Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: fT8ZXQvhGWXueNJQGc5j1i1EOUX3BzXX5zOOgevyiPQ=
Subject key identifier: D0:18:8F:38:CB:0B:48:2C:B9:BC:D7:D0:BC:7B:74:BE:47:96:A3:FD
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019F92117C6DCB9EE1D9B2D516429CDC502F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 03:00:47 +0000
Manifest this update: Fri 24 Jul 2026 03:00:47 +0000
Manifest next update: Sat 25 Jul 2026 03:00:47 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: kDdFT3/5an9OHRJ8aTDC3rGfbZmJZtBlk3dhCZ25tag=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:7c:6d:cb:9e:e1:d9:b2:d5:16:42:9c:dc:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jul 24 03:00:47 2026 GMT
Not After : Jul 25 03:00:47 2026 GMT
Subject: CN=d0188f38cb0b482cb9bcd7d0bc7b74be4796a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:4e:cb:b9:40:fe:3b:74:88:03:f0:e3:bf:
23:b9:1b:09:96:e2:03:98:84:f0:50:9f:13:d6:0b:
7b:81:9f:45:23:fe:e7:00:d0:a2:59:34:0d:c2:e1:
b3:27:03:3c:05:22:a4:6d:d9:9f:ae:20:c1:21:d0:
fa:df:58:3b:16:a7:2d:f4:1e:b8:66:33:32:c5:6e:
f8:12:5f:8d:5d:6b:a9:71:b4:61:be:1b:48:83:02:
72:de:84:a0:a7:40:1f:51:b3:68:fb:d5:94:81:27:
41:c1:10:24:cf:9d:20:8a:6b:8c:19:2a:96:9b:fe:
5a:b4:52:5e:73:ac:08:ea:2f:5b:28:8a:a6:95:ae:
8d:ef:1a:cc:e0:3d:f1:75:90:74:4d:1f:d2:3b:15:
31:57:f8:9a:33:7c:b9:5a:4f:6a:0f:1b:8b:9d:fb:
8e:ba:a4:ae:18:2b:60:2f:d9:ef:4b:5f:29:b1:57:
65:a0:62:17:d2:be:bb:0d:6d:fe:4d:a1:58:6d:82:
4b:5a:d1:1e:e4:b9:a1:61:2c:34:bb:1e:db:8a:1f:
40:6a:99:09:a6:e2:7d:00:26:39:8c:f0:f9:2c:cc:
c6:e4:72:aa:6f:82:de:75:a7:22:3d:f8:99:bc:df:
15:e7:4f:9d:e2:4a:62:ab:04:4b:97:61:48:ce:e4:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:8F:38:CB:0B:48:2C:B9:BC:D7:D0:BC:7B:74:BE:47:96:A3:FD
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:95:eb:a0:75:c7:7c:2b:3e:61:9d:95:e5:dd:07:5a:48:1d:
08:46:46:36:ae:74:9a:d0:fc:b3:8a:f1:ff:33:e2:8b:4f:d5:
a9:68:06:34:15:ee:f0:28:c1:e1:41:cd:6c:2c:1b:64:0b:a8:
0b:f7:0b:ee:3e:ea:9b:1d:eb:61:a6:38:ee:9c:7c:5e:ef:b7:
24:04:9f:0c:44:1b:92:1b:29:b1:b2:53:7a:23:01:fc:2a:b2:
16:27:44:04:cf:63:a8:e5:24:bd:9f:42:7d:e8:6a:41:22:8c:
0e:41:65:7a:fb:12:66:58:10:3e:f5:71:26:a5:5c:86:79:e0:
3e:d0:0a:24:8f:c7:7f:34:d6:1c:2b:21:10:f3:d8:86:09:b1:
fa:c5:dc:54:8f:35:96:eb:6b:95:10:65:a7:75:48:29:60:55:
08:3f:bf:e9:8b:4a:27:45:cc:04:94:ad:c4:a3:77:86:b6:77:
61:fe:f9:5a:f1:28:c4:66:0b:ce:46:94:10:62:58:2d:c7:bb:
d3:81:1f:4d:cd:bb:93:54:63:97:85:18:34:8d:97:9f:d8:28:
6b:11:15:94:c3:4a:17:df:cb:a6:1a:ca:f0:ae:48:4a:ca:2d:
f6:ba:61:d8:3c:a4:66:e1:d6:cf:e6:d6:61:07:0c:f8:01:25:
49:f7:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:32 2026 by rpki-client