Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: 4Y7K3SwXoSY9iDHxVGIUnJQ52mw3C+kZ9jfits0nsJI=
Subject key identifier: A9:29:85:3A:E9:68:AF:8F:0F:59:ED:DA:36:5F:F5:C8:C3:7B:95:6A
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019D9962C3C5792B7285F2FD8FA0457F9016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 06C6
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: qIVvjSXOU7coxkDYxMKe49Ok0MKRpDczKD/Kj6vJQcU=)
3: okNjrlPSLJ97WbWID906BW9GXVE.roa (hash: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c3:c5:79:2b:72:85:f2:fd:8f:a0:45:7f:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=a929853ae968af8f0f59edda365ff5c8c37b956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:4b:7b:bc:50:6f:df:37:aa:18:8e:3b:ef:
20:3e:d5:9d:69:80:08:fa:a0:8e:08:2c:51:66:75:
51:7e:ea:6c:24:4f:33:2e:9e:9f:5c:42:b2:e6:cb:
87:35:f8:f9:e4:a5:33:fc:1c:a6:e0:fa:2c:e9:6e:
77:23:98:8c:1f:d2:26:ef:dc:8a:de:02:d9:36:2a:
43:f8:0b:81:72:14:0f:75:e8:f5:4d:54:5e:cf:9c:
51:15:28:a9:7d:4a:d7:54:bf:d7:74:af:d3:ca:19:
95:f1:7f:16:dc:64:2c:bb:6c:b2:de:cd:2a:d0:d2:
3c:cd:c6:cb:df:88:2f:3c:26:74:52:23:0d:a6:25:
92:22:95:44:e7:5b:71:70:1b:ea:22:ff:4e:29:39:
e1:e7:68:fe:e6:d8:21:fa:bd:a1:fc:71:2c:40:42:
15:39:f9:9d:09:29:4d:6f:56:31:2e:8b:a0:ff:66:
f5:8f:d2:85:57:99:73:9c:e4:c3:ca:e1:41:4f:8e:
27:19:97:cf:a6:21:1d:08:9b:a4:c1:d7:1a:87:f4:
ab:2e:85:7b:97:af:c5:0e:fa:21:b7:b9:44:e9:13:
74:74:77:ca:e9:bb:50:30:b8:79:be:e3:98:d3:dd:
e5:46:83:a4:1a:b7:02:be:6d:7a:2f:86:81:33:07:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:85:3A:E9:68:AF:8F:0F:59:ED:DA:36:5F:F5:C8:C3:7B:95:6A
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:00:16:a6:33:ed:24:91:99:0f:21:98:60:2f:7c:b2:74:83:
04:a4:3f:11:a1:47:39:67:0c:60:cb:57:91:ae:dd:91:ea:8e:
ab:a4:53:4d:5c:59:9b:1e:68:16:6d:5a:f2:7b:cf:78:83:7f:
83:8c:1a:60:d6:14:94:c3:1b:8a:b9:b8:41:62:5c:80:ee:09:
3d:d3:01:98:84:f3:54:a9:95:a3:de:ad:ea:92:1e:6a:f7:36:
ca:8e:77:0a:c0:79:ff:b5:b3:42:41:f3:e7:a5:d7:28:15:38:
d1:6c:8c:ff:84:ae:30:72:2a:c8:4a:44:8f:b7:e7:3f:00:0f:
46:90:a3:88:09:25:bc:8b:e1:b6:c9:9e:5e:82:de:ec:a6:e7:
0b:ce:c3:ef:0a:0e:40:fc:82:b4:cf:cd:43:d7:4b:ee:ec:d2:
6d:1d:e6:29:ef:3e:30:f9:8e:45:58:ea:84:2c:4c:09:7b:0e:
ee:46:b7:39:c5:3c:85:38:e6:27:86:52:1d:b3:cc:b7:01:26:
02:00:0f:28:8b:8d:8b:7b:08:53:0d:75:b3:e8:e5:51:da:b3:
73:72:20:18:77:7f:e5:e5:f7:6f:88:b4:4d:12:44:0e:df:75:
1f:79:16:c5:e2:2e:42:0d:01:9a:e1:4c:24:87:b4:64:1e:13:
5b:e9:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:52 2026 by rpki-client