Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: aqa2v2crnnQfgaXh5gdQwfABHOeUXB5m8gXRRHUf6gQ=
Subject key identifier: FD:6B:5A:74:33:4B:2E:2F:0A:A1:01:4D:89:8B:5D:92:C1:31:D8:B5
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01A0DBA96603AAD8927D8F7CC785CF86422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 03:01:46 +0000
Manifest this update: Sat 26 Sep 2026 03:01:46 +0000
Manifest next update: Sun 27 Sep 2026 03:01:46 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: sy1kZLQCiC1THyDBO66gv/KPzKSNMsUjZsJqGHPVEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:66:03:aa:d8:92:7d:8f:7c:c7:85:cf:86:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Sep 26 03:01:46 2026 GMT
Not After : Sep 27 03:01:46 2026 GMT
Subject: CN=fd6b5a74334b2e2f0aa1014d898b5d92c131d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:93:75:87:08:41:f7:bb:e8:37:36:28:de:
54:8e:c1:88:59:9a:f4:52:a2:ad:f6:de:7c:3e:cf:
d9:10:bf:35:f2:e0:7c:a2:51:94:ff:13:7f:51:6f:
4f:a4:9c:56:1e:02:c1:72:09:b3:64:8b:ea:d9:67:
af:22:f3:ee:53:fe:e0:6d:ac:07:e3:05:13:25:24:
a8:0a:61:f1:77:55:2e:dd:21:06:26:8a:de:fb:34:
12:8a:be:cd:d9:f9:2e:52:36:7b:d8:da:bf:78:f8:
0b:29:e2:ee:b2:f2:88:35:5c:05:c6:57:98:56:8f:
c8:ab:f7:7c:58:77:f9:76:34:00:43:7e:fd:1c:25:
d5:ff:1e:0f:4c:99:89:e9:06:69:83:a3:e7:47:dc:
6f:ab:b6:4e:89:10:c3:d6:64:66:09:e7:0c:ac:bc:
e3:b6:73:d6:aa:19:3a:3b:02:9d:a6:59:e7:db:de:
57:bb:c6:c0:46:c5:af:e7:88:59:69:4c:78:52:83:
5a:e4:db:36:31:95:11:e5:9d:48:06:83:6f:08:03:
10:16:00:6b:3f:03:3d:1c:b5:27:67:df:32:d4:19:
2b:57:02:32:62:ee:c5:68:ba:c6:d6:45:3c:32:49:
10:fe:ef:ff:15:61:03:13:a2:49:a7:56:81:02:23:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:5A:74:33:4B:2E:2F:0A:A1:01:4D:89:8B:5D:92:C1:31:D8:B5
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3e:b0:03:53:de:ea:21:95:ab:60:65:a4:70:1a:c4:72:81:
f8:28:1e:96:d7:af:46:89:89:bc:26:b5:8a:27:02:5c:fe:ec:
d0:1c:ed:ea:40:8d:5a:a2:2c:ad:a4:12:18:bb:b4:ea:24:34:
26:e5:68:16:33:1f:6a:86:3f:d6:bc:b5:7d:97:ae:44:5f:4f:
8e:e8:d5:18:1d:3f:0c:e7:70:13:33:81:73:04:e5:53:87:dc:
d6:45:80:14:36:5b:ce:83:da:78:3b:07:75:23:a9:ff:3e:9c:
27:74:19:68:92:57:e8:38:30:f1:9a:cd:61:25:43:9b:13:1e:
51:e5:d8:c5:17:9b:cf:de:4f:33:f0:c4:a1:2f:06:b9:64:91:
7f:1f:e0:cb:ee:46:16:cb:e8:0b:0b:aa:c4:0d:5c:41:e7:24:
46:24:06:76:b3:14:36:9c:31:e8:78:b2:cb:8b:fe:d3:78:dc:
e6:05:82:58:47:a7:be:a2:a1:e3:70:6f:ab:b9:75:7b:d7:3d:
cb:8d:be:a2:b1:c3:aa:63:ab:c7:42:1f:ac:7d:e3:1d:d2:3f:
16:04:3a:a3:91:87:d6:a2:2f:f4:65:f4:8c:93:14:29:d6:60:
34:8a:ec:09:2a:78:87:cc:6e:16:d6:7b:86:96:18:35:8c:85:
93:d1:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:33 2026 by rpki-client