Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: D5iinmOQBSCFRe7l9aknxUNm1WXfdw4CBoIid6Nxkgg=
Subject key identifier: AA:17:82:8B:FD:14:9B:AA:56:67:DE:34:5B:3B:3D:EF:E7:20:0B:4D
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 01A0D04912119DAEF7527E1F7A4654846F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 22:00:44 +0000
Manifest this update: Wed 23 Sep 2026 22:00:44 +0000
Manifest next update: Thu 24 Sep 2026 22:00:44 +0000
Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: FjRBtQZuLAy7xwouswlZeKQ67HvvmkZfMe+BzDwt678=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:12:11:9d:ae:f7:52:7e:1f:7a:46:54:84:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Sep 23 22:00:44 2026 GMT
Not After : Sep 24 22:00:44 2026 GMT
Subject: CN=aa17828bfd149baa5667de345b3b3defe7200b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:96:e8:07:44:f5:d5:96:9e:49:8d:7b:d5:
95:c1:6f:83:6d:5b:91:e1:e7:f0:ce:cf:b9:22:c2:
2b:fe:9f:87:ba:2a:20:04:54:02:b8:e0:c7:cf:60:
9d:92:0b:24:54:52:49:ef:da:e5:79:2d:bb:4c:7d:
27:9f:68:bd:7a:b0:3a:5a:c4:42:3b:77:5c:f8:ac:
55:ae:3f:c5:6b:68:0f:c2:4b:a6:30:b1:90:cf:dc:
83:cd:74:af:a1:db:89:af:cf:3f:a7:0a:f6:7a:08:
02:20:56:c1:4e:c8:f7:46:e1:79:3c:9e:1b:dc:e2:
48:8b:cb:0a:a0:51:70:55:3c:08:cf:91:0c:8a:d6:
1b:20:70:32:66:df:a2:bf:e6:32:b2:05:e5:f1:b1:
8f:a7:a6:7a:ba:1e:f6:92:e0:5f:3b:8f:eb:58:b7:
dc:01:73:ca:7d:37:2a:0f:f0:9a:77:2d:79:82:d5:
78:65:e4:55:d6:04:e0:c6:b2:e7:be:43:0c:eb:c5:
b1:da:a1:b9:96:c1:3a:62:f5:5a:5d:bb:8b:67:44:
c7:3d:91:98:32:04:9b:c8:77:73:66:8d:26:2a:fd:
d3:17:04:9f:b8:a2:8b:86:8c:4b:33:81:3f:a0:03:
15:46:93:17:bc:2b:26:6e:41:51:17:84:3d:e5:01:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:82:8B:FD:14:9B:AA:56:67:DE:34:5B:3B:3D:EF:E7:20:0B:4D
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:ee:00:78:fd:19:ef:77:82:b8:7c:15:67:0f:0e:0c:83:
48:2b:7d:dc:1a:6f:64:19:fc:7c:d5:c4:fb:9f:0a:71:c7:42:
7d:0c:ef:f4:1f:85:7c:5b:36:b8:80:ad:07:dc:ab:0c:05:50:
68:f3:0e:67:ae:0f:0c:10:94:13:20:82:4a:8d:c4:77:fa:90:
a1:12:80:ca:ab:9d:48:3d:bd:ed:a7:a5:c9:63:a8:75:ec:ff:
f6:95:6d:0e:24:14:70:eb:d6:0c:a3:e4:a5:3d:fd:10:06:a9:
d0:aa:82:1f:04:a0:d6:d1:7b:33:c9:f2:2f:68:fd:0b:56:ef:
19:01:15:50:15:a8:db:47:e2:41:6a:a7:bf:f1:fe:7e:e2:84:
19:d3:d9:89:33:09:2a:89:44:97:63:e0:2e:56:e2:7c:77:58:
c0:83:00:15:3c:92:b9:60:9e:80:ad:a8:17:18:20:32:9d:d9:
c9:3d:d3:f1:e6:ec:0c:4a:b1:dc:cf:a1:5d:c3:04:f7:a1:90:
f0:36:16:a8:0b:e5:74:24:a5:c5:a8:47:68:84:06:80:65:dc:
a5:13:03:82:61:cc:d2:ef:f9:91:a1:cd:e6:a1:ba:5d:4c:bd:
f3:9b:f5:c4:6f:71:04:7b:5b:ce:58:e2:0a:23:05:5b:40:4a:
37:ac:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:35:11 2026 by rpki-client