Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: OPljB2xgmjWetyvrvFRabUz+8peezN5rmPEGKzQ/NJ4=
Subject key identifier: 7E:9A:BD:57:E1:F9:99:77:51:45:FA:21:5C:13:27:6F:41:AE:BF:33
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 01A0E475A0C821655C17BD1B41BE0E8A40AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 03A7
Signing time: Sun 27 Sep 2026 20:01:49 +0000
Manifest this update: Sun 27 Sep 2026 20:01:49 +0000
Manifest next update: Mon 28 Sep 2026 20:01:49 +0000
Files and hashes: 1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: Z0Cd9q5lTRWlFd5BMqfkYUsKGzutYgBDCZkPw3YSL8Y=)
2: Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (hash: T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=)
3: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=)
4: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (hash: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:a0:c8:21:65:5c:17:bd:1b:41:be:0e:8a:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Sep 27 20:01:49 2026 GMT
Not After : Sep 28 20:01:49 2026 GMT
Subject: CN=7e9abd57e1f999775145fa215c13276f41aebf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:4c:0b:3a:6c:69:a4:f1:f6:da:cf:9f:f8:
11:79:fe:54:d4:a7:23:5f:de:8e:6d:e2:ff:1a:bf:
c8:d4:ce:b6:a3:1e:7e:9e:ce:6d:c8:94:42:72:8f:
3f:14:51:94:c8:d8:54:12:81:00:23:79:d7:19:f4:
bf:3a:d6:7e:ad:57:ba:f7:aa:83:d8:19:e9:15:da:
d3:91:c2:9d:3c:6d:17:64:e7:ab:03:af:4a:57:31:
e7:2a:62:3c:de:3b:53:45:e8:c9:06:74:4d:8e:2d:
44:f9:05:da:2f:e2:dd:34:68:db:22:8f:cf:c6:fc:
ac:b1:df:b3:69:87:6a:c8:8a:27:c6:fa:8a:2d:a5:
56:1f:d3:19:cf:2b:5b:b1:84:b4:50:04:a4:c9:6b:
ab:e0:ee:9d:e1:63:ca:6b:d2:5b:74:33:2a:a9:fa:
fd:a5:57:ca:0d:3a:a3:13:a3:7c:4c:73:98:d2:ec:
ca:04:46:4d:8c:50:76:c9:45:a1:6f:6a:92:71:23:
9e:da:91:97:e4:a8:b2:98:50:d2:5f:74:e9:90:0c:
dc:95:14:ed:a7:00:aa:0d:91:f1:60:62:4f:c0:74:
8b:e8:01:22:e6:50:7d:e5:e8:d5:fe:ed:f1:6f:c6:
d3:2c:8d:29:93:29:97:2b:26:87:9f:a0:cc:9c:b8:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:BD:57:E1:F9:99:77:51:45:FA:21:5C:13:27:6F:41:AE:BF:33
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:58:28:3c:13:db:bf:2c:cf:44:62:b2:9a:7e:a3:eb:61:9b:
54:39:a0:32:19:b5:ff:53:1a:88:10:fd:f5:a1:54:19:2e:65:
9d:3b:41:19:6d:1c:97:e5:6d:5f:cd:5b:c6:bc:19:7c:17:41:
11:e5:af:b5:75:9b:fb:09:32:23:8b:d7:95:02:38:46:9e:7a:
dd:ac:37:2f:5f:12:84:aa:28:44:04:23:e7:e1:a3:dc:63:c7:
d8:7b:99:d5:cc:90:64:65:e4:00:1b:91:e5:df:f6:c4:45:2e:
dc:1c:25:e0:c1:3d:4f:54:a4:ad:7f:d1:90:f5:7e:c2:b0:7f:
00:15:5b:f2:07:1f:14:30:de:59:46:93:0d:e8:d2:19:b3:e5:
5f:6d:7a:f6:fa:24:e4:61:07:a9:d0:2d:c0:75:a0:86:2d:76:
1e:20:6a:e0:0d:c9:1c:e3:9b:f2:c5:9e:ac:c0:ae:17:ae:99:
13:46:ea:af:61:f3:ea:24:3d:7d:85:e7:6e:b6:7b:71:55:ba:
9f:9f:92:56:04:18:0f:1c:65:b7:d4:6f:8c:3f:f6:e7:12:19:
ff:17:40:0e:71:1b:f8:fe:d1:16:c0:a8:d3:18:95:66:c9:84:
d7:a8:57:40:58:d8:86:cc:80:03:b3:53:f4:d4:a4:f1:95:ee:
c8:b6:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:13 2026 by rpki-client