Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
File: l1otW428KUB1EBfkqLR2cy5_ToQ.mft (raw, json)
Hash identifier: dKs7LRq0kn3jt/AA09412LREC4484Jr+KXgOm07+C9Q=
Subject key identifier: 6B:FD:69:7D:EC:08:56:B5:24:99:7B:DB:C4:67:AC:94:CE:2E:53:BE
Authority key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Certificate issuer: /CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Certificate serial: 01A0D6F03BF09F939CB291496153D6B9B3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
Manifest number: 96
Signing time: Fri 25 Sep 2026 05:01:03 +0000
Manifest this update: Fri 25 Sep 2026 05:01:03 +0000
Manifest next update: Sat 26 Sep 2026 05:01:03 +0000
Files and hashes: 1: IQxi_ycveBSnK1Ru6EC_lb20R2M.roa (hash: qkCT/kfpBxRfgLxAiyBIqf6L9Svv3JlOCCjBfxcll6E=)
2: l1otW428KUB1EBfkqLR2cy5_ToQ.crl (hash: ILE8ux9uSipLdsSiGPebS32e1iw1HZHFWbq3QtwbMGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:3b:f0:9f:93:9c:b2:91:49:61:53:d6:b9:b3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Validity
Not Before: Sep 25 05:01:03 2026 GMT
Not After : Sep 26 05:01:03 2026 GMT
Subject: CN=6bfd697dec0856b524997bdbc467ac94ce2e53be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:16:c7:17:07:e2:73:a3:43:03:13:32:08:
fc:01:f4:6b:27:a3:45:cf:f4:08:cf:ef:44:1e:5a:
e1:6b:9d:28:64:23:34:d3:13:26:a4:07:74:ee:fb:
71:99:bc:28:df:d1:83:5f:25:93:78:df:b5:cd:cf:
c2:fe:05:cf:3a:a6:15:9a:27:aa:f0:e4:82:7d:2e:
a4:20:f8:1c:2f:bb:ba:5f:fd:5c:49:6c:8f:50:1d:
b1:e2:7b:50:67:e5:65:90:83:ed:49:b9:85:2b:ca:
33:d5:84:ec:23:78:2b:37:5e:75:0e:b7:c8:7c:34:
57:e4:f0:5f:29:46:2f:78:fa:28:8b:b0:c4:c9:95:
84:59:56:40:09:4d:84:d3:f4:f2:77:11:32:f9:0e:
a2:10:bc:80:77:62:5d:05:c1:ee:44:07:29:4f:58:
9d:68:a5:36:17:9e:a9:7c:6c:fd:81:42:f0:af:df:
56:3c:c1:bc:99:96:9c:e0:83:36:7a:b2:e0:c6:08:
53:8e:70:ee:dc:b5:f7:9b:e4:eb:52:fc:06:81:6b:
ec:82:1b:5d:5a:11:33:20:8f:a9:70:24:2c:0e:c6:
a9:64:2b:23:de:ab:03:4c:70:80:31:ab:51:fb:a7:
86:0b:90:81:e8:4d:3e:db:b9:6b:55:67:21:22:b4:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:69:7D:EC:08:56:B5:24:99:7B:DB:C4:67:AC:94:CE:2E:53:BE
X509v3 Authority Key Identifier:
keyid:97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:9f:2a:b5:01:d9:42:a6:61:8b:d7:78:48:9a:ac:d6:60:
49:20:36:d8:86:38:94:36:92:db:36:48:2d:93:38:b4:da:61:
c0:30:a7:90:87:58:f4:77:3d:a2:79:f8:1e:2e:eb:46:9c:86:
e9:c0:c3:d9:b0:a8:25:62:c9:3a:ee:1a:49:72:54:91:64:25:
4b:8e:31:42:1f:54:7e:ea:1e:f4:6b:85:6e:4e:2d:b9:bd:89:
14:c8:68:46:86:df:47:df:80:25:f4:ef:33:38:e8:c1:04:28:
b5:38:43:81:2a:b1:6a:30:e4:0c:a2:eb:13:5c:77:71:18:4b:
cf:4e:05:65:8d:69:84:d0:20:a7:36:53:7e:19:93:01:3d:35:
de:4f:62:ab:a7:6e:cc:6b:7f:0e:00:e2:1e:30:07:d4:f3:42:
a1:33:7b:d6:11:b1:cd:a8:92:db:31:98:02:c4:01:6e:52:56:
d8:69:66:df:d6:21:eb:6a:8a:b9:51:50:36:b0:40:0e:5d:14:
cd:d6:bc:23:08:01:03:54:26:30:d5:36:de:66:72:e2:e8:ac:
9d:c5:9e:45:27:81:3a:43:39:a4:7d:b3:2a:c2:43:52:a6:59:
5b:4a:ac:e4:ff:49:ab:09:23:cc:de:ca:77:23:73:f0:03:ad:
a9:f0:fb:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8Dvwn5OcspFJYVPWubP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWEyZDViOGRiYzI5NDA3NTEwMTdlNGE4YjQ3NjczMmU3
ZjRlODQwHhcNMjYwOTI1MDUwMTAzWhcNMjYwOTI2MDUwMTAzWjAzMTEwLwYDVQQD
Eyg2YmZkNjk3ZGVjMDg1NmI1MjQ5OTdiZGJjNDY3YWM5NGNlMmU1M2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAIWxxcH4nOjQwMTMgj8AfRrJ6NF
z/QIz+9EHlrha50oZCM00xMmpAd07vtxmbwo39GDXyWTeN+1zc/C/gXPOqYVmieq
8OSCfS6kIPgcL7u6X/1cSWyPUB2x4ntQZ+VlkIPtSbmFK8oz1YTsI3grN151DrfI
fDRX5PBfKUYvePooi7DEyZWEWVZACU2E0/TydxEy+Q6iELyAd2JdBcHuRAcpT1id
aKU2F56pfGz9gULwr99WPMG8mZac4IM2erLgxghTjnDu3LX3m+TrUvwGgWvsghtd
WhEzII+pcCQsDsapZCsj3qsDTHCAMatR+6eGC5CB6E0+27lrVWchIrSwCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv9aX3sCFa1JJl728RnrJTOLlO+MB8GA1UdIwQY
MBaAFJdaLVuNvClAdRAX5Ki0dnMuf06EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOWFiMzktZTE5ZS00YTUyLThmNjMt
N2IwYjdiNjZmMDlkLzEvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOWFiMzktZTE5ZS00YTUyLThmNjMtN2IwYjdiNjZmMDlk
LzEvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5OfKrUB
2UKmYYvXeEiarNZgSSA22IY4lDaS2zZILZM4tNphwDCnkIdY9Hc9onn4Hi7rRpyG
6cDD2bCoJWLJOu4aSXJUkWQlS44xQh9Ufuoe9GuFbk4tub2JFMhoRobfR9+AJfTv
MzjowQQotThDgSqxajDkDKLrE1x3cRhLz04FZY1phNAgpzZTfhmTAT013k9iq6du
zGt/DgDiHjAH1PNCoTN71hGxzaiS2zGYAsQBblJW2Glm39Yh62qKuVFQNrBADl0U
zda8IwgBA1QmMNU23mZy4uisncWeRSeBOkM5pH2zKsJDUqZZW0qs5P9JqwkjzN7K
dyNz8AOtqfD7mw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:45:58 2026 by rpki-client