Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft (raw, json)
Hash identifier: Y2d04zIX4qWilWnIg63XQmzcyl0pb106p96Jg9r2Deo=
Subject key identifier: 0D:0B:4F:81:1F:CE:26:7C:A8:F5:4B:FA:7F:40:D9:41:4D:57:B8:7D
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 01A0D87203403169BC97FC80A52A119896DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
Manifest number: 0126
Signing time: Fri 25 Sep 2026 12:02:25 +0000
Manifest this update: Fri 25 Sep 2026 12:02:25 +0000
Manifest next update: Sat 26 Sep 2026 12:02:25 +0000
Files and hashes: 1: A57R9BRoN3kCl5qh8WaGx0tGaO0.roa (hash: S5yffNC54PqNZ1mJ9sOGMjtx2mUlj70FeAxaew+aYks=)
2: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (hash: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=)
3: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl (hash: sXRAgdt1gUI21eT/8wd7ED8JOMM53vvQz7oLfP0GEXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:03:40:31:69:bc:97:fc:80:a5:2a:11:98:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Sep 25 12:02:25 2026 GMT
Not After : Sep 26 12:02:25 2026 GMT
Subject: CN=0d0b4f811fce267ca8f54bfa7f40d9414d57b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:32:06:ec:cb:1e:4f:8d:a1:0f:b2:ea:f6:
42:88:e2:eb:e3:c6:05:30:20:4b:a2:77:b1:d9:96:
dc:d3:97:a7:3f:85:f8:63:d7:d0:9c:99:98:df:96:
75:64:50:eb:57:c2:1a:36:47:a7:99:9a:6f:ae:62:
47:85:5e:43:ec:25:0a:da:50:6c:fd:b6:49:bd:b8:
09:91:35:be:f8:ce:0e:40:a0:a8:b5:93:c9:9d:af:
29:8c:28:db:7a:ad:e9:c1:2a:68:9c:df:03:62:74:
76:fa:75:25:ea:8e:7a:7d:e0:4a:7d:43:5a:4b:39:
75:7b:af:2e:38:c6:d5:91:5d:6e:34:bc:92:03:43:
f5:8c:ae:fc:a8:29:04:9c:ff:b1:e1:6c:cd:94:01:
15:a5:5b:cd:da:5e:f1:a0:c9:16:f9:42:65:c2:5f:
02:06:99:03:ab:03:ed:68:3e:55:e3:dd:6f:4f:26:
cb:1d:ce:30:b4:3f:c6:cc:d6:3a:96:5a:1b:93:a2:
85:de:f6:40:50:78:a2:0c:66:77:7d:3e:2b:0e:4a:
51:18:e2:61:d3:ee:b7:6d:f5:18:e8:bd:75:cd:e0:
76:94:67:b8:98:a5:6c:e0:55:97:54:38:cf:7d:2c:
26:29:aa:5b:9f:5d:43:1f:d8:48:93:98:3a:12:b9:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:4F:81:1F:CE:26:7C:A8:F5:4B:FA:7F:40:D9:41:4D:57:B8:7D
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0a:9c:07:36:f5:83:e7:74:32:77:81:23:e5:56:e1:20:5b:
69:7c:f4:91:d4:b1:84:ff:97:fd:b1:fd:c0:27:43:b0:b7:27:
b5:34:8d:9d:90:1c:be:94:63:fe:3f:b8:60:69:4e:46:77:47:
42:40:56:fc:f0:ac:be:bc:30:1f:2b:e6:34:0f:8f:48:93:a2:
e7:b5:4c:c1:1a:46:1c:a8:eb:e9:1c:a3:bd:0f:82:b4:a9:35:
06:70:75:e9:08:d2:aa:5e:d7:e3:e1:e6:79:5c:7d:8c:fc:8a:
06:9b:d9:6e:87:f5:ca:7f:b1:95:da:a8:69:78:89:28:51:99:
d0:d9:45:9e:53:ae:1f:47:67:a9:e8:e2:3e:7b:57:09:9a:3a:
67:0e:07:2e:ff:04:d5:6e:95:96:fc:5d:5b:f4:c8:57:da:c4:
fd:9a:7a:ec:ce:05:0f:a6:e1:7e:c0:5f:ef:cc:77:73:cb:4a:
4b:15:e2:32:c0:55:e0:c2:b1:c6:35:cc:7c:9d:a5:f8:4e:5b:
d1:85:f3:dd:24:75:3f:37:7c:04:67:9b:21:82:6a:bb:58:38:
61:60:e3:e8:a7:9c:9f:c0:2d:50:f3:81:dd:f5:a2:68:90:ad:
16:f0:52:22:d2:e1:6f:de:49:e0:40:14:77:dc:2c:dc:36:c9:
eb:17:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:15:14 2026 by rpki-client