Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: AkpMI+/0zgkCGv2BOcE82Jt+7PopqRx4XI4fOBtPhO4=
Subject key identifier: 1B:DC:A8:9B:91:F7:C5:15:F4:DE:80:18:F0:B6:6F:A1:D4:28:01:BD
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019D25839E46B1F66ED1735DEF15DC270C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 068A
Signing time: Wed 25 Mar 2026 15:01:15 +0000
Manifest this update: Wed 25 Mar 2026 15:01:15 +0000
Manifest next update: Thu 26 Mar 2026 15:01:15 +0000
Files and hashes: 1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: 20A2jkwWs+OzmvhDExPFgcWhCfPy7wUJiWAgjjBJVdI=)
3: okNjrlPSLJ97WbWID906BW9GXVE.roa (hash: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9e:46:b1:f6:6e:d1:73:5d:ef:15:dc:27:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Mar 25 15:01:15 2026 GMT
Not After : Mar 26 15:01:15 2026 GMT
Subject: CN=1bdca89b91f7c515f4de8018f0b66fa1d42801bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:d4:84:83:31:dd:4a:dd:8b:a9:89:55:a9:
68:b3:92:06:94:83:03:49:26:9c:71:51:ae:c3:52:
b8:c2:8a:ed:79:b8:cc:b9:16:86:9d:ae:12:37:f1:
4a:b1:db:8d:27:be:fa:04:80:79:cd:19:5a:1f:5d:
14:d5:67:2e:9e:fa:90:8a:cc:6b:8b:c1:35:b3:7b:
06:29:ed:6b:e7:e5:60:74:67:47:82:c7:75:76:39:
53:13:8a:4e:4a:e1:14:03:59:38:18:b4:8e:b3:b4:
2b:33:d0:b9:d5:03:ba:2c:fd:f4:95:44:2e:85:24:
a9:87:cd:dc:70:51:62:67:3a:cc:d8:2e:38:f8:90:
cd:44:b0:f9:72:bc:35:c7:47:0a:63:c7:67:dc:bc:
46:5b:90:ba:d6:33:7d:94:dc:07:c3:9f:06:bb:bc:
c5:ce:87:a3:df:d7:58:2e:25:17:63:b0:a4:26:93:
aa:19:5e:2d:b7:d6:d9:ff:f2:7b:c0:97:68:74:e1:
0f:11:86:f8:35:6d:e6:2e:65:9b:68:ae:bb:bb:84:
85:b2:8f:28:c7:f0:58:a0:cb:d7:9e:ee:fc:f3:b1:
8c:48:d9:e0:23:ba:d9:e1:e1:04:4a:73:37:08:8a:
11:12:55:07:1c:c8:4a:03:83:10:0e:34:21:ab:d1:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:A8:9B:91:F7:C5:15:F4:DE:80:18:F0:B6:6F:A1:D4:28:01:BD
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:e4:ca:1c:ad:a7:a3:cc:2d:7b:59:78:f7:6a:c6:83:27:
01:54:72:1c:2e:48:ca:f7:09:c0:13:79:2c:31:74:81:28:37:
67:6c:1f:bf:ce:22:dc:24:16:de:6e:fa:0d:55:80:26:bf:a2:
24:6e:82:13:11:05:b9:c9:7b:fc:12:b3:24:9d:85:4f:ce:28:
89:c8:2d:17:26:ec:70:c1:19:d5:20:dc:76:62:95:b8:5d:5a:
c2:bf:e5:f8:2d:a9:ff:39:fb:e5:ca:99:95:6d:e6:50:bb:2c:
bb:9e:99:0b:4f:70:fa:d3:ad:f8:1b:40:16:ed:e8:61:2d:85:
cf:d3:56:72:fc:c5:4a:3e:d5:5e:de:98:25:13:1b:c6:bc:ea:
45:de:e5:af:e0:17:54:09:15:95:0b:10:ec:0a:d5:76:12:b9:
25:a3:93:9b:06:d6:30:6e:59:b1:30:fd:43:18:3f:39:8f:aa:
b3:aa:8e:64:f4:19:10:a9:ff:cc:6a:9d:4d:65:bf:3c:48:5f:
24:a0:6e:82:4e:6b:67:4b:e7:b1:14:ea:62:68:1c:74:8a:89:
bf:bf:4a:58:10:ac:06:0f:ac:df:6c:69:e4:d0:bd:c5:65:60:
f6:c8:61:e1:1f:6c:1e:3d:aa:c0:29:02:11:cd:77:0b:43:29:
d2:70:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:44 2026 by rpki-client