Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier: 21L5i0D42Ak7uhrAv1mgY41Lz4dDowjsrnYiX9QNhXo=
Subject key identifier: 3A:DA:F3:FF:01:C7:1F:BD:AA:EA:62:56:6B:5B:40:11:1A:32:72:9C
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial: 019CAC4710BBA5EDA910DFE1040A7F4AA987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number: 09F1
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: xpWEo8YCphGvXK4GSW3yg6xE3DjHHS86EzrhbdVn1J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:10:bb:a5:ed:a9:10:df:e1:04:0a:7f:4a:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=3adaf3ff01c71fbdaaea62566b5b40111a32729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:30:ac:d5:24:ff:37:5f:5f:35:54:27:a3:
b0:24:0c:d2:b8:c5:ef:58:85:14:1d:9b:cd:6f:e3:
c0:5c:8d:14:d5:3a:d3:4e:3d:22:4e:7e:0e:45:fa:
97:45:4e:9b:6b:45:b0:44:c8:77:72:79:c5:d0:a6:
b2:ae:3f:fa:aa:96:21:e9:5c:d0:35:79:68:49:39:
c3:80:a0:a2:58:7d:50:0b:b1:55:80:a7:5a:8e:5f:
aa:67:bc:e0:4b:11:cd:38:ee:ba:8c:73:ce:64:7a:
08:db:7d:fe:77:c0:a8:cb:7f:cc:be:c6:c9:42:d8:
11:6e:ed:73:71:66:28:71:e8:2a:c9:cf:7b:ed:cd:
93:5e:83:23:2c:4d:c0:31:aa:06:47:ef:67:4c:82:
ab:d1:3f:20:b5:68:92:2b:34:48:b7:5f:9d:ea:0c:
fa:7e:86:92:ce:38:19:af:f2:28:ab:3e:fe:30:12:
b8:c8:8f:de:4b:fb:08:5f:bf:36:9e:a6:c1:71:42:
9b:c6:a1:75:0b:6d:fd:ea:2b:5c:4a:71:c5:fb:c3:
4c:4c:6a:e4:be:32:3f:96:a7:85:09:90:93:a7:b9:
dc:4d:e9:05:6f:ac:12:bd:99:f4:f0:d8:69:60:29:
07:f3:57:2c:5e:5a:d0:49:30:46:33:23:b8:c5:34:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:F3:FF:01:C7:1F:BD:AA:EA:62:56:6B:5B:40:11:1A:32:72:9C
X509v3 Authority Key Identifier:
keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:f7:02:ce:10:37:b7:5b:85:0d:80:62:ec:fd:35:46:ac:
0b:f6:bf:f3:0a:e6:32:eb:26:05:41:0d:4e:49:15:c7:21:5e:
f2:e2:76:a1:94:a3:a7:08:79:cd:8e:ce:3e:61:e4:63:3b:04:
f0:a5:cb:af:72:1b:34:a3:7d:4f:5f:50:f7:4a:dc:4d:41:60:
48:58:03:c6:4e:56:97:6f:7a:17:f1:82:71:d9:ce:6e:1e:8f:
ba:a3:84:cd:42:a8:57:0d:62:fa:2b:bf:85:5f:1b:8a:af:94:
5f:6e:24:05:fd:c0:2e:1c:25:3a:98:45:79:92:0b:08:93:5a:
c4:1e:12:55:6e:af:1a:de:e1:a9:fa:1e:53:cc:f6:9e:2d:5e:
12:b2:a2:a5:cd:b4:d2:86:2b:0b:00:f0:49:7b:20:5e:7e:65:
32:13:b3:e5:51:43:74:22:c0:85:0e:5c:23:5b:ac:f7:52:76:
be:b0:ef:08:2a:84:08:ba:18:d9:ae:da:2e:bf:cd:6f:1f:22:
e6:ef:a1:f9:1e:7a:1d:df:d6:01:bc:fd:d7:01:8b:6d:74:28:
13:8c:25:c7:45:33:9c:5c:75:59:32:67:77:3f:c4:fc:d9:bc:
c5:98:c0:ad:2b:b7:4a:51:44:5e:90:69:1e:ac:22:c3:00:68:
be:ab:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:38 2026 by rpki-client