Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: KR6HfWMpTECdsJcY2Hs7AMXLB2CD1/E9P6uxepywSMo=
Subject key identifier: 95:EB:CE:79:DC:92:1D:96:5A:6F:FC:35:70:72:73:89:2A:28:D9:18
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 019D9C631D4A742F57FDB4B699866E9D64F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 01F4
Signing time: Fri 17 Apr 2026 17:00:34 +0000
Manifest this update: Fri 17 Apr 2026 17:00:34 +0000
Manifest next update: Sat 18 Apr 2026 17:00:34 +0000
Files and hashes: 1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: tqF3L4yt9SqMvIlcv5tJLdnIsbQat9bOjJEcwkToNvs=)
2: Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (hash: T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=)
3: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=)
4: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (hash: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:1d:4a:74:2f:57:fd:b4:b6:99:86:6e:9d:64:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Apr 17 17:00:34 2026 GMT
Not After : Apr 18 17:00:34 2026 GMT
Subject: CN=95ebce79dc921d965a6ffc35707273892a28d918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:05:77:2e:b7:f9:35:f7:08:ed:81:c1:c4:
e1:f3:b4:b5:16:91:28:5f:7b:86:93:44:16:78:10:
ea:28:05:be:03:51:a8:4f:dc:1b:7c:6f:cf:24:1b:
ac:b2:0e:25:f4:f9:9c:8c:ad:14:ec:c3:0a:71:de:
a4:e4:2c:25:ff:65:73:af:f4:cb:f5:b1:df:4b:39:
18:85:81:bb:c4:0d:6f:5c:0c:2e:f4:1a:55:d4:9f:
a1:0e:cc:b3:fd:94:61:95:a3:b0:9f:34:70:04:30:
c0:7f:99:fa:0d:15:5e:41:c0:67:33:3a:7c:7b:7c:
f0:f7:90:1e:ed:4d:73:e5:92:03:59:67:ac:25:ad:
ac:01:b3:c3:c2:47:26:17:30:26:ae:1d:54:b8:7c:
bb:17:9d:99:c7:b8:00:5f:1d:33:5c:a8:cd:9f:52:
fd:22:15:c0:0c:b8:f4:a2:0b:7f:87:bb:88:23:91:
34:3e:0e:c2:f5:f7:da:df:f0:0f:46:16:0d:ee:0f:
04:c7:24:70:97:b5:cc:66:f4:bc:ff:1a:45:04:35:
66:08:96:73:49:0e:ad:be:3a:81:8b:04:9c:88:d1:
b1:4e:27:2e:1f:91:0f:6a:96:a9:5a:6e:4d:ee:fa:
51:e5:76:7f:3a:fb:44:67:f6:ba:c5:e7:0e:a2:e2:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:CE:79:DC:92:1D:96:5A:6F:FC:35:70:72:73:89:2A:28:D9:18
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:32:0a:7b:14:59:33:4b:99:d5:3e:f4:0e:7b:d6:fe:6b:a0:
43:a7:77:8c:52:b9:c8:a5:7d:44:bb:bd:96:f8:67:11:7f:42:
57:d7:e0:07:b0:24:94:9f:c2:65:41:4b:8d:d3:c2:10:7d:0d:
2e:21:b1:69:db:7e:3f:0f:ad:fa:95:ad:c4:fe:a4:01:c9:b1:
f6:28:db:77:08:21:44:06:c1:a7:58:d8:0a:ab:f7:77:22:75:
26:75:a6:58:b7:6b:60:a3:2a:33:db:2c:b1:43:8c:f7:b1:70:
2a:51:89:d9:cf:ce:1d:f5:27:29:ca:91:bb:a1:8b:3b:50:ef:
10:3e:32:0a:c4:11:98:8f:ec:ea:f6:3b:cf:eb:cc:fe:71:92:
94:09:69:bf:12:d3:87:d0:e8:6e:4d:21:53:9e:27:65:75:d9:
87:de:72:bc:d2:ad:63:e1:dd:c3:4b:38:6d:08:b9:39:69:a5:
07:ea:5a:9a:1c:e1:74:cb:e7:dc:cc:ef:1a:c1:e3:c3:e9:e1:
82:64:dd:36:f8:da:47:dc:2e:c2:81:8c:51:83:7e:42:e5:58:
40:3b:b4:ad:c5:de:93:9a:cd:96:0a:70:57:de:e9:97:d4:b6:
8d:77:3e:92:97:b6:15:4c:b3:ef:32:2d:53:7e:8e:16:ab:5c:
a4:52:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:40 2026 by rpki-client