Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: CkXmBYWDB4q9jWPt8E1t/xMLyT5sfCl4AspYkPALtCs=
Subject key identifier: 93:9D:C5:C3:01:37:7D:B4:35:6D:AF:C6:24:5D:7C:74:F6:B4:57:88
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019D26CD450C66C2D46B34C4783928375DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 021D
Signing time: Wed 25 Mar 2026 21:01:19 +0000
Manifest this update: Wed 25 Mar 2026 21:01:19 +0000
Manifest next update: Thu 26 Mar 2026 21:01:19 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: mD8RCP/Yk0sDIpGtVcFf9GesoR+RGIBhuESPazveJqI=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:45:0c:66:c2:d4:6b:34:c4:78:39:28:37:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Mar 25 21:01:19 2026 GMT
Not After : Mar 26 21:01:19 2026 GMT
Subject: CN=939dc5c301377db4356dafc6245d7c74f6b45788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:13:93:b5:cb:78:c2:ca:2b:cc:c2:dc:d7:
16:0c:5b:41:14:08:2b:6b:5d:c7:25:6c:6a:76:80:
43:48:31:1b:15:56:eb:a6:da:6c:5b:ce:0a:eb:69:
bf:6f:3b:e3:ce:b2:9e:f0:de:07:0f:98:e5:1e:ed:
5d:1c:84:68:65:3c:ff:4b:d2:da:62:a5:9c:72:7c:
3d:6d:87:b1:9e:2f:dd:d5:67:34:80:93:2c:82:78:
2a:29:8d:bd:5e:11:d1:7f:ea:e3:49:59:3b:47:06:
4c:64:33:3d:2e:fc:6a:54:09:21:0c:df:f8:48:da:
ed:b4:f5:51:28:68:30:9d:b2:06:52:d5:76:e7:2d:
75:22:63:63:e2:00:1b:b1:eb:0b:97:a2:8c:47:8c:
5e:78:e2:dc:45:e2:56:98:97:3f:fd:fb:1d:3d:66:
40:80:b5:0c:e3:34:c9:5d:a4:4b:c9:6b:88:49:d8:
3f:2c:b6:93:65:02:a2:4e:bb:78:6c:7e:88:e3:80:
a6:89:eb:71:f3:55:d4:1d:5a:b4:4d:ae:95:cf:88:
18:58:43:cb:38:2e:27:cd:a0:04:a0:e3:21:04:08:
fd:4c:6a:af:96:9a:f6:4d:5c:a9:04:28:a0:ca:a3:
f6:34:6a:68:bb:b5:95:65:12:c6:4a:6a:e8:46:9c:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:C5:C3:01:37:7D:B4:35:6D:AF:C6:24:5D:7C:74:F6:B4:57:88
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:69:fa:e7:57:bb:b4:ab:74:74:0d:76:2a:d6:ee:41:f3:
49:4a:8e:9b:45:a2:9a:62:e0:d1:39:25:ab:c1:c2:24:4c:b2:
e8:69:53:a5:b6:22:66:d6:95:93:8d:7b:84:3a:61:bd:b8:8f:
8c:72:36:ee:b5:92:b5:bd:98:d5:3e:1a:92:db:42:e1:25:80:
aa:d6:85:ab:63:57:44:3d:06:67:9b:2d:8b:49:d9:57:68:90:
df:01:6f:30:e9:e0:e0:91:b5:e0:92:2f:b2:c0:60:5a:3e:3a:
1e:a1:00:6f:7a:97:64:2a:3e:d1:c8:08:c5:92:d1:57:5a:49:
de:0c:5c:40:04:16:ab:a2:24:6e:c7:56:ec:24:74:9c:e9:37:
97:29:5c:f4:50:29:b1:d3:a6:0d:75:24:32:5f:0e:22:51:84:
8e:4e:ab:d4:f0:15:4a:6c:34:0f:1e:d4:50:c3:a4:7f:15:aa:
a8:59:29:ed:4b:9e:4a:cf:d3:85:9f:16:24:e7:ac:d0:23:3a:
94:76:38:27:1c:c8:54:8d:c9:52:58:2a:25:2d:9e:75:70:c4:
79:99:07:fc:fe:d4:21:5e:b2:a4:18:37:5e:1f:e7:b9:9b:c7:
a7:b8:08:c0:a2:df:0a:c7:86:3c:7a:7a:b8:81:ff:4d:02:7c:
8c:d6:47:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUUMZsLUazTEeDkoN13NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmY4YzZmYjdmNTQ3MTcwYjY3OTYyNTc1Y2YyYmE4ZWQx
NWU1NDgwHhcNMjYwMzI1MjEwMTE5WhcNMjYwMzI2MjEwMTE5WjAzMTEwLwYDVQQD
Eyg5MzlkYzVjMzAxMzc3ZGI0MzU2ZGFmYzYyNDVkN2M3NGY2YjQ1Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu0Tk7XLeMLKK8zC3NcWDFtBFAgr
a13HJWxqdoBDSDEbFVbrptpsW84K62m/bzvjzrKe8N4HD5jlHu1dHIRoZTz/S9La
YqWccnw9bYexni/d1Wc0gJMsgngqKY29XhHRf+rjSVk7RwZMZDM9LvxqVAkhDN/4
SNrttPVRKGgwnbIGUtV25y11ImNj4gAbsesLl6KMR4xeeOLcReJWmJc//fsdPWZA
gLUM4zTJXaRLyWuISdg/LLaTZQKiTrt4bH6I44Cmietx81XUHVq0Ta6Vz4gYWEPL
OC4nzaAEoOMhBAj9TGqvlpr2TVypBCigyqP2NGpou7WVZRLGSmroRpzhQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOdxcMBN320NW2vxiRdfHT2tFeIMB8GA1UdIwQY
MBaAFC+/jG+39UcXC2eWJXXPK6jtFeVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzIt
ZjFlNGYyMWQ4NzAyLzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzItZjFlNGYyMWQ4NzAy
LzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAlp+udX
u7SrdHQNdirW7kHzSUqOm0WimmLg0Tklq8HCJEyy6GlTpbYiZtaVk417hDphvbiP
jHI27rWStb2Y1T4akttC4SWAqtaFq2NXRD0GZ5sti0nZV2iQ3wFvMOng4JG14JIv
ssBgWj46HqEAb3qXZCo+0cgIxZLRV1pJ3gxcQAQWq6IkbsdW7CR0nOk3lylc9FAp
sdOmDXUkMl8OIlGEjk6r1PAVSmw0Dx7UUMOkfxWqqFkp7UueSs/ThZ8WJOes0CM6
lHY4JxzIVI3JUlgqJS2edXDEeZkH/P7UIV6ypBg3Xh/nuZvHp7gIwKLfCseGPHp6
uIH/TQJ8jNZHqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:34 2026 by rpki-client