Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: iFBQRauvPzsRekrURZOkleclijxKBlQbi6P639zCAd4=
Subject key identifier: FA:39:9D:30:64:C3:97:63:FC:1F:4C:E1:9E:ED:FC:A3:35:BF:2A:92
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019CAD225E82C028FE96E295BC7D767A81E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 01DE
Signing time: Mon 02 Mar 2026 06:00:36 +0000
Manifest this update: Mon 02 Mar 2026 06:00:36 +0000
Manifest next update: Tue 03 Mar 2026 06:00:36 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: qYScQOhII9qemWMD8DtxlkWOCB343RvkRG3zJPODZaI=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5e:82:c0:28:fe:96:e2:95:bc:7d:76:7a:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Mar 2 06:00:36 2026 GMT
Not After : Mar 3 06:00:36 2026 GMT
Subject: CN=fa399d3064c39763fc1f4ce19eedfca335bf2a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:00:85:25:36:a2:3f:04:55:76:78:4b:c3:
f6:45:46:8b:4a:7b:86:06:52:7e:28:4c:22:e3:6b:
8d:e9:09:ce:4a:5a:fb:34:62:c7:34:98:9f:dc:9f:
74:82:bf:b0:44:08:43:f2:6f:14:d2:6d:03:7c:76:
32:65:09:a8:2a:62:50:1d:dd:b6:70:ca:3c:50:58:
e2:b4:92:0b:77:d7:d9:29:41:21:5c:34:81:8a:10:
0b:52:d4:20:0e:b8:2a:35:36:34:2a:3c:da:4c:d3:
b6:58:61:50:d3:21:c2:27:67:31:07:a1:43:c7:60:
0f:81:a9:85:5e:e9:58:e5:55:07:9b:52:02:90:38:
b8:4e:4d:51:e1:d0:83:03:99:f7:eb:74:f9:be:0d:
5c:34:b8:9c:90:fc:e4:8e:79:43:07:06:aa:5b:34:
63:04:08:de:f7:b5:7a:45:be:f2:bd:f8:71:ec:60:
52:f9:b5:2b:64:4e:15:73:9f:b8:f2:6a:38:81:87:
c4:7b:ba:49:e2:a9:0d:1d:d0:a3:01:fa:8c:f1:15:
9e:1f:b0:7d:f7:fc:dd:d3:43:1d:29:19:78:e1:31:
6a:84:dd:8b:05:a3:cd:0b:2b:26:39:e6:65:c4:f7:
ef:26:3e:be:35:94:4a:fa:9f:fa:85:ce:24:6f:7d:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:9D:30:64:C3:97:63:FC:1F:4C:E1:9E:ED:FC:A3:35:BF:2A:92
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0e:77:87:10:62:48:5e:61:54:07:86:c5:61:7c:cb:f5:26:
d7:db:4e:66:cd:37:a8:12:fb:5a:d0:01:b1:f8:c6:ea:d2:e0:
63:fa:66:cd:d6:49:97:66:31:0c:72:ed:ca:a3:45:8f:6c:28:
55:54:be:8f:b6:c2:45:40:b8:c7:8e:17:c0:a0:9d:c7:b2:7d:
e9:b2:b7:4b:92:d6:b2:e2:af:43:c4:ef:cb:53:b4:ff:24:09:
2a:b1:e9:20:30:4f:b0:a1:34:ae:5c:7e:77:3c:36:d0:d5:d8:
49:d3:fc:3f:6c:a6:0a:a9:76:bc:98:7b:bc:55:94:ec:a4:d2:
97:cb:15:3f:4a:a4:14:d8:98:89:85:34:0f:40:75:d9:cc:f9:
2d:80:d7:27:86:d0:b1:0e:97:00:1f:f4:ca:5d:9d:a1:43:3a:
d3:38:0e:66:3d:08:2a:d3:78:6f:93:2e:9e:45:0d:b7:6d:49:
0b:b0:f4:49:c2:d8:1e:de:2f:69:4f:70:69:c2:7c:a4:c7:82:
7f:41:88:14:ec:65:3d:94:1f:5d:d0:26:96:1e:1e:75:14:ca:
18:ba:17:46:a6:fe:43:b3:a8:b0:23:99:18:6d:c9:17:20:dc:
3e:2a:43:9f:00:02:a9:d3:a9:3e:9b:09:25:75:4c:c2:8b:e5:
7d:9a:7d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIl6CwCj+luKVvH12eoHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmY4YzZmYjdmNTQ3MTcwYjY3OTYyNTc1Y2YyYmE4ZWQx
NWU1NDgwHhcNMjYwMzAyMDYwMDM2WhcNMjYwMzAzMDYwMDM2WjAzMTEwLwYDVQQD
EyhmYTM5OWQzMDY0YzM5NzYzZmMxZjRjZTE5ZWVkZmNhMzM1YmYyYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEAhSU2oj8EVXZ4S8P2RUaLSnuG
BlJ+KEwi42uN6QnOSlr7NGLHNJif3J90gr+wRAhD8m8U0m0DfHYyZQmoKmJQHd22
cMo8UFjitJILd9fZKUEhXDSBihALUtQgDrgqNTY0KjzaTNO2WGFQ0yHCJ2cxB6FD
x2APgamFXulY5VUHm1ICkDi4Tk1R4dCDA5n363T5vg1cNLickPzkjnlDBwaqWzRj
BAje97V6Rb7yvfhx7GBS+bUrZE4Vc5+48mo4gYfEe7pJ4qkNHdCjAfqM8RWeH7B9
9/zd00MdKRl44TFqhN2LBaPNCysmOeZlxPfvJj6+NZRK+p/6hc4kb336AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo5nTBkw5dj/B9M4Z7t/KM1vyqSMB8GA1UdIwQY
MBaAFC+/jG+39UcXC2eWJXXPK6jtFeVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzIt
ZjFlNGYyMWQ4NzAyLzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzItZjFlNGYyMWQ4NzAy
LzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA53hxBi
SF5hVAeGxWF8y/Um19tOZs03qBL7WtABsfjG6tLgY/pmzdZJl2YxDHLtyqNFj2wo
VVS+j7bCRUC4x44XwKCdx7J96bK3S5LWsuKvQ8Tvy1O0/yQJKrHpIDBPsKE0rlx+
dzw20NXYSdP8P2ymCql2vJh7vFWU7KTSl8sVP0qkFNiYiYU0D0B12cz5LYDXJ4bQ
sQ6XAB/0yl2doUM60zgOZj0IKtN4b5MunkUNt21JC7D0ScLYHt4vaU9wacJ8pMeC
f0GIFOxlPZQfXdAmlh4edRTKGLoXRqb+Q7OosCOZGG3JFyDcPipDnwACqdOpPpsJ
JXVMwovlfZp97A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:04 2026 by rpki-client