Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier: rmIFHdQJoGYvwBGcNjk/1hZjr8OnHyCZ6Yo1Mh+8ao4=
Subject key identifier: 6A:46:0D:C1:9E:0C:6E:1C:B1:2A:BA:BB:7A:AA:FB:86:27:FF:E1:98
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 01A06EA7823220713AEFBC45643F3F78C3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 23:01:06 +0000
Manifest this update: Fri 04 Sep 2026 23:01:06 +0000
Manifest next update: Sat 05 Sep 2026 23:01:06 +0000
Files and hashes: 1: HRHfBeVR8FCErSeg_f0jsh6Y810.roa (hash: 5Uj4MHwwi5BQxM2HtVlQdjayICr5xhiFmlHmBSv92Ek=)
2: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
3: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: C4tOKG9FotElcn3BeGbpRkK+BHesXNTynvcdslbZbTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:82:32:20:71:3a:ef:bc:45:64:3f:3f:78:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Sep 4 23:01:06 2026 GMT
Not After : Sep 5 23:01:06 2026 GMT
Subject: CN=6a460dc19e0c6e1cb12ababb7aaafb8627ffe198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:47:1a:7a:93:7d:50:cd:37:a3:d0:e7:ef:
33:fe:a1:85:11:bc:a2:76:1c:56:1d:5d:18:79:2e:
04:ac:41:40:af:af:9e:f8:a2:8d:81:66:a7:b5:79:
e7:3d:af:b4:c0:fb:f2:69:a2:fc:4c:e1:1d:74:a3:
4e:f3:a6:54:6c:53:3c:80:c3:93:73:f1:db:4e:16:
44:68:84:fe:19:e6:2a:25:3f:98:4c:8b:24:67:da:
23:10:01:b1:bb:fd:23:79:34:3e:fc:11:22:cb:0f:
cc:42:81:08:ac:7d:b2:35:b6:15:3d:00:69:d7:fd:
92:23:98:a7:6e:ec:27:c5:28:9f:9a:5f:69:73:9e:
39:92:f8:b1:81:9c:70:9b:c2:80:bc:55:87:45:79:
55:ea:7c:89:ba:72:ff:f8:e6:3d:f2:be:79:aa:21:
82:ba:f9:93:bc:08:4e:b2:f1:14:33:b5:6e:8c:70:
e9:eb:bb:d9:84:be:f7:43:fc:91:61:50:84:7c:b5:
3e:73:33:b5:10:17:a0:1d:45:60:9c:41:8a:e9:4a:
46:cc:36:57:2d:86:95:db:ac:fe:05:3a:1d:75:d4:
cd:3b:0c:1d:68:d7:b8:b1:23:79:d6:aa:6c:f8:de:
4a:e5:d7:17:fc:e7:1c:61:09:83:ba:bf:48:9c:d8:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:0D:C1:9E:0C:6E:1C:B1:2A:BA:BB:7A:AA:FB:86:27:FF:E1:98
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:64:a6:62:fc:e8:49:ca:cd:57:65:e6:34:87:30:e2:47:aa:
c6:28:16:0c:ae:b8:28:a9:5e:bb:86:81:4d:d8:a0:b3:21:5c:
6b:6d:58:e4:f1:82:f1:df:6f:63:8b:ff:47:b6:a9:73:32:d6:
d9:04:f6:1e:74:29:4f:76:d3:23:88:83:b5:7f:c9:5c:f4:85:
46:ed:48:5d:2b:85:53:9f:5d:e8:d7:cb:5b:a7:38:22:eb:fb:
b5:c1:d3:f1:3e:fd:96:54:1d:dc:d5:04:e3:cc:bb:45:c9:87:
a7:f0:02:9c:5c:c4:12:d2:ce:51:d3:c9:20:d4:e1:2b:f5:b1:
4b:b8:47:85:3f:fe:6f:12:4e:37:17:ae:c2:7b:0e:e5:9c:ae:
42:ff:0c:8b:42:c4:d0:ae:10:09:ae:08:c3:4f:86:4c:2c:30:
b1:ca:40:ef:17:9f:7e:1e:9a:40:d9:de:f1:84:f6:29:45:d8:
61:e7:34:a5:ea:87:5c:04:ea:1c:60:98:88:52:bc:f2:65:d7:
4f:af:f2:f6:df:7f:81:93:b4:5e:8e:dc:33:e4:4b:d2:25:67:
10:0f:e0:2c:60:c0:63:61:21:7f:3c:1a:f6:09:c8:8f:ba:b8:
d8:29:18:67:1f:c6:6f:0b:66:f3:04:03:33:3a:9a:ec:00:8c:
e9:a7:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:56 2026 by rpki-client