Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: KwncbgduEnRmOffpqTGAuYhFPyo1/zlZrEmeUpKdngk=
Subject key identifier: 39:C1:7C:C7:21:E5:7A:24:B7:BF:F8:40:87:20:D2:5D:11:EB:75:47
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01A17F2A835794E7CBFF9412839993F4B095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 21:00:54 +0000
Manifest this update: Tue 27 Oct 2026 21:00:54 +0000
Manifest next update: Wed 28 Oct 2026 21:00:54 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: oakfyapuB+g/DkY1k5J3cVeEx0dh15jXp58MlOzmm+M=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:83:57:94:e7:cb:ff:94:12:83:99:93:f4:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Oct 27 21:00:54 2026 GMT
Not After : Oct 28 21:00:54 2026 GMT
Subject: CN=39c17cc721e57a24b7bff8408720d25d11eb7547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:f1:d4:65:52:e0:20:17:4d:aa:01:01:ae:
68:d2:97:be:a9:dd:24:d9:82:8c:6a:5b:a3:fd:a0:
cb:4a:46:41:e7:b0:35:68:5a:e3:1e:63:06:2c:89:
e6:58:62:6f:53:82:a1:f3:c5:e8:c8:51:e2:f4:f2:
cd:20:d7:eb:f0:0d:1f:2a:3f:1a:f8:09:36:cb:72:
f6:2c:7a:3f:e6:55:18:7c:dc:8b:c1:56:93:79:49:
1e:63:27:28:4a:55:79:09:a6:a9:2b:e7:f1:d2:d5:
30:01:11:f5:d6:50:ed:e4:10:1a:a4:5b:72:d8:3c:
13:23:91:6a:fc:8f:83:4e:df:d6:e9:46:8f:f4:4a:
6c:bf:1d:ff:1a:04:7b:9b:79:76:25:97:8c:cb:b1:
55:45:4b:58:7e:dc:f0:e6:6d:f6:fd:ce:67:0e:bb:
a9:38:66:e6:fa:2c:69:bc:c7:27:9c:f2:3c:36:62:
63:3a:e2:07:cc:27:8e:82:61:2a:9b:eb:40:b9:32:
ea:60:32:38:ba:d1:87:a7:de:40:a1:be:bf:50:06:
2f:1e:59:1a:a1:ce:5c:aa:01:5f:66:fa:91:c2:d7:
8f:e6:ab:c1:a0:5a:bf:21:12:6b:7f:e9:b0:6f:ee:
2c:9e:9f:7e:37:f6:e5:96:3f:c0:f8:15:82:fd:13:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C1:7C:C7:21:E5:7A:24:B7:BF:F8:40:87:20:D2:5D:11:EB:75:47
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:7a:4d:0a:96:65:6a:30:25:d4:38:5e:a7:c6:9d:c8:91:
c7:ee:0f:78:ba:1a:6b:59:49:ac:d4:ec:54:62:93:f2:19:2e:
3f:a7:e7:d5:31:1a:7c:1d:47:d9:ae:a2:cd:61:f1:44:c5:ac:
e5:fc:9b:d6:28:2f:69:26:a9:80:f3:60:eb:51:2e:25:4d:98:
f8:40:be:e3:0a:4f:e4:fb:5a:14:35:6b:76:b5:d5:61:82:e5:
5a:78:fd:11:b1:56:aa:1d:20:f7:24:fc:3c:34:aa:69:8d:42:
2a:ef:57:f6:a3:c5:a4:73:ca:ec:12:3a:de:2a:ba:d2:9b:56:
8b:d3:0e:c6:ec:48:bb:32:f4:3e:c0:a1:f6:f5:27:9d:3a:ba:
f1:77:91:5e:72:ec:26:8f:54:47:32:4e:4d:ab:8f:86:0a:6a:
6f:b6:5f:36:fd:da:fe:7d:32:aa:71:ed:4c:5b:3d:f3:bf:cc:
77:dc:87:a9:73:db:5a:40:6a:91:29:c2:18:58:10:8b:eb:d2:
c1:02:8b:6c:1c:a9:7b:7f:25:57:92:44:15:cf:e3:c8:9d:4c:
d2:96:87:1f:c7:68:08:43:8e:12:83:65:50:33:42:d3:05:cc:
51:b5:bd:c2:d3:22:2d:d4:90:75:99:36:a6:70:9f:a5:58:5a:
39:c1:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:10:18 2026 by rpki-client