Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: 7gvEb3/JOvmpQ+DMFf5gg/RyJKHnFxXGiDeWVJjPPWU=
Subject key identifier: 9D:8C:01:AB:32:6F:E3:29:D1:2E:48:13:A1:49:F6:F7:ED:D2:7B:9E
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 01A11ED1D2AC7C2053B86B1430D0F499B496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1AA1
Signing time: Fri 09 Oct 2026 04:00:29 +0000
Manifest this update: Fri 09 Oct 2026 04:00:29 +0000
Manifest next update: Sat 10 Oct 2026 04:00:29 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: zPcEYi8rdbiPR5eBCXENf6X7slPsR9xn8dzIrynVlJ8=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d1:d2:ac:7c:20:53:b8:6b:14:30:d0:f4:99:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Oct 9 04:00:29 2026 GMT
Not After : Oct 10 04:00:29 2026 GMT
Subject: CN=9d8c01ab326fe329d12e4813a149f6f7edd27b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:87:d5:18:31:97:dc:9e:dd:02:ab:86:b8:
fc:c2:e4:93:b3:28:66:8b:53:c8:6d:7b:9f:a4:6d:
24:9a:88:b3:69:5b:84:37:b3:59:9d:2c:2f:1e:4d:
5b:a4:f1:ab:b8:7a:cb:97:88:9e:06:ea:26:34:4b:
d3:d3:db:d1:d8:9c:38:bb:aa:b9:2b:37:30:c8:4b:
42:dc:1e:18:08:3f:a5:0d:f9:f3:06:5d:83:96:de:
35:4f:2c:da:74:76:90:21:94:35:27:7c:f5:3d:a1:
79:25:31:e6:96:96:f1:64:00:41:c0:3b:61:ab:29:
1d:bb:84:8e:05:3a:a6:64:f8:e7:c6:f7:3c:bb:4b:
49:bd:7b:77:83:65:b6:c1:d4:17:45:81:8c:8b:85:
f7:b3:14:d2:bf:3c:2c:04:07:1b:9a:d2:07:94:a2:
e4:c8:51:02:8c:76:b4:5b:d0:4f:77:a1:0a:ce:d9:
ed:ea:f3:a4:ff:02:05:16:d5:ba:95:cd:a4:5f:db:
36:9e:01:a4:97:10:cd:47:2e:de:de:51:a1:89:67:
2a:96:98:ff:03:40:39:0c:46:45:19:6d:d9:9d:78:
2f:4b:02:40:f0:d9:b7:00:60:4a:43:23:28:59:27:
4c:f8:e5:52:ca:ad:10:1b:9f:2d:f0:f9:0f:9e:d3:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:01:AB:32:6F:E3:29:D1:2E:48:13:A1:49:F6:F7:ED:D2:7B:9E
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fc:cc:48:aa:fe:0b:b8:52:86:bc:62:6d:0f:9f:30:28:01:
df:8a:ca:82:4c:60:a8:be:3a:5d:bc:93:4b:1b:8a:24:b5:c9:
74:75:e4:dc:33:e8:ac:a3:38:78:5a:75:11:96:05:8f:25:b3:
10:fa:19:57:76:02:95:59:e2:ee:f9:69:4c:cd:36:fb:bf:59:
3d:44:06:be:8c:d5:a0:b8:60:69:7e:37:84:88:bd:40:17:ae:
98:6f:aa:a8:44:cc:c7:bf:15:b2:33:28:dd:af:9c:23:bb:2b:
d1:85:87:e9:21:d4:08:16:ad:ba:5c:30:b6:08:5a:67:e9:82:
4e:e5:79:15:ad:4a:94:42:c6:ae:04:9c:0a:fe:c8:04:ab:51:
89:f5:be:64:e2:2d:b8:f1:ec:35:5d:0a:b1:2e:d9:b2:06:d9:
9d:01:35:fb:9c:f7:53:65:9a:65:15:bd:90:b2:b7:ec:1f:91:
3c:16:17:19:07:7a:be:49:48:47:ac:af:8a:de:b4:a9:cb:26:
3b:ed:7c:ca:7e:d4:47:93:67:4c:08:39:b6:39:64:a5:92:0d:
98:10:eb:66:4f:60:c9:53:f7:34:87:30:e7:71:d7:68:db:24:
30:dd:55:5f:21:a5:8e:7a:0a:8f:37:5e:29:6c:fe:e5:b4:3b:
c3:71:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:06:10 2026 by rpki-client