Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: LjarqvT/lJYcZmOXxjOmJPaPJaGrxa2tqHRWqKCsZuQ=
Subject key identifier: 58:68:C0:3C:FE:4E:93:6D:4D:24:97:C0:E2:B2:01:FB:8B:B9:BD:AE
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 01A133D9FD2608F1145BE563968A089BB9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 0436
Signing time: Tue 13 Oct 2026 06:01:26 +0000
Manifest this update: Tue 13 Oct 2026 06:01:26 +0000
Manifest next update: Wed 14 Oct 2026 06:01:26 +0000
Files and hashes: 1: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (hash: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g=)
2: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: KeNSBuoWduRnt9MEuVS9r31TCmBsLEc76rt/WaHM9vQ=)
3: dyNHvxnyOEvIGZCsWdE0GK_WJck.roa (hash: Ng/F0cdvFnx6S3StPH1FKwNFMgSEMQ+RZVSVwygj6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:fd:26:08:f1:14:5b:e5:63:96:8a:08:9b:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Oct 13 06:01:26 2026 GMT
Not After : Oct 14 06:01:26 2026 GMT
Subject: CN=5868c03cfe4e936d4d2497c0e2b201fb8bb9bdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:8e:08:5d:de:ba:93:11:8e:95:a6:8f:9a:
71:73:d5:21:26:8a:53:18:f7:e3:b3:40:52:26:9d:
06:ae:5a:86:e9:29:f2:28:cf:7d:d4:fc:0c:bd:07:
16:d6:6f:22:6f:c4:4c:cf:4c:8e:1d:c2:fa:91:97:
e1:8e:71:4e:9c:eb:ce:4f:dd:ff:48:a5:91:b0:ad:
71:88:cd:78:c5:c9:fd:4c:e6:4e:05:27:3c:d8:d1:
91:40:ef:8f:95:22:8e:c7:7c:7c:d5:49:15:01:e7:
dd:5a:05:2b:8e:21:54:05:ec:64:d4:fd:21:11:a0:
99:5a:a1:43:b2:7d:7d:b3:d1:74:c5:68:b8:d6:c6:
b2:b8:a8:e3:68:0c:5c:16:17:5b:da:73:90:b3:34:
d5:f0:75:d6:9b:d2:20:94:01:29:0c:b4:bc:6c:4d:
b7:7e:47:f9:46:2b:aa:2f:a9:6c:84:e7:4d:29:a2:
e8:22:61:a9:69:4d:94:05:78:d4:05:9a:87:72:2d:
86:42:59:b3:ec:03:a2:62:55:b3:c6:b9:ca:17:f6:
5e:8e:28:7b:5e:2f:0a:5a:fd:10:e9:a8:28:ef:8e:
9b:8e:9f:cf:fa:56:cb:ac:e8:e5:8c:1e:69:9c:10:
1f:7e:16:59:b9:c1:db:03:37:28:46:4a:a9:ad:8d:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:C0:3C:FE:4E:93:6D:4D:24:97:C0:E2:B2:01:FB:8B:B9:BD:AE
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:38:ac:e6:ac:e3:4a:95:13:d0:86:03:4e:82:8f:73:c0:
a3:92:d0:dd:52:f4:07:cc:71:f5:bb:a7:8f:5f:28:4b:4e:64:
4c:ef:07:58:9b:a5:69:49:de:f2:47:dd:ba:cc:4b:81:01:d2:
5d:08:ee:83:bc:06:44:0d:76:4a:ef:9a:4e:b8:54:1f:e0:fe:
be:74:f1:fe:1b:11:05:d6:0f:47:8c:3e:7c:43:78:18:c3:6c:
18:ba:1e:55:1f:3b:22:03:23:d9:ec:2a:f6:ea:39:5d:a1:2f:
e8:15:2d:f8:00:9a:55:f7:75:e4:65:b8:8e:df:24:d4:6c:d3:
30:1e:38:6d:92:88:d6:80:7a:52:3c:31:3f:2f:fa:c0:4d:02:
95:a5:9e:29:fc:69:1d:6a:e8:6b:00:2e:7a:56:55:67:b6:ad:
d7:fc:ed:9e:7a:9b:bd:e2:a2:b3:ef:4a:41:89:da:f9:46:7f:
1d:46:33:74:72:38:1c:68:30:95:13:30:75:09:4b:71:cd:98:
c0:d0:f8:a6:e9:3a:40:2d:04:bb:1c:b7:1e:9e:0c:93:30:2b:
d2:27:a0:bc:f3:83:bb:83:5b:70:5a:0b:32:08:9e:be:84:59:
bf:4a:6b:b8:dd:f7:02:da:fa:88:07:48:8f:79:03:56:71:15:
c0:27:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:08:46 2026 by rpki-client