Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: 5r3dWfYVpdvWmVF5rb7sTMe4N/867Ikc4s9EBPQdGeg=
Subject key identifier: 08:D3:5A:68:EF:2E:75:CC:88:31:44:8A:DD:04:56:36:BD:20:F8:06
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 01A123F924B33FC20C79C8453A683979FA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 03CB
Signing time: Sat 10 Oct 2026 04:01:32 +0000
Manifest this update: Sat 10 Oct 2026 04:01:32 +0000
Manifest next update: Sun 11 Oct 2026 04:01:32 +0000
Files and hashes: 1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: BPn8kBpBGa1GvyAVOV+ifTsdoGY6IIII4oDM4IWfN+0=)
2: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=)
3: fG330oJK6uDJF_xx7des_grxkVg.roa (hash: Ui4UIt23UKsjN4zWsUmkgEXdPewzJHfPtS3XtElEXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f9:24:b3:3f:c2:0c:79:c8:45:3a:68:39:79:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Oct 10 04:01:32 2026 GMT
Not After : Oct 11 04:01:32 2026 GMT
Subject: CN=08d35a68ef2e75cc8831448add045636bd20f806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:d5:fa:e6:a0:ec:21:9a:e6:f0:42:f5:7d:
4f:1e:77:bc:58:87:0e:d6:e0:ab:cd:d6:43:8e:53:
56:ea:3b:65:c5:de:28:87:61:57:4a:1a:08:55:c5:
df:d0:9f:a7:19:4a:fe:ff:9c:a1:24:89:2c:fe:b8:
ea:dc:2c:44:ff:09:d7:33:4d:68:52:1b:e2:bf:24:
a5:1c:7e:c0:16:2e:dd:dc:03:db:78:7c:89:85:f3:
33:77:af:38:51:79:68:6d:6c:96:e5:15:a0:9d:87:
e6:77:3c:e3:c5:c7:a6:b9:56:a4:35:76:a8:d0:5c:
55:7a:b8:c1:df:41:d7:26:d0:57:29:da:49:c3:bb:
3a:f2:9a:03:06:f6:7f:65:73:22:34:c1:45:9a:35:
9f:fc:fc:5b:bb:7a:66:61:ee:6d:8e:78:4c:c1:c9:
69:46:ee:ae:67:6c:64:a9:b6:25:80:ca:ce:ac:7b:
0c:47:54:0a:3d:94:83:d0:c4:49:74:85:52:0e:9b:
b9:26:6e:39:67:8a:19:00:e7:90:3a:e0:b5:42:b4:
8f:f1:b2:85:81:77:0f:16:c4:c2:a5:fc:d8:16:27:
32:51:62:ca:8b:15:7d:77:a6:a9:fa:0d:4c:2f:b4:
cf:81:7f:ee:33:97:59:8d:e7:65:31:5d:01:18:11:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:5A:68:EF:2E:75:CC:88:31:44:8A:DD:04:56:36:BD:20:F8:06
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d8:0e:d9:d4:a2:2f:34:74:a1:ba:fb:d7:2a:8b:8a:57:9f:
f0:14:82:c0:05:af:a3:e5:93:6c:51:f7:2b:56:11:24:cd:f1:
dd:f9:3b:aa:a2:70:c1:5d:f2:90:72:10:91:aa:be:d8:8e:1f:
e2:0a:87:73:87:b3:6f:b0:42:64:e1:00:ac:a4:38:3c:81:40:
e1:b5:85:5f:e7:35:c2:a5:94:78:3c:81:93:bb:a9:13:78:b3:
94:4c:80:7c:2a:c1:b5:fe:00:12:4b:e4:d3:58:4a:37:78:e8:
ea:7c:37:2a:ec:3c:b6:44:00:f7:48:ec:ef:f9:9a:67:81:d8:
c5:e8:5b:ce:f6:50:b0:b1:48:cb:a4:34:e4:46:68:c9:65:56:
a0:88:53:eb:75:6d:79:90:74:05:50:15:45:7a:16:98:4e:bd:
11:46:87:e0:a2:0c:47:92:f0:da:4b:52:d4:04:94:1e:f1:67:
23:1a:5b:6e:9a:b7:23:d8:f9:18:d7:45:f6:9d:68:15:53:33:
27:99:b5:a7:a8:1b:2f:ce:55:9f:a2:c4:d0:db:85:c5:d7:da:
f9:2e:e6:fe:eb:cd:6a:82:34:bc:f7:41:a7:7a:68:f1:9e:d5:
51:94:b8:ae:5e:46:52:fc:22:98:47:8f:b3:b8:05:d5:dd:fa:
21:06:5b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEj+SSzP8IMechFOmg5efqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3
NzgyNjkwHhcNMjYxMDEwMDQwMTMyWhcNMjYxMDExMDQwMTMyWjAzMTEwLwYDVQQD
EygwOGQzNWE2OGVmMmU3NWNjODgzMTQ0OGFkZDA0NTYzNmJkMjBmODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRDV+uag7CGa5vBC9X1PHne8WIcO
1uCrzdZDjlNW6jtlxd4oh2FXShoIVcXf0J+nGUr+/5yhJIks/rjq3CxE/wnXM01o
UhvivySlHH7AFi7d3APbeHyJhfMzd684UXlobWyW5RWgnYfmdzzjxcemuVakNXao
0FxVerjB30HXJtBXKdpJw7s68poDBvZ/ZXMiNMFFmjWf/Pxbu3pmYe5tjnhMwclp
Ru6uZ2xkqbYlgMrOrHsMR1QKPZSD0MRJdIVSDpu5Jm45Z4oZAOeQOuC1QrSP8bKF
gXcPFsTCpfzYFicyUWLKixV9d6ap+g1ML7TPgX/uM5dZjedlMV0BGBFkMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjTWmjvLnXMiDFEit0EVja9IPgGMB8GA1UdIwQY
MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt
YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5
LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1tgO2dSi
LzR0obr71yqLilef8BSCwAWvo+WTbFH3K1YRJM3x3fk7qqJwwV3ykHIQkaq+2I4f
4gqHc4ezb7BCZOEArKQ4PIFA4bWFX+c1wqWUeDyBk7upE3izlEyAfCrBtf4AEkvk
01hKN3jo6nw3Kuw8tkQA90js7/maZ4HYxehbzvZQsLFIy6Q05EZoyWVWoIhT63Vt
eZB0BVAVRXoWmE69EUaH4KIMR5Lw2ktS1ASUHvFnIxpbbpq3I9j5GNdF9p1oFVMz
J5m1p6gbL85Vn6LE0NuFxdfa+S7m/uvNaoI0vPdBp3po8Z7VUZS4rl5GUvwimEeP
s7gF1d36IQZbqg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:57:29 2026 by rpki-client