Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier: ePUvTDDScj6hln+lIO7cFxkDdm08aSGnTwGx6mP4BjA=
Subject key identifier: 79:9F:38:E0:09:DA:88:2B:21:72:14:96:A1:9A:A8:DF:AA:77:D3:D8
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial: 019D27DF77169F6003DD54C62FE501EEF2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number: 0A31
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: KSypKqvRtc3GW5B8Ea+pHEHBoP8pcLDzhKZpkdBofFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:77:16:9f:60:03:dd:54:c6:2f:e5:01:ee:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=799f38e009da882b21721496a19aa8dfaa77d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:f9:54:40:6a:1a:2b:ba:31:bb:58:16:a3:
be:6f:3c:ee:0d:27:0e:a9:fb:fb:8a:a8:bc:55:5b:
a9:27:e2:bc:d5:a9:4a:5b:bb:cb:99:ed:54:3c:cf:
df:6d:61:fa:86:09:8b:97:e9:60:44:cc:83:ca:ce:
2a:57:b3:8f:1a:c3:cd:a1:92:f3:25:94:d4:fa:69:
51:56:fe:72:ff:ee:d9:7f:ed:3c:33:1b:81:a9:ed:
26:82:9e:8e:65:06:77:98:c4:04:29:e4:7e:21:02:
4b:6b:c7:13:ca:9d:e6:70:47:32:80:c3:86:a3:38:
d6:50:20:6d:24:e4:81:0c:e1:cc:ce:b8:ef:1e:44:
64:55:6d:70:77:86:86:5d:7e:ad:df:5c:f3:e5:01:
a3:61:01:7b:12:7c:07:ca:46:e8:d8:72:57:66:91:
78:30:e9:2b:52:d8:19:57:af:56:85:90:3b:4c:16:
2a:21:9a:d5:86:8d:5a:65:56:3a:2d:ad:ae:49:07:
04:d6:60:cc:83:a4:1f:61:dd:df:f4:92:1d:b3:17:
ec:a2:68:c7:0b:0a:87:eb:92:eb:37:83:63:ee:21:
fe:62:5d:e5:64:be:27:1c:b4:fd:6b:fc:36:48:e0:
68:13:84:97:0b:7f:13:2e:ad:1f:00:cf:2e:06:91:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9F:38:E0:09:DA:88:2B:21:72:14:96:A1:9A:A8:DF:AA:77:D3:D8
X509v3 Authority Key Identifier:
keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:68:df:07:5c:7f:4c:c6:4f:d7:44:7e:21:a2:92:b4:e2:
a8:00:f2:df:ac:01:94:12:03:95:b9:f8:56:fa:08:9b:cd:ad:
ab:8e:9a:46:a5:04:50:ff:2f:fa:2f:6a:63:d3:66:93:a4:43:
65:63:1c:09:76:dc:d6:ba:12:0a:5c:fa:5c:d6:11:20:0f:5f:
da:41:25:a1:08:8b:2d:c0:73:8b:d6:95:cf:ef:94:2b:36:dc:
ba:72:36:69:f1:8b:f3:74:87:52:03:c0:4b:d4:b5:4f:b4:d4:
52:4a:d6:9c:df:2d:73:38:34:51:66:3b:06:da:96:3e:e2:6e:
ea:39:f1:d7:7d:5f:7b:4f:ec:6d:1c:b0:05:eb:64:a4:a7:04:
b5:12:56:4a:4b:aa:fb:ad:85:34:3b:cc:be:b3:b4:c0:f5:0a:
4e:1e:45:e8:fa:fd:12:97:cb:d5:9c:50:6f:a1:46:e5:1e:7f:
35:27:1d:d6:cb:06:a4:dd:6e:bc:c8:64:f9:76:2f:00:bd:63:
a1:b6:4a:29:55:12:09:3f:fe:df:53:38:db:30:d1:00:3b:bb:
2a:f4:08:48:3d:44:25:54:dd:ce:a6:15:d5:a0:44:76:9a:de:
ea:8a:45:05:af:6c:ee:92:b5:77:06:bd:b8:7e:e8:d4:28:f8:
15:d0:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:54 2026 by rpki-client