Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: LRhg58dg4g+FHQdX7S5tQR354TgNVQgqI5XUnlfj2Uo=
Subject key identifier: 1F:37:B6:06:17:F7:0B:B2:94:E4:60:A4:72:48:6A:F1:47:FB:ED:4E
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019FFD249ECBC7C87E3E998DC124778922CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1A0B
Signing time: Thu 13 Aug 2026 22:01:03 +0000
Manifest this update: Thu 13 Aug 2026 22:01:03 +0000
Manifest next update: Fri 14 Aug 2026 22:01:03 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: f3ERkjzQOZigX9Egtm9FMlpvSWx1Zz5ha8azj1y0nq4=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:24:9e:cb:c7:c8:7e:3e:99:8d:c1:24:77:89:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Aug 13 22:01:03 2026 GMT
Not After : Aug 14 22:01:03 2026 GMT
Subject: CN=1f37b60617f70bb294e460a472486af147fbed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:d5:93:a8:f2:db:94:ca:ee:4d:ae:e2:4b:
25:48:e8:b4:d2:85:ed:53:ce:95:d3:92:6b:d9:cd:
4a:4a:06:60:4f:15:a4:a6:70:aa:76:0d:87:9b:b2:
01:e7:a2:01:91:3b:5d:c5:2e:78:36:d3:98:3e:d4:
8a:e2:7c:5b:94:a0:80:8f:9e:88:4c:3e:61:e2:b3:
e8:2b:87:8f:9d:4c:14:dc:ff:a0:f9:bf:99:98:19:
90:2b:b2:0e:74:6d:fa:99:2d:b0:d2:9f:49:b2:67:
50:bc:c2:1a:66:34:00:4a:41:78:08:4f:b3:e6:f9:
15:11:02:df:96:2c:73:d9:ee:4e:1b:57:29:4b:dd:
12:85:b5:80:cd:53:de:71:b4:0c:c3:a1:84:8e:04:
ba:e4:1c:9f:fb:51:60:bd:52:a2:ee:2a:49:75:4a:
5e:55:73:24:69:c0:7e:00:7a:fa:25:94:39:d5:96:
52:13:4c:a0:3e:a4:e1:99:ac:88:9c:1f:40:15:a5:
dc:41:1d:37:f8:d4:62:99:9c:95:94:f8:62:74:04:
0d:66:dd:64:be:c6:41:ea:b8:84:2e:6f:4a:ce:95:
ef:8f:cd:cc:b9:1b:31:f9:38:29:00:83:d2:a8:01:
ba:dd:73:94:0a:1f:b2:7b:56:fc:5a:e4:5f:75:68:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:B6:06:17:F7:0B:B2:94:E4:60:A4:72:48:6A:F1:47:FB:ED:4E
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:6a:ae:39:2c:60:48:39:6f:66:f8:61:6a:79:cc:cd:d7:
ee:ec:77:9f:46:3e:0b:63:33:63:ad:46:09:4b:86:38:f2:0e:
9b:b0:cc:a6:43:a0:aa:f9:d8:ea:d5:be:97:19:b6:46:e9:4b:
6f:5b:04:c1:40:bc:ac:70:1b:02:2f:88:68:fb:6a:0c:58:bb:
82:cb:39:dd:e9:e1:69:ee:b1:4b:7a:48:1d:fe:7e:18:30:8a:
57:f3:2a:e2:29:39:5b:a7:1f:5e:b9:09:02:36:07:c1:0e:b7:
21:e9:6d:3c:98:5e:6d:63:77:bb:b9:13:dd:d3:da:11:c1:45:
30:3c:d3:3f:ea:16:86:37:14:9a:5d:9d:74:4c:d0:de:fa:b5:
f7:45:5f:62:68:6b:44:e2:6c:8b:5f:cd:8f:f0:cf:dd:8a:9a:
15:43:ee:81:a3:c3:eb:a1:33:f9:52:12:32:05:0b:2b:c5:f4:
bd:40:ce:22:eb:bd:6a:ef:8a:67:72:d2:97:c2:59:06:66:c0:
af:a4:37:97:77:86:42:29:bb:1b:49:16:18:8b:67:41:01:d2:
db:7e:cd:d8:31:8e:60:50:19:47:fd:19:6b:97:4c:8c:e9:39:
b8:62:55:18:21:71:74:5f:71:6c:06:aa:81:50:7a:42:0b:e5:
b8:12:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 00:17:43 2026 by rpki-client