Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: f2SIhhCrw3NWM0Oc5teR4vbDys0qaB0YcazwBiev8l0=
Subject key identifier: D8:19:3E:6A:01:39:C1:8E:CF:FA:29:D8:C6:9F:95:34:E0:25:B9:1C
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 019D284D4698669E8EFB3C5653BB61D48B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: ExzXOd7XjnHXy3XAmImZuxvVV1I.roa (hash: oLzwzlk8o4rqNWUPnGFpb0+JQEfblu5zBsOZQRC2TdI=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: SwXXE3VdpkNiwYBBg/uASGMxU4WjLYcCWGqvXvotRuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:46:98:66:9e:8e:fb:3c:56:53:bb:61:d4:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=d8193e6a0139c18ecffa29d8c69f9534e025b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:cc:52:cf:19:ff:96:32:43:95:48:6b:4f:
da:c6:2d:13:a2:d4:da:08:c7:d1:27:c8:a2:94:65:
45:aa:dc:c8:59:45:3a:57:a1:12:57:ca:99:83:0a:
f5:1a:54:c5:e1:4b:c9:a6:4d:e5:85:cd:ce:00:67:
cc:4a:c4:29:bc:b2:1e:34:48:5f:09:4e:b4:20:dc:
2f:c3:70:68:2c:bd:64:b5:1a:e2:75:c8:e8:08:76:
fb:56:c0:b8:cd:87:8e:1c:85:83:a3:77:40:51:51:
41:ff:f0:01:99:1f:95:cc:62:df:03:93:54:d2:db:
5a:15:56:a1:55:bd:c3:7b:f5:5f:95:82:f5:29:1a:
90:bd:cd:d1:fb:23:36:e2:7b:53:96:f1:e1:40:55:
73:5a:f6:6b:69:e6:26:5f:8d:a4:d3:ec:48:5f:b8:
c2:5d:3c:ea:8a:04:df:e8:2b:9b:4c:01:d5:94:b6:
e6:0e:49:ca:34:b5:aa:f9:33:52:3e:c3:5e:61:05:
e9:e8:8a:8c:3a:b6:71:e7:31:16:de:60:cb:48:f9:
45:21:a8:e3:28:cf:69:bf:9f:15:b6:55:3b:3c:07:
4c:38:20:87:7f:0f:dd:65:6f:d0:4f:70:97:b0:06:
ff:18:31:11:92:69:0e:6d:28:c1:cd:46:79:6c:44:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:19:3E:6A:01:39:C1:8E:CF:FA:29:D8:C6:9F:95:34:E0:25:B9:1C
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:46:06:a7:24:29:32:0f:f9:be:f9:98:22:92:62:d4:0f:
ed:5f:56:fe:bc:d3:15:bf:4f:e0:b6:ab:b7:19:af:9b:e8:5f:
e5:6a:18:7a:3a:b2:c9:e9:80:c1:4b:af:e6:2f:da:de:e7:cc:
db:97:b1:cd:8d:b6:54:55:99:89:3e:77:1c:6e:77:de:ab:05:
e1:7b:4f:18:a5:3b:88:83:e9:00:30:65:20:85:03:83:4b:66:
46:f7:2c:56:a7:5f:ed:bd:cd:8c:c7:70:3f:fd:e2:b0:d8:b5:
f2:78:5c:c6:ad:f6:50:71:e4:1c:f2:9c:9c:d1:3e:e0:e8:4d:
b5:e4:5f:a1:83:53:4e:36:b7:99:bd:06:1e:28:b8:52:58:8f:
8d:86:cb:72:1e:c5:68:31:7f:88:98:fa:86:f2:f5:9a:82:74:
e2:a8:f5:7c:bf:1b:9f:94:4b:01:30:e8:5c:d5:67:a4:9d:b4:
c8:c6:94:22:b2:3d:8e:72:a7:b5:f7:0c:c7:dc:a5:df:ca:e0:
52:27:1c:33:b5:1a:c9:87:05:1f:90:70:95:6f:9d:c6:ba:42:
cf:b5:a3:2b:59:78:69:ac:00:3f:ac:70:a0:24:3f:55:13:dc:
c0:df:df:37:77:cd:5a:48:64:f3:69:84:25:aa:e3:8c:2b:ce:
fd:1d:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:46 2026 by rpki-client