Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: DbzA10Z6VsHet7WBC+RQYUyISDn0EBB1xSCr0FsGJfY=
Subject key identifier: 2D:8F:FA:5F:3B:F1:F3:44:CE:F5:2A:FB:02:B7:B8:6C:BF:E5:BE:C7
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019F8EA2A32BB9CCD708CDF3EC7D42C72054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 16C8
Signing time: Thu 23 Jul 2026 11:00:50 +0000
Manifest this update: Thu 23 Jul 2026 11:00:50 +0000
Manifest next update: Fri 24 Jul 2026 11:00:50 +0000
Files and hashes: 1: PmSCD4wgzFyU2AqXpshqRaKIPuc.asa (hash: 25QFICONcsuYG4Rf1aqXoo/9TTjRkFuSaxU7izwH5pM=)
2: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: NzgnTq50btSIvR8MDT+LkD0ik0MtD8dTYFldul/ydVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a3:2b:b9:cc:d7:08:cd:f3:ec:7d:42:c7:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jul 23 11:00:50 2026 GMT
Not After : Jul 24 11:00:50 2026 GMT
Subject: CN=2d8ffa5f3bf1f344cef52afb02b7b86cbfe5bec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:05:27:b3:05:9f:7d:76:85:9e:c2:18:da:
80:cd:51:4a:8d:ed:03:5f:09:b7:4b:6e:84:10:31:
bd:d5:fe:13:df:d5:af:b2:ac:cd:6c:ce:0d:4d:5c:
fd:31:56:5a:e6:30:28:3b:11:0d:77:3f:5e:2d:60:
ce:34:18:56:1d:b0:22:ea:72:be:70:ee:25:20:05:
ea:4e:77:35:78:f1:c8:b2:58:7d:4f:d4:95:a4:e7:
3b:79:8b:39:53:e7:22:74:e2:1b:0a:08:ee:f0:55:
63:a7:c8:da:ec:15:d4:30:e6:f9:c9:59:31:91:96:
b4:ae:3e:1e:78:d0:92:f6:e6:88:aa:41:84:69:d4:
00:76:c8:57:63:21:41:90:78:3e:06:fe:94:07:0d:
06:92:cb:ed:5c:9b:52:bf:ad:6e:86:f5:13:37:dd:
e5:f4:e0:9b:87:5d:04:65:f7:db:05:9d:1a:be:8f:
27:0f:9b:db:01:12:f4:bc:6e:b7:a0:5b:00:81:8a:
1b:17:c5:17:3e:d5:06:f4:f4:ec:7a:aa:24:11:ae:
b7:41:99:6c:e0:cf:e1:7a:5f:7e:a0:e0:d1:8f:20:
3e:2f:78:99:97:7d:43:9b:e4:02:3b:39:7a:92:69:
75:a6:25:eb:1f:24:bf:09:05:87:07:7a:ac:0e:9d:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:FA:5F:3B:F1:F3:44:CE:F5:2A:FB:02:B7:B8:6C:BF:E5:BE:C7
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c2:f4:c2:15:ce:4a:5c:fb:31:ff:25:fd:3f:4c:6c:c1:70:
3f:64:0e:f7:ff:13:d1:0a:43:8f:51:d1:86:01:cb:42:ee:56:
34:1f:c9:d5:b2:d5:75:5c:6e:79:d4:0f:36:0d:7c:91:f2:1d:
6e:0f:8f:5d:d6:14:d3:39:94:96:38:37:23:af:27:06:91:71:
36:60:74:b9:40:1a:fe:97:e5:75:14:ad:81:e7:16:a3:e1:b6:
86:cb:c7:6c:48:af:a3:8f:a7:87:8b:a4:cf:c3:20:fd:58:e0:
a2:db:b5:0d:5b:95:40:a7:66:fe:c0:39:2f:d2:47:ab:18:63:
3c:73:cc:51:79:0f:52:72:ce:c6:0c:44:c8:ff:34:c0:f7:10:
cc:9c:2c:c4:cd:c2:b3:2c:a2:06:f6:9b:32:bb:07:52:64:74:
45:c2:d4:45:05:50:6a:22:9e:6c:0c:6e:47:5c:e3:c1:af:4f:
75:43:53:0d:5f:61:36:55:cf:61:3c:37:4e:c9:ca:75:58:ab:
9b:d5:96:a2:07:cd:55:f4:00:0b:5e:dd:fb:4b:dd:9d:de:d4:
85:a8:3f:c8:58:a5:c8:07:10:f0:61:11:a7:64:8d:8a:f6:b9:
3d:41:98:50:81:30:86:39:66:01:ae:03:76:ce:29:a2:ad:3c:
98:73:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:53 2026 by rpki-client