Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: KXMa3aZHA3rN5ygpoZSkUvwT7sW7UwlDtwXRJ6UO6uM=
Subject key identifier: 19:BB:34:9E:09:1A:53:BF:94:E9:EF:F9:17:24:A7:08:85:1A:11:0C
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019F9323DC1720D77E7029DC14C39C27642C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 03C3
Signing time: Fri 24 Jul 2026 08:00:28 +0000
Manifest this update: Fri 24 Jul 2026 08:00:28 +0000
Manifest next update: Sat 25 Jul 2026 08:00:28 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: JCY/zfy/0zGhBfy0dvxRxTOxnrv2nicy+YPTX2Hv6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:dc:17:20:d7:7e:70:29:dc:14:c3:9c:27:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Jul 24 08:00:28 2026 GMT
Not After : Jul 25 08:00:28 2026 GMT
Subject: CN=19bb349e091a53bf94e9eff91724a708851a110c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:b6:e9:2c:cb:02:49:da:6b:bc:4e:8e:30:
d1:26:77:1e:e1:9a:f2:cd:e8:22:0f:ad:97:e6:c7:
4c:45:73:b3:e6:3d:86:bb:6d:ee:b1:f7:dd:82:45:
03:6a:54:86:9a:3a:5a:a1:da:7a:38:e8:5c:f2:e7:
d7:22:2d:b4:62:b4:22:c7:65:f1:50:20:76:f9:eb:
f7:ed:db:ce:ca:01:e0:73:da:a7:a4:0d:68:d5:cd:
1c:69:f8:29:d4:08:01:9b:2a:31:f5:dc:80:ee:54:
35:5c:d9:b2:cf:48:f5:e7:c5:37:60:be:39:26:55:
27:73:5e:9f:f0:c8:31:7e:1f:a6:56:61:cc:35:4d:
3c:48:03:0a:f2:ea:92:7f:51:33:96:32:ad:d1:ce:
f3:7e:29:be:1d:dd:80:8f:dd:83:05:f3:9c:b6:b1:
1d:c1:92:dd:56:2c:a3:35:8d:03:98:90:64:b0:4d:
21:f4:cd:9f:81:33:57:54:1c:38:0c:15:d4:0a:9e:
04:b7:f0:75:c8:b0:de:f5:d6:af:b3:9a:92:18:06:
e6:5c:9d:76:49:c6:88:92:ac:75:25:d5:f3:ba:f9:
f3:2d:2a:82:fa:16:9b:a8:12:fe:f2:78:aa:9f:6e:
65:7b:e4:cb:0a:9c:b2:83:28:dd:d1:39:52:c2:f5:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:34:9E:09:1A:53:BF:94:E9:EF:F9:17:24:A7:08:85:1A:11:0C
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cd:b9:ca:3b:2f:49:39:a4:ee:ba:49:df:c5:9c:46:ef:34:
ab:f9:1b:75:a6:df:00:74:42:79:87:03:8d:a8:28:b8:89:25:
9a:f0:f6:a6:e9:5f:4a:3e:9d:6a:e5:31:57:2b:30:56:ec:ac:
b1:d2:5b:67:3e:39:10:c7:5a:af:b6:22:ee:fb:f5:10:c2:6f:
3a:ce:fe:3f:ad:0e:39:92:64:64:02:b8:97:bf:0e:ba:dd:70:
40:3d:98:b5:79:2b:ef:c8:a4:2c:4c:68:bf:b2:64:c5:f7:cc:
bf:e9:d0:4c:84:80:5b:d4:2e:b6:c8:ee:d3:11:70:19:95:c1:
96:47:1f:5c:80:aa:e8:01:34:c4:c5:b6:ef:4d:26:a1:f5:9b:
86:1b:84:97:80:8b:50:c3:08:d1:b5:a6:89:2c:5d:f9:ca:bb:
2e:40:17:ee:b4:36:a7:c9:05:7c:75:27:21:9d:af:07:88:98:
55:ad:d6:6a:05:df:df:f8:82:ce:73:f3:68:62:1f:c1:68:a0:
17:32:ae:54:62:f2:a4:a8:f0:76:06:4a:7d:3a:dd:c4:7a:3c:
7d:5f:c5:99:72:d8:d3:66:a7:c9:b3:8a:0b:cf:0c:99:99:63:
9a:71:60:93:a1:ba:dc:e6:db:16:aa:32:8c:2b:95:13:79:03:
f9:1d:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:29 2026 by rpki-client