Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: r4g3NyowYjPd0qULVBptNVIZNpfsLTmMgM1VV0meg8Q=
Subject key identifier: 48:A5:FA:01:0A:9C:87:FB:9B:9E:55:38:9A:FD:F0:F6:B4:EE:A9:46
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019FAC3F0CFCCFDC7BDF570F5E120A246BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 05BA
Signing time: Wed 29 Jul 2026 05:00:40 +0000
Manifest this update: Wed 29 Jul 2026 05:00:40 +0000
Manifest next update: Thu 30 Jul 2026 05:00:40 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: 64jlxNrhEGgHGmXUPY+T3FrYuLjk56/BVzBGKwr4bn8=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:0c:fc:cf:dc:7b:df:57:0f:5e:12:0a:24:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jul 29 05:00:40 2026 GMT
Not After : Jul 30 05:00:40 2026 GMT
Subject: CN=48a5fa010a9c87fb9b9e55389afdf0f6b4eea946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:9a:d4:1d:76:af:4b:52:f8:5f:1a:e0:28:
26:52:95:15:ea:f8:17:a5:80:e3:71:26:d2:4e:65:
c5:36:de:29:30:90:98:4f:fd:ca:1d:3c:91:e9:cc:
aa:22:f3:95:a0:75:eb:49:2d:fd:a2:99:44:b1:c1:
7b:58:cf:5a:da:a4:8b:75:f7:9f:d4:ec:ed:44:bc:
31:43:39:e2:dd:c0:32:5c:df:32:12:b7:8c:74:dc:
b9:51:76:f3:58:7e:cc:e4:cd:d5:9d:80:a7:b0:a8:
38:11:0c:91:3d:98:4d:5d:4d:d5:ef:fd:f6:83:3e:
c8:47:61:b7:2c:00:ff:7a:fd:6c:5c:6a:ca:03:8e:
25:b6:03:5d:ca:24:42:c2:0a:de:9c:6d:cd:1b:03:
f0:9e:95:40:02:43:9f:45:ba:89:64:69:3a:cb:00:
cc:34:9f:71:25:f2:0a:0d:9e:0d:bc:ae:0b:bc:bb:
be:99:e1:69:05:86:b9:b8:7e:cb:53:17:78:52:04:
2c:23:86:10:35:e2:ad:b9:b7:bf:80:11:45:fb:f5:
63:9e:a2:54:81:1d:3a:09:ca:d4:ad:d0:1e:2d:14:
af:07:04:65:79:75:84:75:67:b3:84:d8:86:56:71:
9b:e1:ff:08:e3:50:44:1d:43:d3:01:46:18:71:24:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:FA:01:0A:9C:87:FB:9B:9E:55:38:9A:FD:F0:F6:B4:EE:A9:46
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:58:23:dc:e6:6e:f5:61:88:3b:be:cc:3d:d6:df:88:1b:7b:
c3:6f:e7:19:a8:5a:d4:47:e7:db:1e:65:61:8d:c9:50:da:14:
37:eb:a4:45:1f:c3:3a:4e:8a:78:1e:b4:3a:8b:0e:ce:38:21:
10:e4:3d:93:75:30:1f:f1:f6:eb:94:00:c8:49:34:ae:5f:ae:
40:d7:0b:99:a6:b0:c0:0c:0c:0b:ae:69:e9:7f:b2:30:33:b2:
ba:33:b5:95:e9:d4:28:ba:21:6b:48:81:b8:06:df:68:bc:00:
50:bc:72:59:f9:1f:81:35:9d:80:6f:18:6f:03:d3:32:fc:b1:
56:e7:c3:5f:b6:85:80:bc:5e:b6:36:a7:a8:2f:c6:64:eb:8f:
cb:82:8e:90:17:3a:d5:eb:40:4f:72:10:5d:a6:bf:ba:54:60:
d6:84:a3:94:56:6f:a5:59:88:c8:25:c9:d1:83:6c:fe:b1:24:
27:23:58:64:ae:35:f2:16:9e:a5:a9:dc:85:7a:64:33:ed:1c:
1d:cb:b6:55:ba:1d:18:db:cd:c9:f4:a5:4b:fb:05:ea:93:73:
a3:bb:ce:49:00:07:2c:31:3f:4b:04:93:84:d0:f2:12:b5:82:
9b:f0:52:9e:fd:8d:3b:c6:f1:52:59:7f:6b:31:6a:37:52:47:
9d:f1:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:08:59 2026 by rpki-client