Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: n+KrmpPpknSZeyezS6OEhrPI5bsMcJO/Abu4YYiILZg=
Subject key identifier: F6:65:2A:C7:C5:5E:5F:0D:74:D1:26:E7:0A:78:0A:C2:6B:F6:62:4D
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01A0CCA355CCA984386970953EDD7C0BB207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1A7A
Signing time: Wed 23 Sep 2026 05:00:51 +0000
Manifest this update: Wed 23 Sep 2026 05:00:51 +0000
Manifest next update: Thu 24 Sep 2026 05:00:51 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: ior1h+vTWAkKmk48zu9CJa8iVkvsCh5hF9lKo3l3r5I=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:55:cc:a9:84:38:69:70:95:3e:dd:7c:0b:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Sep 23 05:00:51 2026 GMT
Not After : Sep 24 05:00:51 2026 GMT
Subject: CN=f6652ac7c55e5f0d74d126e70a780ac26bf6624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:60:aa:95:c8:37:c0:7d:85:e1:ae:ec:95:
c0:dd:7d:d1:35:5a:f7:2e:8d:1e:7a:35:c9:14:09:
c7:80:91:da:82:3d:f3:a6:f6:2e:00:56:56:53:62:
2b:db:92:d6:b7:7c:cc:7c:2b:7b:0e:8d:c4:73:c2:
2f:64:db:56:9c:27:0c:da:7c:d4:63:46:c1:7f:ab:
30:e6:20:d6:56:c5:fe:d5:3a:a7:d8:57:8b:6b:15:
47:a3:7d:60:a8:5b:46:a8:fd:d2:26:42:96:ca:87:
f0:27:92:95:e3:7f:08:c7:bf:98:48:16:b9:8a:1a:
23:d0:79:3d:67:8d:63:3c:a1:6e:9c:2a:7f:30:c7:
55:7d:51:cf:ea:21:d2:ea:2a:97:96:65:3d:87:bd:
02:d0:34:06:86:eb:86:1f:ef:0f:e8:83:13:ae:b0:
ea:aa:cc:d4:ef:c4:16:07:08:0d:c8:b5:b8:77:62:
d2:12:4e:ab:9d:77:f7:1f:65:8b:c3:f6:c0:25:72:
57:51:90:dd:9b:90:62:82:74:b9:36:c3:3a:9a:ab:
0b:a7:eb:c2:5d:16:a3:23:aa:75:0a:e4:93:0a:63:
a5:07:f4:f6:7e:4b:23:55:0d:7a:91:93:24:5f:e3:
8e:78:50:35:81:2e:7f:60:2c:15:c1:d8:43:b6:94:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:2A:C7:C5:5E:5F:0D:74:D1:26:E7:0A:78:0A:C2:6B:F6:62:4D
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:36:69:10:71:ee:f2:f3:17:e4:b1:01:0c:2b:05:3f:55:
db:0d:35:c4:3d:c4:43:31:50:66:7a:a9:4d:d8:2b:46:11:ec:
20:37:a1:a6:57:ab:69:b6:29:f8:c5:9c:ea:ed:dd:d5:b8:6c:
1f:6f:9f:15:96:0b:d8:3d:db:42:50:dd:d0:c2:e7:d5:df:0b:
aa:d2:41:09:26:46:74:85:62:34:a8:89:34:02:8a:80:81:f4:
2b:55:c5:4a:d3:99:c9:8a:5d:4b:ac:5e:50:55:0a:f8:da:86:
45:31:e0:8e:e0:ba:ed:e9:ad:6b:86:81:4f:a2:ec:dd:37:a4:
bb:5a:66:91:07:2b:46:bf:68:71:c8:22:e3:72:e8:61:95:2b:
51:06:26:a2:10:0a:79:ea:4f:9a:8e:5f:7d:71:d3:f1:0f:ed:
47:a7:60:d0:50:81:34:76:98:a7:e0:25:8b:af:a5:01:85:51:
e4:09:fa:2f:ed:c7:bf:10:06:06:9a:20:05:f8:66:51:3a:f6:
03:93:12:61:61:08:95:30:a7:6b:ca:d1:f5:98:04:3e:fa:cc:
ec:91:1d:ee:1a:55:7f:ee:0d:b9:e4:ca:ba:43:81:dd:be:ad:
eb:94:8f:4b:75:41:0c:9b:54:ee:be:af:94:9e:34:aa:69:42:
19:60:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:35 2026 by rpki-client