Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: qKJmBPFC1yO+S95DtbmCodx1ABo6zcdZuzvSqioDjXw=
Subject key identifier: EC:8D:48:76:57:F4:DF:FA:B6:9D:1B:0C:CC:9A:A2:5C:7A:CC:D5:61
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A0D0B6AC6ED3F44684D924800B00DF30EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 00:00:27 +0000
Manifest this update: Thu 24 Sep 2026 00:00:27 +0000
Manifest next update: Fri 25 Sep 2026 00:00:27 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: RgOFtv15QsmnSNtxwYg+C3LTNaIQ7jw9DL4GxfFDyyI=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:ac:6e:d3:f4:46:84:d9:24:80:0b:00:df:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Sep 24 00:00:27 2026 GMT
Not After : Sep 25 00:00:27 2026 GMT
Subject: CN=ec8d487657f4dffab69d1b0ccc9aa25c7accd561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:af:af:46:91:14:86:9f:b7:bb:4c:5f:18:
ba:96:36:78:58:cb:37:05:28:71:be:80:b9:4d:69:
ad:cb:69:bc:88:27:7d:46:38:6e:55:4f:77:73:a2:
08:6b:84:a6:e9:45:d8:3a:2d:6b:86:ef:47:7e:a0:
fe:2d:86:3c:95:3b:f9:23:77:3a:5c:c5:99:61:3d:
f4:2b:87:ff:f0:bc:3d:dd:96:79:35:eb:d8:a6:fc:
e0:e9:7f:3f:cd:e9:e5:53:9a:c9:a2:93:72:86:20:
21:ee:a3:3a:51:c4:31:33:ea:d6:cc:7c:f7:2a:6f:
6f:e6:01:a2:88:75:dc:1c:74:39:8c:15:d2:f8:7c:
33:d6:bf:82:da:12:df:c6:a1:59:51:2b:53:7e:d2:
59:93:2c:1c:95:2d:27:0b:b7:de:17:11:97:93:f7:
b0:e9:28:9d:29:b9:9c:da:dc:54:8c:0c:1f:d2:cd:
f2:18:16:17:f9:0e:47:a6:e5:6a:b0:e8:83:9e:a8:
6f:d0:53:33:3a:13:f7:23:e8:74:87:cc:48:af:48:
10:1c:d8:35:d7:19:b1:ab:93:cf:01:ea:44:d9:ab:
3a:4e:b5:22:c2:2f:aa:07:6f:3f:f3:93:e7:f4:f0:
c6:b6:2e:b6:aa:fd:1f:cb:52:fd:b1:16:f0:eb:1e:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:48:76:57:F4:DF:FA:B6:9D:1B:0C:CC:9A:A2:5C:7A:CC:D5:61
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:4b:99:ed:dc:b8:14:ea:a9:b0:0d:c7:53:27:00:3d:38:
49:81:4b:25:15:97:ad:73:1a:ff:81:f0:b0:d8:ae:a0:28:f9:
75:2d:d8:1a:89:f0:08:6f:2f:d0:e6:41:50:43:6d:00:19:30:
d1:be:90:c4:de:ef:52:76:83:79:8a:69:29:48:08:3b:52:5b:
d0:02:69:d5:0a:2a:b5:b1:0a:1d:ce:ab:f7:7a:84:33:1d:85:
60:49:db:7b:f6:0e:6d:60:d9:45:f5:44:3c:c5:45:bb:68:70:
1a:59:61:66:ee:d5:93:ee:f8:5f:92:5c:bd:10:27:a3:25:01:
b6:99:ea:08:91:34:8e:a7:d1:f1:9e:34:30:20:d4:65:be:d5:
70:10:f3:ad:ce:6a:12:2f:5c:bd:74:6a:2e:7b:dd:7f:a2:a2:
c4:da:25:61:4e:55:4a:85:f4:19:0d:9e:06:fa:ea:77:a5:dc:
c2:2f:51:f7:ef:76:7b:e9:66:f5:a4:57:82:a4:59:3c:ba:1f:
3a:6e:31:05:93:3f:e0:e2:67:2e:42:27:92:48:5f:12:4d:5c:
58:5f:bb:07:e4:6c:34:ec:10:e5:e8:50:37:19:78:6b:0b:eb:
6a:3e:73:92:66:d1:ab:1f:9e:e6:e7:2b:d7:11:53:3a:b7:a4:
45:47:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:06:24 2026 by rpki-client