
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: MGTeN76bF8jCFmgL1gdtOkkuhcDvkmzxTeJiEuNsb9I=
Subject key identifier: 7E:CE:34:EA:28:FF:4C:04:39:7E:C5:F8:2C:12:C5:F1:47:F1:B3:EA
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 019FAA87D5518E08FB7B9B9ACA8B91CE24BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 21:00:56 +0000
Manifest this update: Tue 28 Jul 2026 21:00:56 +0000
Manifest next update: Wed 29 Jul 2026 21:00:56 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: AijgXCMVzhqY5m2iwMGp3DxwCO5VN6SNzKIgDdwNKGY=)
2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d5:51:8e:08:fb:7b:9b:9a:ca:8b:91:ce:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Jul 28 21:00:56 2026 GMT
Not After : Jul 29 21:00:56 2026 GMT
Subject: CN=7ece34ea28ff4c04397ec5f82c12c5f147f1b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:16:39:ad:ce:a4:67:13:87:bc:f7:31:1d:
02:95:2c:5a:0b:7e:aa:a2:00:c0:36:56:d9:11:87:
d0:ce:85:d3:8e:94:72:bc:67:f6:cf:f1:f2:35:d6:
b5:96:b1:95:af:08:49:a8:7a:97:c7:cb:0c:14:1c:
58:21:dd:f7:af:ec:03:b9:6b:5c:4a:44:ea:a1:5a:
bb:0b:e4:d1:88:73:98:86:47:c1:4b:dc:4a:57:78:
68:9e:cf:08:da:98:d2:5b:6f:a9:15:76:14:b0:8e:
e5:20:a2:5a:39:8a:18:ac:0a:25:e3:5b:fe:79:8f:
5c:a6:22:0e:e8:ba:6c:4d:6f:c1:e8:c5:fe:e5:cf:
a8:ea:06:06:e2:47:60:66:0f:75:94:a8:89:39:d1:
0a:b1:ff:e0:1b:5f:1a:4a:79:2b:f1:fd:05:09:b3:
12:8b:17:04:f1:ff:c6:d4:01:d9:6d:06:e6:6b:1f:
88:13:87:f7:5a:c9:9a:05:1b:0c:1b:e0:b7:e8:d7:
15:02:98:5a:72:7f:38:c7:ce:ab:57:70:5e:25:60:
7c:2e:b4:79:ac:06:87:03:a5:b7:6a:5f:c4:f9:8a:
dc:98:d1:e3:e1:5d:ad:c9:92:90:49:36:fe:96:3a:
14:f5:eb:da:31:57:e0:b5:5c:d0:4e:19:c3:58:06:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:34:EA:28:FF:4C:04:39:7E:C5:F8:2C:12:C5:F1:47:F1:B3:EA
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:87:77:f5:f6:08:95:6a:f8:3b:d5:4c:71:18:93:8b:bf:62:
ae:fc:5f:cc:21:62:9a:ab:3c:12:7d:c1:16:c7:33:cc:5c:b1:
95:50:9b:d0:01:9c:d5:45:ac:3f:af:ba:c5:5e:8c:07:ac:e1:
9d:4b:10:5f:f5:b9:69:1c:19:31:3a:f5:9b:94:f4:5e:09:a9:
90:ea:35:a7:5c:0a:a4:76:0b:ab:e0:45:17:db:cc:37:fd:5b:
05:27:5d:73:67:fa:7a:8a:fb:5b:01:16:62:8a:07:95:b8:1f:
6b:1c:4b:95:3f:36:d5:d0:92:cd:79:6c:59:23:ad:32:f5:ce:
85:b1:bc:b5:59:73:95:da:8b:f2:c6:2e:39:7c:d1:88:9b:21:
d7:a9:a1:62:fc:da:43:97:19:15:5e:a9:95:7d:1e:88:3b:5d:
87:30:ad:eb:fe:93:21:88:ab:21:69:22:1b:62:e4:b0:f5:4b:
56:fc:58:e5:9e:d3:c4:2e:6f:f7:98:cc:33:b2:1d:fd:43:f9:
c9:01:24:14:3d:ef:40:f8:f1:be:32:c2:c6:2d:39:da:40:20:
a3:3a:3e:dc:7c:b7:8c:f9:78:b1:51:fc:53:bd:75:2b:8f:0f:
6b:7d:60:f2:ae:3d:0b:ee:d0:2b:48:ab:e9:89:f6:c2:80:45:
89:39:64:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:38 2026 by rpki-client