Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: mJbols7umRsU8HEC7UljSY1E2Jos1WKQ8pCxRmXFNgc=
Subject key identifier: A3:7D:97:5D:2B:71:88:68:5A:A0:39:D8:C9:13:5D:7A:17:AC:E6:84
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019D9962BAF4CD4404DF105A1B8DBF122C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: mkBjnPlAa5LicwrnUyejeEY5/wQPfsR0H8b7nWclYcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ba:f4:cd:44:04:df:10:5a:1b:8d:bf:12:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=a37d975d2b7188685aa039d8c9135d7a17ace684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:67:12:97:55:c1:70:aa:7b:37:29:22:c5:
f4:4f:ef:ea:8d:08:c2:ec:31:2b:1a:9b:5d:97:bd:
3f:76:8f:37:82:9a:93:4f:ec:7f:b5:f0:ce:f9:a8:
48:87:c4:32:8c:bd:68:24:2a:20:3f:69:2e:37:fc:
c0:35:ab:af:da:3b:cc:27:7d:5e:bf:3d:8d:c1:80:
e6:c0:b6:f3:44:a5:d7:50:56:82:6c:5d:8c:66:08:
67:18:a5:2e:90:58:f1:81:81:bb:30:69:9a:9f:4e:
93:4e:7e:c8:74:d0:74:e5:66:48:8c:3a:9a:b1:53:
0b:68:88:fa:b4:4b:26:cb:58:85:bf:5e:6f:44:a9:
60:8d:c3:61:f0:a2:fc:5b:ed:45:9c:c2:6a:5d:15:
c9:72:43:03:8f:dd:e9:8a:3b:e2:1a:78:54:aa:53:
50:29:7a:11:b4:9d:86:79:89:17:5a:73:5d:7c:ea:
db:e9:0d:7a:81:cf:cf:a3:19:30:2c:22:89:44:27:
b3:71:54:3e:34:5c:c7:80:0c:f9:9d:77:cf:87:8d:
cd:05:6f:c0:b9:ee:7f:1b:fe:5a:d9:1f:da:5f:2b:
2a:fd:49:b8:a2:d8:03:ae:2a:10:7c:37:6a:ae:d0:
3e:9b:18:f8:e6:ea:9e:0e:9b:50:7c:2c:bf:05:fb:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:97:5D:2B:71:88:68:5A:A0:39:D8:C9:13:5D:7A:17:AC:E6:84
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:b5:10:61:67:01:3d:06:3c:b5:71:94:10:16:9e:6a:31:
7b:40:6e:fa:d7:eb:55:d8:e1:2d:5b:38:ef:a0:1f:15:a8:75:
ca:dc:49:e5:ec:e9:75:cd:b7:84:ed:76:20:88:89:5a:af:ad:
7f:7b:42:86:80:02:47:16:56:fa:49:59:39:3e:57:23:d4:ed:
72:40:d7:22:72:0b:5c:6d:24:16:26:4b:72:32:3b:d8:89:62:
07:5c:80:49:ba:87:f6:5e:a9:1d:43:70:37:ea:3b:29:34:d8:
f2:be:18:62:be:59:f7:db:d3:06:8c:b4:c5:d3:12:c2:d6:8c:
ab:a6:16:02:47:a1:24:91:07:8c:6d:4e:2b:d2:e9:ce:e9:d3:
68:e4:56:1a:c7:c3:77:93:a4:1b:ac:40:b7:38:fa:60:eb:73:
b3:53:68:8a:86:48:bd:66:4f:84:82:aa:b0:ce:9f:2c:82:52:
b1:4a:69:0f:94:41:58:85:cb:f1:13:76:f1:5f:75:9c:a6:39:
95:3a:b2:fe:50:b5:3d:fe:8e:2f:73:63:89:69:c0:67:d0:dc:
a5:e0:0b:c7:ef:1b:8f:7c:12:fc:34:9b:0e:25:38:23:f7:cc:
c7:c8:9c:ec:d3:18:4d:c9:6e:22:fe:82:51:c6:68:49:12:bf:
9f:42:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:17 2026 by rpki-client