Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: yiUFC96MYc9FBkb3x6FS7mzN5tLC65mcY9I7GELbkvg=
Subject key identifier: 71:9B:08:0F:E1:44:C3:D2:5B:F7:F6:79:A3:B9:F7:58:BF:3A:E1:3D
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 01A12FFCC1D9E907183C97374A4668BB21AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 0434
Signing time: Mon 12 Oct 2026 12:00:55 +0000
Manifest this update: Mon 12 Oct 2026 12:00:55 +0000
Manifest next update: Tue 13 Oct 2026 12:00:55 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: imjXWbHQPbW/oHnnzD57+daVo+r+tAvjXXf3zV6Qtl4=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:c1:d9:e9:07:18:3c:97:37:4a:46:68:bb:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Oct 12 12:00:55 2026 GMT
Not After : Oct 13 12:00:55 2026 GMT
Subject: CN=719b080fe144c3d25bf7f679a3b9f758bf3ae13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:96:8d:18:9a:24:4d:46:1c:e9:10:2b:d4:
c7:1b:90:8a:5b:43:6d:c6:15:6c:ef:58:94:af:8e:
f6:1a:3c:88:8f:37:64:9e:30:c0:af:40:78:c4:8a:
f6:b6:73:59:a0:ca:bb:be:ba:c7:5c:b7:91:f9:be:
0c:79:8c:c4:d2:39:73:ae:29:4c:5f:cc:f9:3d:20:
0a:f1:7f:ef:6b:3b:59:6f:90:53:d4:e1:eb:fa:88:
c9:a7:41:54:ae:02:7f:25:fb:98:06:42:67:2e:48:
d6:f8:e4:a1:88:40:bc:a7:ec:2f:ef:ea:e9:5d:2f:
bc:72:de:c0:f0:a6:7f:a5:ac:84:f0:5b:84:0f:34:
a7:7f:5e:07:c5:44:90:bd:98:a8:31:5d:8d:95:44:
63:a2:0d:67:5c:18:c8:09:c4:fa:3b:f9:a3:99:de:
a6:bc:ab:4b:44:5f:71:da:a0:b9:a6:0a:6f:c9:94:
c0:a6:ab:77:ba:57:8d:fa:b3:92:25:95:20:9c:1d:
69:89:7c:1d:b2:46:ef:2d:54:19:17:db:f2:d9:5a:
ed:47:0c:28:77:e4:bd:f0:3e:35:d7:bc:c5:1a:8b:
e6:d1:a2:b4:f6:78:5e:19:19:47:9e:18:28:c0:83:
23:f5:7a:89:54:1f:c7:8e:bb:2e:30:81:ab:13:be:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:08:0F:E1:44:C3:D2:5B:F7:F6:79:A3:B9:F7:58:BF:3A:E1:3D
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:5f:81:9d:7b:64:f7:5e:a5:d3:5f:1f:f6:08:9c:db:bd:
30:87:ce:ab:df:37:66:a1:67:8d:90:d6:97:d1:63:0d:cd:e9:
0e:9d:76:9f:24:d6:cf:f3:d9:ad:f7:18:d7:83:77:83:89:d7:
19:e0:e2:d5:d1:e8:8a:67:99:1d:71:ac:ac:96:f9:b0:3e:ac:
75:31:d2:69:41:ba:ab:02:99:f5:94:89:e0:ab:f2:eb:7a:68:
b6:67:85:d1:ac:b7:f2:e2:bc:55:7a:36:c8:11:69:25:d8:0f:
35:8c:fd:34:fc:ff:2a:84:95:15:72:0a:fc:e1:0c:09:b0:e0:
fe:80:77:aa:f2:d9:ec:ef:20:0b:f8:04:8b:2d:48:30:92:1c:
5f:1e:c3:91:b2:fc:d5:26:74:90:bd:60:7a:8b:47:bc:2f:4e:
36:cc:a1:8e:14:2a:3f:b5:27:34:83:a0:38:ff:f1:7e:83:84:
9e:ef:11:58:dc:15:19:c6:55:c4:7b:40:69:b8:a9:87:af:f9:
a5:dd:08:98:12:04:90:79:d5:0d:19:ff:70:45:6f:e4:e8:f4:
ac:2c:e7:90:9e:9b:5c:eb:2f:9e:dc:b7:6a:94:7b:d2:c3:e1:
73:e8:1b:20:3e:20:be:d6:0e:72:2c:54:d5:64:44:4b:ae:4d:
bb:8f:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:32:26 2026 by rpki-client