Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: YwufMCa3QNEHv+AsKEF0F2O8hM/f2kGhwAikCBcVWCY=
Subject key identifier: 20:07:1A:20:E8:05:B2:4B:73:47:7F:D3:D4:F1:2F:49:8F:3F:6E:DF
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 01A0E13D255993714BFF62040E755FFAB84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 0470
Signing time: Sun 27 Sep 2026 05:01:15 +0000
Manifest this update: Sun 27 Sep 2026 05:01:15 +0000
Manifest next update: Mon 28 Sep 2026 05:01:15 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: 0qs7oULWOCH56RoEnp67RYqRcQdF/NMTfRJHJ714LWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:25:59:93:71:4b:ff:62:04:0e:75:5f:fa:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Sep 27 05:01:15 2026 GMT
Not After : Sep 28 05:01:15 2026 GMT
Subject: CN=20071a20e805b24b73477fd3d4f12f498f3f6edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:58:70:9b:ed:23:dc:10:cc:4b:fe:0f:d8:
02:0c:11:a6:62:84:9d:59:7e:f3:bf:5f:d6:8d:16:
c4:38:83:67:5e:93:66:95:95:ad:fd:18:f9:03:07:
a5:58:0f:09:8e:68:6f:bd:00:a6:d7:a5:16:19:a9:
1c:31:65:bf:5f:5e:0b:3c:93:4c:37:80:7b:4f:01:
1d:3f:46:2e:96:f2:44:01:7e:67:d5:8e:7c:01:b4:
73:96:ad:d5:61:40:e7:fc:40:88:ce:d3:23:5a:21:
a1:dc:ee:f5:7f:b0:a0:70:d5:50:f4:e7:17:7a:dd:
8d:24:64:6e:7a:7b:74:9c:1a:44:33:9a:44:f0:1f:
71:2e:a9:03:d9:73:a0:4b:c6:55:66:01:e7:a6:dc:
c2:34:6d:d4:47:62:c4:1f:c3:e5:38:92:08:0d:f3:
1e:f9:af:52:de:ca:84:25:f9:d6:98:94:4a:90:f8:
dc:42:c1:84:01:84:af:c0:81:34:5b:32:e9:83:cf:
cf:92:d8:59:e9:fc:d5:35:6b:37:ad:ab:d5:e0:d3:
d0:c6:ff:19:20:d4:86:66:c4:27:a2:82:a0:6a:ea:
d2:fd:7d:c9:80:4b:21:d1:42:e2:24:f0:00:13:9a:
13:ad:d0:6e:c6:1b:2a:0e:61:75:ae:55:ad:82:21:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:1A:20:E8:05:B2:4B:73:47:7F:D3:D4:F1:2F:49:8F:3F:6E:DF
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:0f:cb:62:15:d8:cf:0c:a6:85:13:76:11:49:8b:2b:cb:
d0:ee:52:ab:13:30:5f:a2:c7:c6:bf:0b:32:e5:3e:53:4a:42:
42:e3:8a:e4:57:5f:94:b3:eb:1d:7f:31:16:5b:31:91:f9:72:
bf:5f:16:51:c1:c3:80:8f:fa:c7:d3:67:96:7e:42:83:a9:a0:
92:7d:02:13:61:7d:e4:95:dc:ad:09:39:d9:1f:8d:c3:cf:c7:
6b:54:5a:7e:08:86:13:28:c5:e0:38:90:89:41:4d:ca:4d:37:
96:a9:50:02:6c:45:ad:d9:fc:b9:b7:97:03:1e:39:a3:40:9e:
82:e7:e3:96:2d:71:96:ff:88:e5:a9:24:ea:55:f4:98:3c:95:
a0:d0:34:5f:2a:ae:0d:b4:dd:40:06:3a:c9:1f:bd:59:15:3d:
a0:5c:1e:b2:69:8a:3e:33:f4:1e:ff:a3:d2:08:0a:61:96:2f:
3d:8c:b5:3c:7d:2e:58:84:28:26:d5:03:44:05:4c:4d:c9:11:
39:4c:21:46:03:8b:0f:46:85:dc:5f:7c:27:7a:db:bf:10:26:
16:2e:05:b7:02:33:bf:d0:eb:67:83:d6:de:7d:b9:be:b8:65:
b4:b5:ad:9e:61:55:db:80:ce:31:0b:9a:43:bb:69:51:e5:2b:
14:e6:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:54:59 2026 by rpki-client