Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: k3PYd+RyaaNjkC/6oDTOk3g/j6xW9m82y5mjfANvp4o=
Subject key identifier: 80:D7:B9:9F:0A:23:AE:22:F6:C1:8B:FA:5A:EA:F6:FF:13:8B:F6:51
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019FADBF9CC0A612FA07E339C209B1889E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 036C
Signing time: Wed 29 Jul 2026 12:00:43 +0000
Manifest this update: Wed 29 Jul 2026 12:00:43 +0000
Manifest next update: Thu 30 Jul 2026 12:00:43 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: RaJhyRmdW5LioLaZDSBezWhUaAqGc+2fwDCTiuGDBdI=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:9c:c0:a6:12:fa:07:e3:39:c2:09:b1:88:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Jul 29 12:00:43 2026 GMT
Not After : Jul 30 12:00:43 2026 GMT
Subject: CN=80d7b99f0a23ae22f6c18bfa5aeaf6ff138bf651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:2a:87:64:e7:85:8c:fb:c0:ec:ee:99:38:
6d:f3:10:dd:fc:16:45:d4:cf:9f:c7:9b:9f:2f:90:
ac:69:4c:93:32:d7:f3:cb:57:e2:0b:3a:12:bd:1b:
a0:02:d2:1b:03:70:e8:02:c5:dd:07:9a:57:10:a8:
ce:29:94:1b:ea:42:ca:c5:42:27:6e:c6:59:28:6c:
e2:b9:07:bf:9f:eb:85:da:e0:21:ca:2c:82:f3:61:
f6:28:4e:31:96:bd:d4:9a:a3:d2:d9:b8:a7:48:73:
e3:76:ab:e3:26:e0:b8:e1:5b:b6:30:d5:d0:70:2b:
a3:fc:54:da:63:da:1c:a6:55:b5:a3:f8:1b:c6:43:
27:1e:52:1a:cd:4f:54:f0:a4:00:39:99:94:fc:6e:
f4:6f:b9:a4:0e:c9:1c:b9:ad:d0:bc:7b:88:1e:40:
8f:e2:be:c0:ee:07:6b:70:1c:90:de:17:2b:a0:83:
a9:e9:7d:9c:2c:84:b7:06:2f:76:8d:3f:65:7f:16:
37:be:48:f0:f6:20:d4:16:fc:09:1f:ae:a7:94:24:
6d:14:26:8e:3e:db:16:f6:c8:04:3f:87:73:83:e5:
28:06:80:9c:67:7a:20:b8:24:d5:cb:48:da:3c:7d:
19:b4:33:2a:0d:35:23:6e:f6:5b:cf:66:19:45:8c:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:B9:9F:0A:23:AE:22:F6:C1:8B:FA:5A:EA:F6:FF:13:8B:F6:51
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:57:c8:ed:f9:89:38:70:cf:f6:3c:ab:da:bd:aa:65:c3:
7c:bf:8a:8b:19:29:3d:83:16:17:c9:5a:ed:8a:f3:a2:85:68:
54:0c:b8:5e:71:d4:43:6c:21:3f:c0:19:84:d5:f4:79:eb:66:
9c:07:b5:55:70:d0:42:cb:77:f3:4a:0d:09:f5:e3:8d:be:f0:
9a:7c:1f:57:9b:38:11:0a:63:f9:39:c4:01:bd:f8:0d:cd:99:
1f:00:43:9c:2c:8c:ff:c9:64:8f:3d:76:01:71:83:70:81:e8:
8b:97:a7:9e:79:b6:f9:cd:d0:92:73:89:ea:5f:43:c2:e6:54:
6d:61:c0:35:9d:2b:87:4c:2c:4b:f8:bc:10:8e:e9:74:5d:45:
8d:4e:54:6a:54:6f:20:f9:39:9c:11:42:64:e4:1d:35:eb:86:
e8:86:89:c4:4f:ee:49:e5:a3:3d:1f:a3:d5:ec:a3:54:bc:d1:
35:8e:af:0c:9b:60:51:43:54:4b:06:3a:2d:8d:57:b7:4e:47:
c7:df:d5:b4:23:a1:9b:0e:cc:d3:df:b9:46:75:6f:28:c1:56:
5f:22:39:1e:90:74:06:29:52:fe:7b:e9:96:75:99:1a:c2:7a:
7f:89:2e:3a:f6:42:48:59:0d:c8:2c:38:ec:5d:7c:d2:cb:4d:
56:5f:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:16 2026 by rpki-client