Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: u+jk/NWZ3jM5CgT0jaoFor9boQVquiuzzwRIORgLUag=
Subject key identifier: 82:06:CB:92:33:45:A8:0E:FD:DE:AB:E5:9B:A5:99:08:25:BC:70:65
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 01A0E0987847612D48ECD2DE9DF51CD0FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 02:01:23 +0000
Manifest this update: Sun 27 Sep 2026 02:01:23 +0000
Manifest next update: Mon 28 Sep 2026 02:01:23 +0000
Files and hashes: 1: 1-5zn0bSlddLMmUlOq_ZglROu18k.asa (hash: Yy6jCWoReDrwxlHPUoAZSBEIXQW1OUdFReXCBYRR6d0=)
2: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
3: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: pZQhNblNM7rO/X4gO6q+BWLRimqJrg0FzV3VbweEATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:78:47:61:2d:48:ec:d2:de:9d:f5:1c:d0:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Sep 27 02:01:23 2026 GMT
Not After : Sep 28 02:01:23 2026 GMT
Subject: CN=8206cb923345a80efddeabe59ba5990825bc7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:84:4d:0b:a6:53:8d:f5:20:69:33:c5:fc:
fc:9a:36:e5:bf:7c:35:20:c3:28:9b:67:15:a5:85:
db:ee:d4:f6:92:c1:5c:52:e2:8a:bd:e0:27:eb:c8:
09:e1:ce:53:a6:c7:28:ac:70:30:19:4d:a9:d0:64:
b2:f7:b5:ed:57:28:8e:e0:7b:a2:84:46:0c:87:0b:
36:78:cf:70:0a:9b:d9:ab:d5:ec:bc:30:b7:e3:9c:
66:54:57:b5:2b:06:98:0c:a3:8f:db:20:c2:05:ff:
d8:95:a4:f2:e8:10:fd:d6:1a:f6:66:3b:1c:c5:52:
48:c4:39:c8:9d:4b:e9:a0:d8:3c:bd:db:22:cc:97:
fd:f4:b0:32:a0:ae:c0:b6:31:e1:93:63:2b:68:69:
21:5a:e8:03:77:6f:f8:85:2b:73:42:69:22:e9:0e:
c0:1f:79:60:45:58:22:2a:23:a0:89:de:0a:07:0c:
84:a9:bf:c1:69:94:0c:fa:ba:04:3c:db:78:86:f2:
bf:52:0c:1c:3f:13:b9:7d:c2:a1:b5:45:2e:77:69:
71:89:8f:50:d1:4c:1a:cf:bc:73:5d:fb:bc:3d:4b:
f5:f3:70:9f:b4:22:9c:be:72:62:5e:6c:28:ae:20:
56:4f:1c:a8:bd:04:c9:b1:b1:13:d1:62:50:88:3e:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:CB:92:33:45:A8:0E:FD:DE:AB:E5:9B:A5:99:08:25:BC:70:65
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:b0:ce:a3:46:9f:9a:68:67:3b:ed:45:c2:fa:32:9c:ea:
46:39:2e:89:96:bd:f7:e2:d0:bf:30:ad:29:97:3a:24:9c:0c:
93:d0:25:f7:f6:9c:8b:4e:de:aa:81:f4:d7:63:62:5a:85:47:
ad:a3:f1:ec:fc:f0:97:79:0d:df:a4:76:53:46:38:2e:a2:47:
99:91:4c:f7:39:67:e8:d8:28:a3:a2:d3:28:40:d7:e0:89:fd:
0d:08:9c:ed:a7:4e:63:f3:96:34:34:40:e0:1b:cf:4c:2c:d6:
d9:4c:95:78:db:0e:cb:cf:58:35:68:a5:2d:6b:01:0f:a0:7d:
b9:06:8b:25:df:d4:f3:af:6f:50:eb:58:a8:b7:df:c6:e5:27:
8c:99:74:f9:de:e8:36:fb:95:62:78:9e:d9:13:f2:c5:f8:46:
54:cd:28:8a:a4:d8:20:72:d9:3b:72:a9:cc:6c:05:83:09:fb:
7b:3e:b7:cf:5a:54:b9:a5:d7:86:d3:66:4d:00:45:f8:8e:65:
96:1a:ab:f6:2b:d9:44:23:09:2f:7e:cc:33:ea:1e:ff:f5:7d:
69:30:2b:71:4d:7e:18:a3:91:e5:13:39:7d:84:f8:dc:d3:9c:
88:d6:75:8c:de:0e:06:b9:5c:83:63:c4:44:0c:06:2e:b1:8a:
c9:6b:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:56:59 2026 by rpki-client