Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft (raw, json)
Hash identifier: NYW+PvuhrTpfMxJy56/5Z+DM88xhYqlzUHLMvHDXWjI=
Subject key identifier: E1:14:CE:C2:9D:C4:7D:AF:22:A3:8C:21:DA:5C:91:9C:93:BD:23:B8
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 019FAB2C52F770848988B36C0D98EDF1DE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
Manifest number: 8A
Signing time: Wed 29 Jul 2026 00:00:36 +0000
Manifest this update: Wed 29 Jul 2026 00:00:36 +0000
Manifest next update: Thu 30 Jul 2026 00:00:36 +0000
Files and hashes: 1: A57R9BRoN3kCl5qh8WaGx0tGaO0.roa (hash: S5yffNC54PqNZ1mJ9sOGMjtx2mUlj70FeAxaew+aYks=)
2: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (hash: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=)
3: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl (hash: 29BAvMuc/bY3zPZ17AocE3LDlhDMSuKwKHVxqLyaemc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:52:f7:70:84:89:88:b3:6c:0d:98:ed:f1:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Jul 29 00:00:36 2026 GMT
Not After : Jul 30 00:00:36 2026 GMT
Subject: CN=e114cec29dc47daf22a38c21da5c919c93bd23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:a2:13:33:d0:bb:c8:dc:5c:7a:5a:ac:ee:
e2:97:de:72:ea:b0:1b:15:7f:ae:33:42:99:ac:8f:
f2:5b:9b:3a:79:5e:27:37:11:20:ea:84:d9:cf:3c:
9e:74:32:df:63:d3:11:67:2b:1b:bd:8f:01:52:64:
f5:cf:f7:ef:49:78:6b:46:ca:e9:bc:4a:91:ee:73:
40:2e:17:aa:89:ea:c8:42:4a:c1:e7:df:af:f6:34:
56:e7:9a:2e:a5:03:d0:2e:bf:ae:0a:da:ec:2a:ab:
c3:0b:40:ab:5f:4a:5f:81:3b:c9:54:ea:fe:bc:be:
ea:1a:91:be:f8:1b:69:8e:c3:d5:b2:15:05:2e:67:
1e:8d:32:97:6d:61:2a:75:b2:1f:dc:ad:b4:1a:67:
af:4c:92:1d:9c:7f:e6:2e:f1:38:d1:0c:2d:77:26:
03:e3:fa:5f:ff:0f:8d:e1:d0:fa:3b:f2:7e:ae:e5:
0b:a4:7b:79:9e:cf:0a:8d:39:88:4d:57:6a:d3:48:
c3:62:2b:45:15:93:e8:ac:ec:4a:1e:49:e3:ed:79:
b1:74:cb:bc:11:2f:64:15:da:0c:ac:c2:8a:da:14:
78:6a:fb:03:43:3c:83:ce:5d:4d:fc:39:cd:83:78:
d0:b7:21:4d:06:2e:89:b7:cb:89:78:d4:79:95:f2:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:CE:C2:9D:C4:7D:AF:22:A3:8C:21:DA:5C:91:9C:93:BD:23:B8
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:63:9e:ce:55:85:51:42:8e:b4:90:28:d0:64:f7:de:9e:43:
e0:56:d8:2e:7b:55:e7:cb:05:f5:9e:1e:8b:d8:ab:b8:0a:27:
61:99:a0:75:d7:8f:4f:84:69:1f:aa:16:ea:46:fa:69:2f:b6:
d3:35:96:6e:5b:04:8d:f9:a2:de:1a:f8:b3:40:8c:5f:f3:40:
d6:9e:ff:9f:6f:f1:77:96:c3:eb:48:9e:89:98:80:73:48:40:
df:e5:d7:49:3e:b2:65:dd:2a:78:6c:43:48:06:c7:1c:32:fc:
e8:ff:af:4c:67:fd:38:51:66:6d:07:9d:61:7b:a6:a3:58:d0:
e5:2e:1c:79:2b:d2:97:c0:da:6c:14:a5:80:fc:b9:ee:62:14:
29:fe:55:50:7b:af:e1:99:82:b7:d5:a5:6a:97:e3:ba:52:97:
5a:c7:38:60:07:c5:f0:13:f5:59:86:3d:e6:44:5b:bb:f0:b8:
c0:cc:a1:5c:92:ec:65:c3:f1:96:bc:2e:bc:af:33:eb:e4:1f:
8d:8a:76:db:4f:06:4f:69:8a:7d:c1:8e:a5:52:b8:13:86:b5:
3b:9b:31:fd:00:61:96:68:f6:35:5e:43:a8:c5:c7:68:4c:39:
f9:d2:ee:fd:bb:a9:5a:9f:e5:ec:45:40:54:0b:b7:bc:2d:77:
e6:6f:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:34 2026 by rpki-client