Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: uWXMI8YlJZaX+ahyrO6ksWBK9XzI0uitSKR2TO66Utk=
Subject key identifier: 61:EC:D1:0B:84:D4:2C:E0:35:89:9D:2A:3E:0D:F7:9F:A4:C3:4E:EF
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 01A139DBB1C5F87786DF0C8555B1134B8CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1AAF
Signing time: Wed 14 Oct 2026 10:01:01 +0000
Manifest this update: Wed 14 Oct 2026 10:01:01 +0000
Manifest next update: Thu 15 Oct 2026 10:01:01 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: m/ltXpCbBWlD+R/YZxwDWAbAS4C1ae6R2jcC2arK9NE=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:b1:c5:f8:77:86:df:0c:85:55:b1:13:4b:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Oct 14 10:01:01 2026 GMT
Not After : Oct 15 10:01:01 2026 GMT
Subject: CN=61ecd10b84d42ce035899d2a3e0df79fa4c34eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:70:50:26:15:7e:04:d5:01:1a:00:12:dc:
71:36:17:98:22:ea:d1:9c:cd:4d:61:bb:57:78:ca:
ef:ae:85:a5:06:fb:e1:7a:0b:cb:73:ec:f0:64:0a:
7e:b1:66:56:94:4d:10:a9:04:ce:6a:bd:98:16:b5:
31:7e:b7:b2:fe:ae:5d:1b:b7:6d:c0:23:bf:89:a8:
90:f9:09:0c:56:c4:b7:b9:05:80:02:17:ce:38:22:
0f:51:a5:3c:de:18:ce:14:cc:1c:48:2e:9a:6c:b1:
37:db:61:75:79:7b:12:45:a5:a8:4f:6a:cd:08:67:
6a:d5:28:e2:67:ce:71:94:0f:54:36:09:19:62:74:
8f:01:5d:89:b2:54:79:5b:c7:13:f8:a3:2c:07:2e:
d1:04:4b:16:52:b7:97:a4:97:58:ea:95:07:8c:37:
c1:2c:f9:19:75:12:1f:d0:7d:44:b1:4b:a5:2f:80:
73:da:c1:79:f8:5e:66:67:3e:44:83:20:bd:07:be:
39:2a:09:7f:cd:89:3a:c2:8d:57:a3:f3:51:91:d0:
6e:1a:a7:88:b9:5a:dc:8c:2d:b5:94:30:45:66:f7:
66:a4:e8:14:5c:df:11:ff:e7:35:89:74:2d:fe:30:
e4:c1:63:36:3c:0b:56:1a:a6:ec:b8:8e:5a:ff:ca:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:D1:0B:84:D4:2C:E0:35:89:9D:2A:3E:0D:F7:9F:A4:C3:4E:EF
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:92:bd:7f:b3:a4:d9:69:8a:94:77:39:d2:95:0e:80:f5:8c:
a8:94:4b:39:e6:9a:8a:d9:ff:12:22:72:20:72:81:cd:1e:af:
b0:12:af:42:78:bb:b7:d9:ab:c9:73:45:23:b6:5f:e6:11:30:
ea:ca:df:3c:a4:ce:11:14:01:10:69:cb:b3:71:e8:48:9d:4e:
4c:06:5a:77:3f:94:26:8e:be:83:cf:58:2b:b4:e4:c4:be:cc:
9d:f4:5e:c6:cf:b6:72:f9:58:55:3b:ee:13:75:5f:0e:4a:c0:
d2:34:45:4c:7d:a6:95:55:2a:4c:7c:13:58:6f:19:34:d2:2b:
ae:11:99:4d:77:e2:1c:bd:fe:cc:33:6f:44:c3:54:e6:14:bc:
09:96:96:14:6e:d0:4b:68:16:10:0f:16:20:38:52:8c:2a:b4:
2b:3c:de:09:93:3b:bc:e6:c7:65:db:51:03:4c:b4:aa:bd:e6:
2c:93:2d:82:f9:fd:8b:98:7f:0b:15:de:58:63:18:2b:f8:42:
79:e6:89:01:ca:98:ed:a2:e0:ee:e0:c8:c1:48:d7:c1:08:a7:
9e:73:45:c7:4d:31:97:0f:9b:e5:a6:09:33:71:0b:cf:2d:fe:
4f:cb:db:79:d2:c0:9b:82:a3:14:47:e7:8f:29:09:4f:82:33:
7d:bb:95:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE527HF+HeG3wyFVbETS4zRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3
ZjRiYjEwHhcNMjYxMDE0MTAwMTAxWhcNMjYxMDE1MTAwMTAxWjAzMTEwLwYDVQQD
Eyg2MWVjZDEwYjg0ZDQyY2UwMzU4OTlkMmEzZTBkZjc5ZmE0YzM0ZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf5wUCYVfgTVARoAEtxxNheYIurR
nM1NYbtXeMrvroWlBvvhegvLc+zwZAp+sWZWlE0QqQTOar2YFrUxfrey/q5dG7dt
wCO/iaiQ+QkMVsS3uQWAAhfOOCIPUaU83hjOFMwcSC6abLE322F1eXsSRaWoT2rN
CGdq1SjiZ85xlA9UNgkZYnSPAV2JslR5W8cT+KMsBy7RBEsWUreXpJdY6pUHjDfB
LPkZdRIf0H1EsUulL4Bz2sF5+F5mZz5EgyC9B745Kgl/zYk6wo1Xo/NRkdBuGqeI
uVrcjC21lDBFZvdmpOgUXN8R/+c1iXQt/jDkwWM2PAtWGqbsuI5a/8oWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHs0QuE1CzgNYmdKj4N95+kw07vMB8GA1UdIwQY
MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt
NWQ2ZGQwYmE1MmNmLzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm
LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpK9f7Ok
2WmKlHc50pUOgPWMqJRLOeaaitn/EiJyIHKBzR6vsBKvQni7t9mryXNFI7Zf5hEw
6srfPKTOERQBEGnLs3HoSJ1OTAZadz+UJo6+g89YK7TkxL7MnfRexs+2cvlYVTvu
E3VfDkrA0jRFTH2mlVUqTHwTWG8ZNNIrrhGZTXfiHL3+zDNvRMNU5hS8CZaWFG7Q
S2gWEA8WIDhSjCq0KzzeCZM7vObHZdtRA0y0qr3mLJMtgvn9i5h/CxXeWGMYK/hC
eeaJAcqY7aLg7uDIwUjXwQinnnNFx00xlw+b5aYJM3ELzy3+T8vbedLAm4KjFEfn
jykJT4IzfbuVAQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:55:16 2026 by rpki-client