
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: EA2KRM1NsDVf5WzxoQf+rNfuCfwmsRb/cN6x/qiOREg=
Subject key identifier: 49:A5:91:5A:26:70:29:69:D4:A3:62:D5:BF:32:97:15:9B:EC:CB:1B
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 01A06EA7D0E09E624508BCF1F954636DA025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 23:01:26 +0000
Manifest this update: Fri 04 Sep 2026 23:01:26 +0000
Manifest next update: Sat 05 Sep 2026 23:01:26 +0000
Files and hashes: 1: 1-5zn0bSlddLMmUlOq_ZglROu18k.asa (hash: Yy6jCWoReDrwxlHPUoAZSBEIXQW1OUdFReXCBYRR6d0=)
2: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
3: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: 3rSn0q06UdGf0ObSWv2jUX+lGc62+czOGijsXHlYDME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:d0:e0:9e:62:45:08:bc:f1:f9:54:63:6d:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Sep 4 23:01:26 2026 GMT
Not After : Sep 5 23:01:26 2026 GMT
Subject: CN=49a5915a26702969d4a362d5bf3297159beccb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:32:f8:d4:be:d5:e9:96:39:2f:c2:dc:8e:
b8:2f:e5:3e:dc:c9:7a:0b:3d:12:90:e6:48:48:f9:
bc:39:1a:69:5d:09:38:dc:6e:8b:09:82:e6:d2:35:
75:78:1d:13:10:6a:08:6f:4e:a5:5e:d6:67:e5:dc:
7f:64:ff:d1:66:ed:4c:cf:41:74:6c:64:c5:cc:3e:
be:81:0f:7b:51:11:62:9f:29:e1:71:d7:61:04:52:
fe:a3:6b:38:1d:4e:5d:f3:ea:b7:f7:e2:24:b4:3a:
d2:fd:a4:cb:eb:53:09:3b:6d:58:c4:e9:74:45:fa:
59:f8:04:81:14:f3:4e:8a:28:97:cd:bb:ba:fa:82:
c1:33:20:7d:3a:3d:13:a5:17:fd:f8:39:c4:97:f0:
ff:64:1c:eb:78:ad:e5:76:ee:42:54:a1:70:fa:ed:
e3:ab:10:cc:71:14:ff:2e:ef:66:51:b9:f1:24:fb:
2a:a8:a0:22:f1:fa:f8:fe:5c:7d:27:a8:20:3b:93:
24:d7:8f:0f:70:3e:26:6f:4f:f6:b3:5d:12:97:89:
a7:a5:56:39:f8:eb:f0:28:b2:67:36:ed:9b:0a:88:
21:ab:be:e7:78:8e:c9:97:f5:6c:ba:a4:69:6c:07:
af:4e:63:56:d8:16:47:98:49:89:ec:36:f6:dc:01:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:91:5A:26:70:29:69:D4:A3:62:D5:BF:32:97:15:9B:EC:CB:1B
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d0:69:ef:e6:5f:09:b6:ff:48:6e:cd:8f:8d:18:ea:66:52:
63:26:8f:e7:e8:8f:5c:a2:d8:9a:dc:9e:07:fc:0c:fa:65:07:
ac:75:a3:08:8c:5b:7d:9f:59:33:d5:af:15:a9:58:7b:4f:57:
ce:24:80:c9:a2:03:c1:79:88:ed:cb:a7:42:69:2d:16:2b:93:
7b:1b:24:0c:f5:41:bd:ac:0c:bc:90:1a:5c:33:7d:28:1d:6f:
d6:9e:9e:55:09:1c:7d:02:6d:e5:08:6b:e7:de:fe:8a:08:19:
86:43:db:f8:06:82:f5:d7:25:61:f6:f8:77:28:11:ec:91:d3:
e7:e1:32:5f:2b:15:62:49:f2:e2:61:6f:26:e8:fd:72:10:b8:
a8:6a:ee:c1:0d:55:5e:94:c2:d6:b4:75:23:a3:9e:6e:00:50:
fd:b2:db:94:7c:20:9f:1c:c3:28:9a:8f:06:16:c5:b0:f7:ef:
b7:fd:a9:fa:c0:6c:77:7f:e6:af:35:03:1d:2c:68:3e:82:c7:
5f:b5:5a:df:10:ec:04:4f:00:8c:56:ef:69:34:55:fa:8b:b1:
1f:b5:d9:60:5d:0d:1d:e4:dd:6e:c1:ef:a1:dd:9c:17:7f:82:
2b:df:62:9f:1b:dd:a6:a7:7a:3d:90:6e:7f:6d:5e:69:4a:c1:
a2:8c:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:23 2026 by rpki-client