Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: JxG2dEVfFLz2DmnV8H+VJv662+svT53NsWYbQs/FrSA=
Subject key identifier: 0C:7C:FF:30:BB:17:3E:A0:03:86:2E:2E:23:C8:3B:6A:1E:1B:A8:DB
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01A0D728238A1C31A238A2BA57B7412039D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 06:02:06 +0000
Manifest this update: Fri 25 Sep 2026 06:02:06 +0000
Manifest next update: Sat 26 Sep 2026 06:02:06 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: tr/tKEDd32o5fU+laFFC91HNuYFpJCfCT6LIDwNXwYE=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:23:8a:1c:31:a2:38:a2:ba:57:b7:41:20:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Sep 25 06:02:06 2026 GMT
Not After : Sep 26 06:02:06 2026 GMT
Subject: CN=0c7cff30bb173ea003862e2e23c83b6a1e1ba8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:30:e3:2b:46:89:78:57:15:1b:0b:bd:20:
f9:69:2c:08:c1:c2:f9:01:ce:41:0f:48:4c:10:07:
34:83:1f:66:44:51:76:6d:87:81:c1:04:a0:b4:ef:
36:af:a1:27:17:a4:a0:12:11:d9:df:7f:6c:0c:b8:
b3:db:9a:ea:24:76:94:01:fc:43:dd:02:14:56:55:
40:78:d6:e1:3b:1b:26:e1:5d:d7:19:7d:c3:57:1d:
6a:0b:48:a4:25:00:0c:80:cb:ef:57:c9:7d:d3:35:
0f:cd:12:76:a5:64:a5:93:d4:9f:76:07:80:7a:71:
38:b7:3c:59:96:bb:b0:4b:0a:d8:d4:80:b9:25:00:
1d:70:05:06:23:9d:11:a6:a4:d7:1b:af:13:f5:14:
a7:1a:ed:30:01:be:fb:59:df:40:d9:18:85:a5:e0:
13:de:ce:b0:ad:e6:9c:9d:35:35:fd:68:02:a5:bc:
a0:a7:68:44:b0:29:1d:59:dc:4f:51:26:c3:ca:ca:
e2:e6:7c:9d:09:5b:92:6f:f6:43:4f:fe:15:99:5f:
21:30:95:0d:a7:3e:bb:93:40:29:6c:74:a9:bc:55:
84:a5:23:bc:04:be:67:bf:9b:68:1d:4b:dd:38:95:
50:7a:b3:8b:71:dc:b3:9a:71:0f:b1:59:3a:2b:13:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:FF:30:BB:17:3E:A0:03:86:2E:2E:23:C8:3B:6A:1E:1B:A8:DB
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:1c:f2:ab:f1:d4:3a:78:9c:01:ad:8f:db:53:aa:0c:e1:
52:2a:17:34:62:db:1f:58:1c:8f:1a:74:3c:00:e4:15:6a:18:
9f:f1:69:4d:73:a9:f1:eb:1a:d2:b7:ab:f9:63:36:b2:5c:67:
ba:fd:f5:fa:49:9b:62:86:0b:8b:98:6d:0d:e1:c5:e1:11:2b:
21:8c:e5:e3:89:12:1f:75:08:d4:bb:e0:e3:0a:66:2d:70:81:
d5:40:20:a9:0e:c6:2f:1a:99:d0:e6:33:8d:d7:50:f8:d7:e2:
dc:67:f4:af:d8:79:c8:81:b1:2a:f0:0a:2d:2e:91:5b:0d:d7:
90:6f:d8:be:e2:5e:5f:cc:e3:66:83:f7:41:1d:6e:09:2a:e6:
ec:b6:eb:c9:c0:7c:3a:86:04:bf:57:b3:7c:f7:ad:4b:58:1b:
0f:f4:8d:21:4f:da:93:60:2e:47:a9:7d:9b:7a:ef:83:29:b2:
0b:55:e9:1b:cd:29:fd:2b:69:8e:6b:20:d7:11:78:9b:08:9a:
46:cc:90:67:05:81:57:25:73:0a:62:10:12:1a:6b:45:c4:eb:
65:04:d8:29:fc:cd:32:09:a6:47:77:38:4d:f6:ea:01:9b:8e:
98:de:7e:28:57:ec:ab:5e:cb:f3:e5:05:d1:01:ac:fc:78:51:
a2:cf:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:22:36 2026 by rpki-client