Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: IT9u9n/c3T4UHKa/vUM93HnkSGFNi6OD5I/5GsftaZU=
Subject key identifier: 58:C2:A3:7F:1F:E7:93:B3:46:EE:7D:CB:B0:B3:6B:CC:E3:2E:B6:75
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 019D27DF80FF77C84FD6C8318BE78F712D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: hrnLYiX_lMVabWsaWy1YNdnH5lo.roa (hash: A8isPHXQiSnhKMitypfxPpvT5h+QDttKZkJpOSldfqg=)
2: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: gyv8mJftyWW3dmzUOlkbFJIh2wbBPm+EI+iQZaVAF3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:80:ff:77:c8:4f:d6:c8:31:8b:e7:8f:71:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=58c2a37f1fe793b346ee7dcbb0b36bcce32eb675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:ef:84:1b:20:37:bd:25:1f:8d:e1:af:a9:
d3:d3:57:56:ff:16:ca:16:50:4f:b3:81:db:40:05:
11:ca:36:ba:1d:95:93:72:16:69:2f:0b:62:28:6e:
08:d2:ff:45:7a:71:05:d2:6e:f0:3a:0b:c7:36:36:
b1:3d:a5:0e:7b:12:36:52:80:79:e7:1a:82:af:59:
37:94:2e:63:7c:e6:77:4b:5d:83:ab:19:08:3d:45:
24:0a:8d:7b:0c:10:89:ff:7d:0e:97:d9:02:1f:c1:
24:31:3a:c0:b5:32:48:71:21:49:93:46:36:cf:85:
db:a0:d6:94:f6:83:bd:a2:52:f5:44:ef:3f:81:1f:
f0:1a:7b:1b:29:7b:d6:cc:58:cb:d2:26:90:54:e6:
27:78:21:9a:df:cf:32:88:b9:1e:f2:db:44:37:7a:
ce:c2:cb:a8:bd:5b:fa:cb:48:0d:ed:6c:83:32:25:
68:96:b6:23:bf:1d:7c:af:67:1b:41:eb:81:74:7a:
42:56:d4:03:2b:ca:c6:4b:af:c7:b3:99:3b:c2:19:
07:1f:da:9b:2d:e8:95:d7:50:eb:78:88:cb:dd:57:
68:53:e1:1f:e0:5e:ca:28:23:ab:61:d2:86:4a:ca:
a1:7e:55:88:c7:2e:9c:a2:0f:1a:37:34:40:6f:d5:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C2:A3:7F:1F:E7:93:B3:46:EE:7D:CB:B0:B3:6B:CC:E3:2E:B6:75
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:e0:6e:25:7c:d1:7c:f4:da:23:c4:24:07:bb:3c:44:88:
e2:e5:ae:53:b6:51:8d:16:e7:37:53:d0:ea:88:4b:bd:ca:a6:
00:23:92:f9:23:dd:dc:69:64:01:2d:70:27:4f:2f:3f:b0:f4:
30:ce:4d:6e:bc:39:2f:9a:7d:c3:ab:9c:6a:d8:9b:78:c2:4d:
e4:e5:8f:00:51:eb:42:2e:29:db:4f:c8:60:73:53:ef:21:65:
d7:26:26:01:40:06:02:2b:2c:95:37:92:3b:63:c2:8e:03:01:
cc:4d:4c:0e:ab:3f:37:94:ea:21:f6:5e:f3:35:da:ae:6a:81:
07:dc:c8:b9:86:2e:f8:39:10:37:b3:e0:0a:d3:07:43:5d:aa:
73:b2:51:88:c6:34:0d:a1:a2:a0:f4:ce:02:10:bd:f7:fb:d8:
4d:52:62:d9:89:2c:e8:d4:ca:a8:ac:6f:72:c2:ec:65:c1:97:
f9:79:17:e7:cd:1d:4e:1c:b4:07:44:34:68:ad:c7:a6:83:7f:
6b:cc:81:08:34:fc:17:dd:eb:66:b2:2a:4c:b5:05:04:99:44:
29:ef:49:6e:fe:43:0c:16:e6:3b:dc:c4:21:5e:5d:ef:8a:1e:
f0:8b:c2:f7:61:cc:a7:f2:ba:8c:df:6e:bd:e7:a6:64:2a:4a:
c7:7a:f2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n34D/d8hP1sgxi+ePcS2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNmYmIzNTUwYmYyYzc2NzRjYzUyZTljYmJmM2E5MzNm
NWU3NzgwHhcNMjYwMzI2MDIwMDUyWhcNMjYwMzI3MDIwMDUyWjAzMTEwLwYDVQQD
Eyg1OGMyYTM3ZjFmZTc5M2IzNDZlZTdkY2JiMGIzNmJjY2UzMmViNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdPvhBsgN70lH43hr6nT01dW/xbK
FlBPs4HbQAURyja6HZWTchZpLwtiKG4I0v9FenEF0m7wOgvHNjaxPaUOexI2UoB5
5xqCr1k3lC5jfOZ3S12DqxkIPUUkCo17DBCJ/30Ol9kCH8EkMTrAtTJIcSFJk0Y2
z4XboNaU9oO9olL1RO8/gR/wGnsbKXvWzFjL0iaQVOYneCGa388yiLke8ttEN3rO
wsuovVv6y0gN7WyDMiVolrYjvx18r2cbQeuBdHpCVtQDK8rGS6/Hs5k7whkHH9qb
LeiV11DreIjL3VdoU+Ef4F7KKCOrYdKGSsqhflWIxy6cog8aNzRAb9XAKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjCo38f55OzRu59y7Cza8zjLrZ1MB8GA1UdIwQY
MBaAFJfs+7NVC/LHZ0zFLpy786kz9ed4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzkt
OGM1MTE2OThmY2FlLzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzktOGM1MTE2OThmY2Fl
LzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj/gbiV8
0Xz02iPEJAe7PESI4uWuU7ZRjRbnN1PQ6ohLvcqmACOS+SPd3GlkAS1wJ08vP7D0
MM5Nbrw5L5p9w6ucatibeMJN5OWPAFHrQi4p20/IYHNT7yFl1yYmAUAGAisslTeS
O2PCjgMBzE1MDqs/N5TqIfZe8zXarmqBB9zIuYYu+DkQN7PgCtMHQ12qc7JRiMY0
DaGioPTOAhC99/vYTVJi2Yks6NTKqKxvcsLsZcGX+XkX580dThy0B0Q0aK3HpoN/
a8yBCDT8F93rZrIqTLUFBJlEKe9Jbv5DDBbmO9zEIV5d74oe8IvC92HMp/K6jN9u
veemZCpKx3rypw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:17 2026 by rpki-client