Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: DPMwKFTT57aDeylJew3OFPl4oQcRwKm9aXsRdo37Yvc=
Subject key identifier: 39:A0:F4:10:06:9F:3C:0C:73:CD:38:D7:F7:D5:6B:89:EC:83:95:8F
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019D25BA5B612D743590C27DB2CBEB9355AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: O_wCNsyDbT6MUYABz8-3j0us_9g.roa (hash: lcEmRT5pvsNkeswk2lk75S2Q+qGFNRLgl2uhLFsTeD4=)
2: bDIaKUq5ow0olhUpFCtBXBJMo6o.roa (hash: 9hfkjt3EwE+QLaV9BjMUSGSaxIGmTaaJQ1x9H7t99BU=)
3: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: hBEBacHzDji0DQrCugutk3tUrhrIn0dYxqnYxoXITgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5b:61:2d:74:35:90:c2:7d:b2:cb:eb:93:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=39a0f410069f3c0c73cd38d7f7d56b89ec83958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:da:ec:da:97:a7:dd:8c:42:61:32:c1:4b:
80:c7:83:35:19:21:47:83:8e:6e:8d:ef:ed:f7:b5:
93:d8:da:5d:58:ac:d8:b3:04:ce:d3:46:69:f5:92:
f6:87:fd:ca:46:71:a7:98:b2:da:bb:f0:10:12:e2:
04:34:2f:db:e6:52:42:3a:61:be:48:6c:0d:1b:97:
12:97:49:b3:13:e8:1b:e0:0c:fe:1a:38:4e:e9:ac:
09:f2:89:9b:a3:76:a8:49:0e:aa:b6:54:a2:43:c2:
42:92:e4:43:80:f2:16:58:12:e0:df:3c:ca:58:64:
25:d1:21:f5:35:b2:4d:95:a5:65:66:ab:3c:3d:9f:
3c:61:76:00:a5:a4:fe:33:b8:f7:85:2e:97:00:ad:
c1:80:74:ca:f5:20:68:4c:4d:7a:a8:1b:9c:9f:fc:
ab:54:a5:82:e5:41:07:77:ad:59:94:20:52:d2:68:
b1:d7:33:e8:52:96:c3:51:18:7f:97:da:93:c3:83:
1e:1a:24:e1:80:f9:f9:cd:b8:7d:82:5d:e3:5f:ec:
bf:a5:7d:e2:73:ea:81:3a:77:75:f5:f4:70:0a:ed:
64:d2:58:08:16:21:b4:67:dd:c6:13:2e:80:22:a6:
ba:15:00:3a:e8:31:0c:24:68:4f:61:4f:ef:73:a0:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:F4:10:06:9F:3C:0C:73:CD:38:D7:F7:D5:6B:89:EC:83:95:8F
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:be:8e:17:1e:3d:bd:7d:ca:ab:98:aa:e7:7b:cb:aa:d5:67:
cc:d5:12:b3:10:85:c1:c8:d0:58:e1:16:51:89:a4:bb:f2:57:
90:ce:5f:5a:7e:2d:f2:62:5b:b1:0e:99:e4:29:87:aa:43:ea:
8d:42:10:91:e7:f0:49:a6:9f:72:8b:28:87:5b:b8:c2:0b:bd:
c5:a3:cb:58:bc:6a:ea:a8:2e:62:86:00:21:2f:a2:2b:88:ae:
d3:a0:85:83:00:ef:c3:c4:b4:21:76:c7:63:4b:67:c9:e4:56:
df:44:46:bc:a2:45:aa:9d:1d:81:24:48:da:d8:53:4e:aa:41:
28:10:80:4a:57:8d:55:41:37:de:aa:9b:ea:97:ec:63:9d:3f:
72:f4:fb:a0:78:c0:e6:7f:5c:e7:15:93:f8:95:95:a5:a1:73:
e2:56:84:8e:27:13:b1:f1:0d:7d:dc:6b:db:dc:7a:24:3a:07:
97:a3:05:c1:ad:41:2b:44:4c:24:03:59:d9:89:52:7f:ae:b2:
26:62:e3:ef:82:89:bd:2d:f5:0d:f1:ee:a2:8e:f1:e2:2e:e8:
90:e1:9e:8a:46:25:9e:5d:7b:4b:0b:54:6a:2c:73:05:a7:d3:
1c:8d:f1:43:7d:31:25:cd:3d:46:43:35:35:9c:14:29:b3:f8:
2a:50:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client