Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: zAnwTgoyPobVXNo8CPWZGxIpSP5Bs/XLC0XJgD+E1Xg=
Subject key identifier: 6C:ED:10:27:71:B9:4E:81:D3:B5:27:A7:2D:3D:C4:03:A1:7D:D2:DB
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019D9C9A89BB480336588208AB66233DE1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 025A
Signing time: Fri 17 Apr 2026 18:01:06 +0000
Manifest this update: Fri 17 Apr 2026 18:01:06 +0000
Manifest next update: Sat 18 Apr 2026 18:01:06 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: U2vo/Yhr58uGzZ0ZHcGnd85G1Pm9B6RYEP4GhoaErBg=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:89:bb:48:03:36:58:82:08:ab:66:23:3d:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Apr 17 18:01:06 2026 GMT
Not After : Apr 18 18:01:06 2026 GMT
Subject: CN=6ced102771b94e81d3b527a72d3dc403a17dd2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:2c:15:e3:1f:f8:da:6a:c3:65:67:a7:86:
1b:be:2f:b4:55:a1:9e:7e:16:ae:21:b5:01:ff:64:
7b:76:b2:fa:45:f0:91:c7:b1:3a:b3:78:12:35:ab:
a1:e2:e4:8e:1e:e4:6a:76:8b:72:9c:f3:00:1d:43:
3f:31:6e:35:ea:b4:1f:5c:12:a5:78:ae:b5:c8:a7:
b9:4e:03:74:27:2f:37:25:eb:1c:a2:01:23:6a:d0:
71:d0:df:2c:36:e0:e6:47:e6:24:79:54:76:25:85:
41:48:35:a2:a9:31:22:4c:86:2f:54:d9:43:e3:0f:
a9:2e:94:f8:d2:48:12:0a:6c:91:82:4f:2f:87:2f:
e4:af:11:6e:48:fd:d7:8f:55:66:ed:00:ad:a3:f4:
ec:37:b4:e6:ac:56:ab:a0:98:dc:ce:62:83:fc:e3:
ed:05:23:56:72:66:cc:9f:a6:85:db:9d:40:79:f9:
f9:65:57:de:6b:92:2a:d8:86:94:1f:22:fd:bc:e8:
e7:0f:6f:d5:a1:f4:d3:66:d7:6c:38:7f:49:96:f0:
2f:65:c8:08:75:a7:d0:53:92:01:6c:dc:02:a6:83:
0d:2e:fa:83:06:d0:b9:09:7e:df:d8:e5:88:19:0b:
d8:a0:a7:80:18:f4:53:44:df:39:79:12:54:39:9c:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:10:27:71:B9:4E:81:D3:B5:27:A7:2D:3D:C4:03:A1:7D:D2:DB
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:74:18:fe:13:b1:be:b0:f3:01:c5:5a:97:07:cc:08:a9:
c5:78:31:ee:7c:41:55:89:c8:5f:3a:97:11:12:ce:40:c4:13:
24:d1:8a:e5:30:e7:d1:a1:43:75:22:d7:e6:08:a7:43:25:a3:
36:d3:52:ad:bd:91:b5:da:c5:eb:61:4a:f4:4a:a2:e1:20:40:
30:7d:35:fa:e2:aa:18:4a:63:b6:12:55:d3:49:ae:b0:fe:42:
1c:a1:b6:27:33:61:28:76:55:c7:63:01:c4:36:76:b2:32:05:
ff:59:8a:aa:a5:5f:e9:9d:18:7b:f5:3a:40:94:27:de:34:8b:
7d:18:d5:68:5b:89:2c:5e:e1:a4:ab:fb:3c:8f:f1:32:15:9d:
38:c4:62:f5:d1:06:72:33:a9:83:da:ee:4b:61:04:e6:31:d4:
c1:03:b6:e8:1e:98:bf:4b:9e:e9:65:cc:1a:40:7b:22:d0:d3:
d7:13:b5:38:30:e9:f7:cc:1e:a7:e4:3d:ea:33:36:62:93:55:
21:95:ca:34:3b:f1:d7:fc:68:fc:73:e2:98:dd:c2:0b:32:30:
8e:47:f3:91:2e:cf:e5:e2:a9:fd:f2:26:0c:a2:97:a1:07:c7:
b0:36:f9:d6:c9:ba:5b:50:00:1b:9e:d1:d3:d3:5b:21:79:9c:
b1:df:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:50 2026 by rpki-client