Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
File: l1otW428KUB1EBfkqLR2cy5_ToQ.mft (raw, json)
Hash identifier: yD5FYKiUbO15V53sq+D41gz88ZaptYlPApy6efWALbQ=
Subject key identifier: 7C:13:E3:79:B2:57:EE:40:9C:1C:69:F0:0E:31:D4:48:58:5F:80:E4
Authority key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Certificate issuer: /CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Certificate serial: 01A06EA76B887AD4164DFB77EA511E4273FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
Manifest number: 60
Signing time: Fri 04 Sep 2026 23:01:00 +0000
Manifest this update: Fri 04 Sep 2026 23:01:00 +0000
Manifest next update: Sat 05 Sep 2026 23:01:00 +0000
Files and hashes: 1: IQxi_ycveBSnK1Ru6EC_lb20R2M.roa (hash: qkCT/kfpBxRfgLxAiyBIqf6L9Svv3JlOCCjBfxcll6E=)
2: l1otW428KUB1EBfkqLR2cy5_ToQ.crl (hash: 42Ulq7zwQpcAi89VDguGDke7vEvImFoqQyWJEd7lPCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:6b:88:7a:d4:16:4d:fb:77:ea:51:1e:42:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Validity
Not Before: Sep 4 23:01:00 2026 GMT
Not After : Sep 5 23:01:00 2026 GMT
Subject: CN=7c13e379b257ee409c1c69f00e31d448585f80e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:a9:db:f0:ce:0c:b2:e9:6a:f9:cb:25:a7:
be:10:88:4c:9b:af:4d:cb:ca:a0:92:60:3f:eb:28:
5f:32:5e:ca:28:ef:61:48:c2:75:3c:bc:99:ed:70:
fe:73:c2:94:11:00:40:ce:cc:b2:d5:85:a1:c7:31:
fc:ce:10:e9:13:e9:2a:75:26:eb:15:28:7d:05:bd:
b2:c0:9d:b9:59:d0:ef:41:72:0a:dd:b4:b8:7e:dd:
2a:b7:7f:1c:f8:f1:ae:67:a1:64:db:06:ee:2a:bd:
79:7e:25:18:be:a1:8b:aa:4f:f2:c5:7b:2f:76:7d:
7e:0a:03:c0:9b:bc:8d:82:ef:f5:12:84:0b:2a:09:
da:45:98:3d:a6:44:72:1d:28:cb:77:04:c0:bf:74:
b4:cc:54:20:b0:2a:24:16:b0:43:71:59:01:6d:02:
fb:f6:b7:bd:00:b7:ad:4a:e6:cc:80:cd:b4:40:36:
43:72:12:29:30:ce:1e:50:44:b9:fc:26:b5:a4:04:
6a:e2:5a:81:49:5a:f4:da:fe:ae:4c:0c:8e:2b:6c:
5a:34:14:b4:d7:c1:67:e5:de:64:57:0c:fc:ad:cf:
ed:50:a9:fe:5f:61:45:e7:f7:b6:e9:b1:ab:3c:05:
95:5a:70:88:01:32:1d:97:b6:5b:da:f3:c5:66:32:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:E3:79:B2:57:EE:40:9C:1C:69:F0:0E:31:D4:48:58:5F:80:E4
X509v3 Authority Key Identifier:
keyid:97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:83:bc:32:d0:bf:d0:68:be:03:39:ef:39:23:c2:bd:cc:
26:df:4d:81:4c:61:79:fe:38:6e:5e:52:1f:1f:fb:b4:95:52:
72:02:74:bc:d8:59:a8:c4:a7:85:17:e4:9e:36:83:b3:5b:b8:
59:04:91:a6:15:67:29:19:40:7c:a8:fa:1e:2d:8e:d9:01:46:
7f:62:ea:87:85:84:d4:91:94:9c:b0:2f:48:ef:1b:df:18:b9:
18:6c:b1:e8:af:55:c8:73:5c:6a:9e:c9:d2:8a:6b:46:b6:90:
79:3a:ad:8e:ba:4c:79:38:91:2d:99:49:53:90:d9:e7:09:59:
88:7e:6d:a5:1e:16:18:5d:26:38:3b:d3:d6:2c:9a:5b:6e:9b:
44:d6:14:83:01:e9:12:7c:d6:a0:af:90:8e:9b:58:8d:91:55:
78:cc:e9:e9:57:62:9a:62:fa:85:5a:1b:b1:26:61:89:b4:d4:
c1:d3:59:21:ee:13:38:80:d5:79:09:41:a4:0b:67:28:b9:7b:
2d:74:00:2c:7c:08:01:b3:ab:5a:06:b4:50:e9:10:fa:f5:4e:
a5:bf:1e:4b:b2:64:07:c2:fc:32:87:02:df:4c:43:1f:37:68:
c2:ff:21:a6:a6:a1:c6:eb:9f:95:a0:41:90:6f:71:c5:b5:f5:
20:8c:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:43:17 2026 by rpki-client