Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: ZgZ+UUezGJn5WqKJffJUW3cdQxBCWhUryRy8ZS/jdQk=
Subject key identifier: 3F:F4:C6:36:F5:2C:16:A2:0D:6E:F8:4D:12:97:B6:DA:81:28:BE:06
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 01A0DFF3C08339E45FCEA1D84E6108144A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 23:01:28 +0000
Manifest this update: Sat 26 Sep 2026 23:01:28 +0000
Manifest next update: Sun 27 Sep 2026 23:01:28 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: /LIYtDGpVFPiHCLtG8QcK1R8SAVBOt2e4gon+u1KDH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:c0:83:39:e4:5f:ce:a1:d8:4e:61:08:14:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Sep 26 23:01:28 2026 GMT
Not After : Sep 27 23:01:28 2026 GMT
Subject: CN=3ff4c636f52c16a20d6ef84d1297b6da8128be06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:2b:c5:ee:6f:aa:08:31:52:b4:2a:af:7e:
2e:7c:48:a1:56:a2:54:06:02:57:dd:fa:e4:cf:e7:
15:0c:14:de:90:0e:0d:c2:29:d1:8b:86:e0:23:5e:
0a:2c:36:c5:10:1e:34:c4:bc:f2:aa:c1:38:21:55:
1e:45:ad:66:bf:6c:fe:87:66:a2:b7:7c:0d:d9:7b:
d1:58:cb:3b:92:07:91:4a:f7:d6:a8:45:bb:24:ea:
32:9d:c5:9d:65:d6:ce:68:75:9e:fa:94:1e:5f:8b:
cf:e4:a9:8f:39:8e:55:b4:e2:07:b2:e7:e4:f9:07:
5e:d9:61:41:c9:2c:15:8a:26:c7:89:17:96:5b:ef:
ff:8f:51:eb:f1:45:ae:18:f2:a0:db:10:d1:e1:2d:
7c:c5:9c:ec:43:bb:4f:86:50:cd:a3:5d:94:b4:b4:
8f:85:53:4c:29:19:bf:38:b2:6a:1a:b1:78:68:9d:
8b:b9:ea:c8:4f:7e:0f:27:14:83:ed:f0:77:d8:74:
26:02:4a:88:23:fd:ca:ba:ce:e4:b8:ec:3e:63:09:
6d:dd:f5:49:70:29:fd:24:b5:93:60:56:79:40:8c:
b5:93:24:e0:4f:ab:d0:79:c1:61:f2:9f:83:d1:63:
33:db:c4:c1:28:3a:67:60:a9:54:4f:a1:35:33:8e:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F4:C6:36:F5:2C:16:A2:0D:6E:F8:4D:12:97:B6:DA:81:28:BE:06
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:01:c7:ce:6b:6f:03:1d:ec:17:aa:47:51:4e:0f:9a:57:
53:9c:69:85:8e:ba:e3:ad:c0:be:3b:55:3f:ee:e8:78:06:ad:
36:8f:3e:e6:b0:be:99:08:99:ef:93:33:d9:32:50:10:e1:c9:
4a:bb:77:08:76:89:fb:81:8a:c6:f9:6d:bc:d8:da:d0:c3:0e:
3a:63:91:ae:09:db:86:1f:f6:41:2f:bc:e7:8b:e5:06:6d:a4:
19:f1:a6:9c:8f:da:07:75:9b:d6:31:d8:16:66:92:89:b2:2a:
d7:9d:21:8e:ac:40:7d:7c:85:e5:76:0c:71:8c:74:fb:a1:44:
cd:48:01:13:58:76:44:f6:a6:88:8f:02:27:8f:4c:fb:d8:82:
e1:c4:14:fc:6a:00:b7:3e:e2:e8:01:55:27:97:12:11:ae:96:
7b:c9:99:e2:29:d1:54:33:ae:f8:6a:6e:ba:10:5d:4e:97:01:
d0:a7:95:29:ad:05:4d:d7:42:26:f9:ef:cf:f2:cd:17:04:5c:
f8:ec:20:b7:8f:fb:be:72:7a:5e:a3:44:7f:60:dc:58:82:b7:
c5:ed:bc:2b:2e:23:bd:93:82:b7:18:5c:2d:3c:26:1e:65:0a:
ee:5f:e1:e5:b0:7b:13:69:6f:53:56:04:92:4b:6c:cd:0b:0a:
d6:31:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:48 2026 by rpki-client