Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: HTqBjcPJpXCR7nItRhURoay76nijyFNiQcV33as+1Ic=
Subject key identifier: D7:F1:B1:60:83:56:C4:DC:74:9B:97:A7:44:CC:A8:1A:28:F9:03:74
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019D2772CB2B2865D89AF3C3937B53F8FBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: n9ML5s4AwZNIfmGSobjOKZ3sBLPpL8rqVyfD7oYLfk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cb:2b:28:65:d8:9a:f3:c3:93:7b:53:f8:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=d7f1b1608356c4dc749b97a744cca81a28f90374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:3e:91:84:b1:fc:69:e2:26:21:a0:1e:68:
fc:7b:fe:16:72:aa:17:46:3b:2a:2a:d4:29:35:c9:
0f:ec:59:96:8b:d8:4e:37:50:f8:fc:f3:3b:39:33:
c7:f1:06:e0:8e:9a:89:b0:0a:6f:d9:29:22:00:9f:
43:3e:be:9a:6a:fe:0e:51:1b:e3:54:0c:25:f2:61:
31:70:a1:7d:55:fa:ca:9e:fd:04:2f:15:10:e8:21:
54:1d:ea:a9:75:46:74:a6:a1:63:2b:9f:41:a7:58:
11:c1:d6:bf:84:16:ac:c5:8f:a8:50:1d:9a:bc:80:
02:0c:1e:7a:cc:92:02:cc:b1:61:01:c5:7f:21:ca:
03:2b:1c:7c:ae:5e:6e:a9:3a:30:c5:14:b7:d0:3f:
03:3c:0a:66:c6:90:89:fb:dd:ca:54:c2:13:ec:34:
57:26:75:87:17:dd:2b:44:47:11:a4:47:01:f0:98:
26:e1:e9:fc:d7:d0:d8:f8:09:46:10:e8:fb:83:28:
76:ee:b6:1a:36:89:bf:05:b5:91:c7:5f:a7:27:24:
94:79:73:02:01:28:41:5a:c3:e5:af:b3:e8:6f:9a:
c1:9f:86:70:ca:fb:fa:f0:a2:16:40:60:fe:18:ad:
d8:15:6f:85:93:7f:d0:e8:76:92:02:eb:2a:47:65:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:B1:60:83:56:C4:DC:74:9B:97:A7:44:CC:A8:1A:28:F9:03:74
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b0:8b:1d:3c:3b:dc:03:e3:eb:6b:e5:7b:e7:9f:96:8e:11:
61:98:b3:93:90:0b:76:29:e1:14:55:d1:ff:dc:c6:77:64:43:
53:2f:48:66:5f:86:f4:60:4b:f7:b8:49:42:49:a0:d1:ec:56:
3b:a4:a3:a0:a0:99:20:74:cc:51:1c:2b:a1:60:20:cb:3f:ed:
ab:e5:e4:cb:ac:e0:48:b4:80:5a:97:b2:e9:13:50:7c:8d:07:
2a:9f:ba:21:06:8e:df:86:d3:58:79:8c:e3:bb:3d:c1:70:31:
54:ec:f2:98:21:a1:bb:4e:eb:21:46:42:d7:86:c2:64:6b:69:
96:4b:16:a7:3b:69:42:12:2a:c2:e7:99:33:88:54:f9:01:dc:
ae:ed:0d:2a:d1:eb:e6:ce:76:2b:5a:a4:c0:42:eb:37:78:32:
cf:78:97:f4:6f:6e:cc:5e:a1:e8:4a:d8:f2:48:22:51:c4:2f:
f8:47:1c:0c:1b:ac:13:83:e9:64:d8:09:c9:99:2e:85:69:7f:
16:18:c0:25:8e:0d:70:cb:2d:4b:3f:c2:2c:a8:5f:21:b8:8e:
16:db:5c:9b:c0:4a:6f:67:46:ee:8c:d8:05:89:34:e5:37:5c:
d3:4c:c5:61:c0:bd:bc:af:1b:02:77:db:de:0e:e6:1e:c7:2c:
02:06:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:49 2026 by rpki-client