Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft (raw, json)
Hash identifier: tdnyK116ynbYxDZRevmICsayVvmAWmiVP+s2GQYNAk0=
Subject key identifier: 6F:BD:A3:25:84:88:35:8E:0E:7F:39:77:01:FE:9B:EB:09:D8:CD:DD
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 01A0DC4D826AD32AE505AB32BCB6D6B491B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
Manifest number: 0128
Signing time: Sat 26 Sep 2026 06:01:02 +0000
Manifest this update: Sat 26 Sep 2026 06:01:02 +0000
Manifest next update: Sun 27 Sep 2026 06:01:02 +0000
Files and hashes: 1: A57R9BRoN3kCl5qh8WaGx0tGaO0.roa (hash: S5yffNC54PqNZ1mJ9sOGMjtx2mUlj70FeAxaew+aYks=)
2: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (hash: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=)
3: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl (hash: yJkKq5eH9IvMZPsixIvYNwjjwQXRWOf76NtrhUaDo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:82:6a:d3:2a:e5:05:ab:32:bc:b6:d6:b4:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Sep 26 06:01:02 2026 GMT
Not After : Sep 27 06:01:02 2026 GMT
Subject: CN=6fbda3258488358e0e7f397701fe9beb09d8cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:81:75:11:5d:7a:27:4a:8a:56:b7:82:4e:
74:e8:04:4d:6f:d4:74:85:66:8a:e6:da:df:d2:a4:
12:33:ac:89:6f:ec:1f:57:6d:5e:dd:34:14:51:92:
9b:1f:45:eb:88:8b:49:d3:c9:f5:9c:03:cf:40:10:
a4:2e:b9:75:44:0b:41:09:da:4c:44:21:6f:69:38:
89:53:50:12:4b:ed:1f:1e:49:da:0f:97:c7:a7:81:
f7:27:15:09:47:a9:90:dc:d4:e2:d8:43:f6:4f:5e:
b5:dd:c1:db:9c:b7:50:53:00:11:6c:d9:57:0f:92:
80:18:34:ad:48:f2:a5:cf:7c:f5:c4:e1:39:59:dd:
6d:4a:11:fe:e1:88:60:9a:a6:e4:8e:87:ef:f8:4b:
8c:a2:f8:48:2e:35:68:e4:0c:59:a1:6e:9d:08:74:
4d:03:25:ef:2f:d5:23:09:9f:91:5f:c5:1c:2c:b7:
a4:b7:a7:6d:c0:aa:97:c0:dd:26:0e:f8:e3:75:a0:
03:b2:8c:64:62:f6:0d:61:a3:40:c2:e3:e1:92:dd:
03:79:0d:68:0e:1e:c4:bf:d5:0b:1a:8e:49:b4:fa:
2e:8e:d4:1b:7f:77:c4:6e:81:a4:a5:f7:c4:7a:89:
8d:c1:d7:4c:c0:1b:4d:05:6b:6b:98:c8:60:89:d9:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:A3:25:84:88:35:8E:0E:7F:39:77:01:FE:9B:EB:09:D8:CD:DD
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:18:b9:fb:a6:28:29:4f:86:99:79:c6:6f:73:94:6c:b5:
d6:95:b3:69:eb:ef:d2:03:98:9d:b3:c2:ef:d3:83:df:22:43:
84:df:66:3b:7b:7d:47:a5:24:47:ba:20:36:95:5b:97:b1:fc:
d1:b5:0d:1b:01:ee:fe:ec:a7:ff:f4:3c:d9:05:97:20:19:41:
39:41:b5:03:04:b5:c2:87:5c:8e:75:f0:af:6e:1a:5d:b2:21:
b6:d3:bc:35:97:0b:da:9a:97:9f:64:68:4a:f1:42:f6:a3:46:
b5:06:80:2b:90:84:ff:b7:84:2d:00:12:b6:95:25:74:4c:7d:
53:1b:c9:d0:bd:9d:e3:be:ed:ff:bc:37:d0:50:7d:78:87:3d:
3d:f3:a9:93:d7:98:e9:fc:7a:7b:64:2d:da:26:a6:dc:ba:df:
07:f7:84:4c:39:4f:36:c3:0c:2a:01:c6:ab:3f:ef:81:88:5d:
b0:39:f3:b6:10:a9:5b:00:e7:d6:dd:8b:86:d2:1c:86:66:4a:
99:22:38:e2:94:47:9a:25:1c:c7:d8:dd:34:a1:a9:f8:0f:46:
75:34:c2:7c:38:7e:d4:d4:90:0b:1e:4a:c2:87:fb:44:b9:ae:
31:b7:a1:c6:f8:7d:9f:a2:1a:e9:33:01:8f:ae:7e:c6:f2:bb:
a9:bf:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:06:28 2026 by rpki-client