Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: O+E+flHIOhVpXGuqsNA+QpggvTLOY/n/gs1XaAwLrAE=
Subject key identifier: A4:76:C2:23:52:C3:DE:0F:AC:44:B9:D7:7B:B0:2E:89:EC:88:21:48
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019CA7FC624CC1046197AC113EF8524C3429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0649
Signing time: Sun 01 Mar 2026 06:01:01 +0000
Manifest this update: Sun 01 Mar 2026 06:01:01 +0000
Manifest next update: Mon 02 Mar 2026 06:01:01 +0000
Files and hashes: 1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: EsAKc7zO6Gjy4cz6M7QJMFbeOKTGLAf05hbSWRLxZdo=)
3: okNjrlPSLJ97WbWID906BW9GXVE.roa (hash: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:62:4c:c1:04:61:97:ac:11:3e:f8:52:4c:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Mar 1 06:01:01 2026 GMT
Not After : Mar 2 06:01:01 2026 GMT
Subject: CN=a476c22352c3de0fac44b9d77bb02e89ec882148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:72:5a:64:61:6f:47:17:5a:7f:0c:3f:39:
1e:5c:51:e5:10:97:bc:93:39:86:5a:9e:a3:85:f4:
14:8d:2c:8a:43:d8:58:04:80:2d:c2:dd:f9:03:14:
7f:c6:1d:6f:e3:46:88:db:47:4e:06:63:76:71:05:
de:6f:3f:95:06:ef:db:ac:5a:ef:7f:9c:ae:26:6b:
b3:00:3d:f2:37:de:05:0b:a9:b0:d9:03:8e:74:98:
b9:3d:a5:97:f6:15:c8:fc:ed:a7:d9:5d:26:da:f4:
83:75:66:1d:89:2e:02:98:bb:65:30:29:df:0e:8d:
8e:c1:70:3d:b5:b2:5a:c1:0b:17:af:88:56:06:93:
a1:09:5b:dd:0b:24:17:23:b3:31:4e:2d:cc:ba:cb:
6c:bb:8a:82:54:cc:1a:48:66:b2:b0:73:eb:8a:c5:
58:da:5a:be:ee:07:72:59:d6:4f:3f:79:88:eb:4b:
02:ee:18:62:b2:3d:13:69:8c:a6:ae:f5:5a:c8:58:
d0:f6:11:75:28:94:03:69:bc:9a:6d:94:d5:7c:8d:
c0:c2:67:fb:86:fe:8b:26:dc:53:97:7b:91:f7:39:
78:61:92:f3:06:11:25:b5:ee:2f:d8:f1:57:e7:bf:
f8:a7:84:8a:62:53:6f:eb:80:1c:6e:4f:5b:a2:a7:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:C2:23:52:C3:DE:0F:AC:44:B9:D7:7B:B0:2E:89:EC:88:21:48
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:54:8d:93:c3:cc:93:d6:59:2b:f4:fd:93:1a:e7:35:79:
bb:e9:3d:93:c4:11:ab:bb:69:d5:70:a1:6a:0e:06:5c:11:f9:
6c:e5:dc:ce:6f:ff:04:83:e9:d0:9d:e5:76:27:d6:64:a2:50:
85:b6:c1:33:6b:eb:a0:60:0c:14:bc:44:c2:f9:95:5d:6e:76:
9d:44:d4:e7:be:78:37:ed:16:47:67:00:c4:7b:57:a8:f8:81:
6c:93:6e:3f:27:79:9a:f5:bf:59:d8:97:87:2e:26:47:87:20:
54:c9:2b:f1:f2:31:6c:d8:53:af:fa:ba:06:2e:4c:f2:50:dc:
cb:0e:b1:03:7f:7a:1d:67:d5:62:25:36:7d:2e:4c:9f:44:0c:
0f:86:09:aa:c4:8a:88:2c:ee:6a:65:50:4e:d5:35:f0:d3:47:
2e:20:1b:36:c3:15:43:ca:08:2b:27:d4:f6:9b:a2:46:b2:17:
b9:9a:17:a9:ef:6b:19:30:16:f9:1b:56:78:4c:b7:02:b8:79:
b3:4f:57:4d:13:a6:fc:f0:a5:76:28:ca:1f:c8:f4:bf:90:74:
a9:17:c0:6d:2e:24:f5:98:eb:3a:ac:7f:7a:a3:56:96:fa:8a:
1d:7b:55:c3:1c:0b:ce:6b:40:65:a1:a5:1d:49:21:71:f9:de:
66:16:e0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/GJMwQRhl6wRPvhSTDQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjYwMzAxMDYwMTAxWhcNMjYwMzAyMDYwMTAxWjAzMTEwLwYDVQQD
EyhhNDc2YzIyMzUyYzNkZTBmYWM0NGI5ZDc3YmIwMmU4OWVjODgyMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlyWmRhb0cXWn8MPzkeXFHlEJe8
kzmGWp6jhfQUjSyKQ9hYBIAtwt35AxR/xh1v40aI20dOBmN2cQXebz+VBu/brFrv
f5yuJmuzAD3yN94FC6mw2QOOdJi5PaWX9hXI/O2n2V0m2vSDdWYdiS4CmLtlMCnf
Do2OwXA9tbJawQsXr4hWBpOhCVvdCyQXI7MxTi3Mustsu4qCVMwaSGaysHPrisVY
2lq+7gdyWdZPP3mI60sC7hhisj0TaYymrvVayFjQ9hF1KJQDabyabZTVfI3Awmf7
hv6LJtxTl3uR9zl4YZLzBhElte4v2PFX57/4p4SKYlNv64Acbk9boqezfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR2wiNSw94PrES513uwLonsiCFIMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvFUjZPD
zJPWWSv0/ZMa5zV5u+k9k8QRq7tp1XChag4GXBH5bOXczm//BIPp0J3ldifWZKJQ
hbbBM2vroGAMFLxEwvmVXW52nUTU5754N+0WR2cAxHtXqPiBbJNuPyd5mvW/WdiX
hy4mR4cgVMkr8fIxbNhTr/q6Bi5M8lDcyw6xA396HWfVYiU2fS5Mn0QMD4YJqsSK
iCzuamVQTtU18NNHLiAbNsMVQ8oIKyfU9puiRrIXuZoXqe9rGTAW+RtWeEy3Arh5
s09XTROm/PCldijKH8j0v5B0qRfAbS4k9ZjrOqx/eqNWlvqKHXtVwxwLzmtAZaGl
HUkhcfneZhbgOw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:59 2026 by rpki-client