Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: NpKmFV5cEKrqEc1bS6ob6m38kp+yIaN1UShE+IO9efw=
Subject key identifier: B7:D3:DA:CC:13:91:A3:DD:0A:5D:AC:73:67:97:F8:A4:67:1A:2D:61
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019D2B1704FECC65258E3E335FAB9336D0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 0284
Signing time: Thu 26 Mar 2026 17:00:22 +0000
Manifest this update: Thu 26 Mar 2026 17:00:22 +0000
Manifest next update: Fri 27 Mar 2026 17:00:22 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: HdHeR/2AmXlh+2CLoyPkYplSyRlW7+7yQMsRQTzNSU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:04:fe:cc:65:25:8e:3e:33:5f:ab:93:36:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Mar 26 17:00:22 2026 GMT
Not After : Mar 27 17:00:22 2026 GMT
Subject: CN=b7d3dacc1391a3dd0a5dac736797f8a4671a2d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:1f:d2:1c:ca:2b:97:10:31:63:8f:e8:97:
97:ca:27:97:30:7a:42:a9:57:84:d1:70:b5:99:8c:
0a:00:be:f7:28:2f:ab:61:4d:1a:ae:63:28:cf:0f:
e2:f0:67:8a:e0:06:28:98:65:62:5a:1a:25:22:8e:
0e:82:97:f7:e1:37:6a:70:85:97:7c:e6:94:5f:c0:
d6:25:2b:9c:b1:75:03:0d:b7:6b:09:12:32:55:57:
aa:0d:2d:b0:67:85:8d:36:4f:a8:90:77:64:8f:31:
a5:00:d1:72:f5:2c:01:63:44:32:31:6c:2d:34:6c:
9d:90:f2:95:44:85:2f:31:96:69:a3:52:db:4a:8c:
f6:e8:ed:a2:1d:16:e3:ab:8d:69:fa:be:50:a4:73:
7c:95:d9:de:5b:48:da:ff:1a:46:12:97:44:86:d9:
8b:88:b9:a5:2f:ab:a5:b5:56:f0:9e:f7:45:70:77:
a7:be:15:8f:80:b9:47:10:63:cd:98:70:38:46:3b:
6a:e1:b1:bf:02:4f:cf:d1:76:2d:3e:1a:09:20:fb:
f4:f5:3a:8e:42:04:70:82:69:05:08:58:12:37:86:
0b:e9:7c:9c:47:62:d3:07:7a:8d:bd:09:9c:ef:e7:
06:c7:39:c7:8e:c7:5a:7f:79:e9:40:01:3a:db:8a:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:DA:CC:13:91:A3:DD:0A:5D:AC:73:67:97:F8:A4:67:1A:2D:61
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:33:ad:b7:c5:0e:fe:23:83:d7:3a:ce:4a:b3:49:e4:af:
e4:5d:56:ff:2d:d6:db:46:02:57:4f:5f:03:d6:3d:e5:40:d5:
0c:cf:fa:37:21:f7:fc:35:50:20:36:34:e0:c4:45:81:42:81:
70:e7:26:eb:92:16:c1:49:e2:08:2b:84:53:a7:bf:8d:b9:c2:
ca:c2:fd:c7:9f:f2:03:25:7f:bf:ac:2d:fc:26:8f:2e:96:6a:
55:d3:4e:19:94:1c:5a:10:37:ba:25:e8:4c:45:cc:14:22:89:
54:46:81:77:62:07:87:03:47:04:0b:8a:87:ad:f8:ca:c7:7e:
8b:85:95:1a:52:a5:31:8f:3c:72:2e:c5:46:d5:79:f2:e5:47:
33:a4:f4:36:0d:3c:fc:58:13:1e:ed:7b:f9:7e:fa:c8:bf:22:
8d:06:92:e8:00:72:95:4d:6c:13:b6:93:c1:be:f9:a2:7e:1b:
6c:8b:de:79:96:df:fc:39:c0:4b:72:2e:34:88:5a:ad:57:41:
38:1c:ff:0a:7b:39:b7:2a:ab:cf:ce:1f:aa:e2:de:06:39:67:
5b:60:f7:a8:16:a1:c3:77:75:31:cf:b7:51:81:66:50:e3:5d:
6d:e2:3b:ed:60:ec:f4:2f:fa:60:29:fc:53:a0:b5:56:79:69:
b3:1e:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:56 2026 by rpki-client