Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: zYm314W7JngKsZKvTx6L7gfomDKBSB8+NY4CBcL1rDw=
Subject key identifier: 65:C9:D1:A6:DC:6F:D7:22:BC:4E:4B:7C:7B:47:9A:BE:EE:1F:55:4F
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019F9135B494A1A30243F3B8D7154066B076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 05AC
Signing time: Thu 23 Jul 2026 23:00:43 +0000
Manifest this update: Thu 23 Jul 2026 23:00:43 +0000
Manifest next update: Fri 24 Jul 2026 23:00:43 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: dQ4vAhkKI4htin9t6abe0s5m9MNVv+euzrEJAjZF7IY=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b4:94:a1:a3:02:43:f3:b8:d7:15:40:66:b0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jul 23 23:00:43 2026 GMT
Not After : Jul 24 23:00:43 2026 GMT
Subject: CN=65c9d1a6dc6fd722bc4e4b7c7b479abeee1f554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:4b:e8:1a:1f:c1:96:45:ce:23:c0:86:7b:
ee:ba:21:be:50:ec:65:65:2e:5f:85:b7:01:01:be:
8b:07:0d:ae:58:55:1b:45:45:d5:36:27:5c:cb:93:
bf:4a:96:b4:8c:3f:4a:64:8e:64:98:31:3c:66:8e:
75:a4:e5:ba:ad:5e:d7:4f:35:10:d5:2b:b6:03:3e:
18:78:4f:19:54:ec:6e:77:b1:d0:50:27:c1:ac:87:
35:ea:b6:8e:c4:cf:19:61:cf:4d:36:fa:91:fc:0e:
e8:8f:38:ed:11:be:2e:c5:9c:1a:43:54:62:da:91:
22:ef:22:c9:4f:2b:80:ae:4e:91:5e:26:26:7a:00:
19:45:af:2f:83:2f:a1:c7:ae:0e:d2:f4:23:4e:00:
93:97:61:3d:11:2c:9c:f1:6d:a2:22:1d:0a:7e:f3:
72:37:b4:7c:ac:f7:9a:43:3d:2c:e3:f0:8b:22:9f:
79:1b:7a:85:27:49:db:d4:38:70:cf:fa:fd:ea:a3:
86:0a:33:9b:6d:d9:38:4d:51:59:25:92:d0:ec:87:
46:6c:92:35:c0:8a:fe:dd:f1:d0:48:31:12:8c:69:
b4:27:9a:f2:24:24:34:a6:c7:41:fe:9c:62:05:3e:
ec:0b:60:54:24:78:27:1b:e1:16:a6:aa:b6:83:89:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:D1:A6:DC:6F:D7:22:BC:4E:4B:7C:7B:47:9A:BE:EE:1F:55:4F
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:00:e4:65:f6:1a:0d:f5:f1:86:a3:f0:c8:9f:dc:09:86:67:
eb:b5:3f:24:50:0f:84:e9:d3:a8:59:12:09:a1:87:13:6e:69:
5e:a6:96:85:fb:da:f1:9f:a8:23:df:24:93:67:7d:18:fe:a0:
1d:e2:b0:c6:9e:8a:94:1b:0a:15:39:68:51:89:a4:59:11:c7:
3b:69:86:32:c5:ac:a5:fc:d3:c3:23:1d:83:d4:4d:68:4d:52:
30:94:10:34:a6:5a:a7:b5:fb:c6:75:79:61:de:b5:f7:dc:f6:
ff:0d:e0:16:6e:1d:72:87:c4:10:2c:57:3c:3a:d4:27:da:06:
e0:fe:54:a8:93:f5:08:08:c9:59:60:f6:43:c3:8d:1f:c7:ad:
9f:f3:93:b4:5e:35:b3:3d:ae:c5:a5:af:b5:e3:b2:1c:05:fc:
6d:b6:0d:d0:86:0b:71:4c:f2:69:7a:ee:8c:2a:a0:0f:8f:99:
7f:bf:d1:f8:7d:17:e4:92:3a:fb:a0:1c:32:50:d2:1e:bd:d7:
18:c6:a1:52:f0:f4:a8:90:1d:8e:f3:f1:d9:c3:f4:89:0a:be:
bd:32:60:c3:f5:47:13:78:8b:a4:95:b6:dc:54:1b:44:ed:c7:
4b:1c:06:21:bf:3a:28:b4:b2:b9:6b:35:56:a7:bf:c4:d6:66:
37:81:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:50 2026 by rpki-client