Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: ZFnDumywM1V+HdQ3Wzk5htKxbbx/FKFg4oNyvBNyZK8=
Subject key identifier: 2D:4B:0F:08:68:C3:8C:94:CC:27:3A:C2:F1:81:29:7E:22:37:5E:2E
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01A1DBDD8CE67AC0BAEDB8F0D966FDDA7ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1AF9
Signing time: Sat 14 Nov 2026 21:01:32 +0000
Manifest this update: Sat 14 Nov 2026 21:01:32 +0000
Manifest next update: Sun 15 Nov 2026 21:01:32 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: XO33VtcIod+JB8f2XL3vDCnJU/9fRaZ9VZRZ2+Kadk4=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:8c:e6:7a:c0:ba:ed:b8:f0:d9:66:fd:da:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Nov 14 21:01:32 2026 GMT
Not After : Nov 15 21:01:32 2026 GMT
Subject: CN=2d4b0f0868c38c94cc273ac2f181297e22375e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:1f:aa:75:c7:32:6d:9c:0d:f9:d7:c0:82:
1b:18:ef:99:cd:12:2f:07:52:b6:f3:0b:20:1e:ea:
a2:49:28:d2:ef:f4:2f:0d:82:37:37:d3:d5:a9:6d:
dc:04:b6:7e:9d:77:d7:6f:f1:ae:d6:8a:09:bc:58:
00:4f:d7:f6:d0:3f:55:67:36:cc:9b:52:0f:de:5f:
2b:84:f8:7d:1f:c5:b9:28:e7:7a:54:c2:2a:7e:e5:
a5:48:d7:8d:7d:9e:26:45:6a:fd:11:8c:27:8b:10:
94:28:76:40:85:e7:c7:1c:17:6b:a1:9c:4a:88:62:
eb:3f:75:a7:97:af:b8:ef:0d:17:d6:9e:77:6e:e1:
27:10:c5:01:51:69:15:8e:4d:ea:a2:4a:73:d2:a0:
5b:fe:01:58:40:51:b5:6f:ba:0b:c7:99:38:8b:28:
c6:e8:a5:5f:f2:a7:3b:9d:c7:f4:82:0a:01:c4:e7:
d4:99:b8:f1:b7:c4:da:be:e1:32:09:c1:5a:47:a2:
11:d2:c5:71:4e:95:b6:3a:59:c8:ab:c1:d1:c9:83:
3a:5b:14:21:35:a2:66:c0:ad:da:10:96:49:be:b7:
61:e0:ef:9d:f9:dd:bd:97:20:5b:bb:6d:97:f0:be:
f1:eb:e4:09:19:b3:dd:e3:5a:80:9f:50:02:d2:6b:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:0F:08:68:C3:8C:94:CC:27:3A:C2:F1:81:29:7E:22:37:5E:2E
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:9d:f0:eb:ce:33:1f:c8:25:90:39:18:7c:c7:00:81:b2:
5b:ee:75:68:eb:41:d8:e6:46:73:c8:cd:d3:78:d5:37:58:dc:
ef:ad:68:a5:17:3a:d3:98:84:c1:31:29:5f:5d:79:fa:e2:82:
8f:0b:29:1c:d4:6c:a8:c7:6a:12:92:b9:ae:dd:b2:91:90:fe:
9e:60:95:98:03:b1:12:3e:fb:ed:87:28:f2:94:d6:55:fe:c0:
ef:d4:a5:7d:e6:92:b7:b3:74:bc:eb:94:1b:d6:bf:70:07:82:
e5:94:94:85:ac:7e:a7:60:33:a1:03:af:5e:79:c9:e8:c2:30:
5c:e1:fc:c5:ac:96:94:e0:c0:99:84:f7:52:c0:3f:28:25:95:
5d:94:56:f2:5d:5f:1f:c8:b4:60:6d:3d:3e:68:9e:79:5b:5a:
16:68:a1:5c:bd:f4:3a:1b:5a:81:b1:70:78:27:be:b4:7b:0b:
a5:92:1c:ff:b0:e0:dc:46:50:7f:72:ea:2c:06:05:7e:2f:3f:
11:03:1d:5d:d1:78:c5:2d:8e:32:0e:2e:77:73:af:1f:8d:ae:
91:bd:75:3e:d2:ea:45:27:40:76:c0:e9:2b:aa:d1:98:bc:27:
0c:48:22:ad:70:ef:ee:ca:8d:a6:6a:09:ec:98:5a:29:46:84:
13:46:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:29:14 2026 by rpki-client