b:84:
c8:f0:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:56:46 2026 by rpki-client