Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: 0dF0TwSIj1t26A3IkMXDub4ADbkdw/CWq2no3iCZ/HA=
Subject key identifier: C7:10:FB:8D:DB:47:A3:F8:B1:CA:45:A9:49:3B:39:BE:89:12:3A:58
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019DCED00E0D6A1E80EECC4F2662F455D20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 12:00:34 +0000
Manifest this update: Mon 27 Apr 2026 12:00:34 +0000
Manifest next update: Tue 28 Apr 2026 12:00:34 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: 2/vdTR8n0jTYLkJvOvr6dtDq/oWOksWSZ+HOVwkgTZw=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:0e:0d:6a:1e:80:ee:cc:4f:26:62:f4:55:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Apr 27 12:00:34 2026 GMT
Not After : Apr 28 12:00:34 2026 GMT
Subject: CN=c710fb8ddb47a3f8b1ca45a9493b39be89123a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:a4:be:57:bb:c5:28:c0:fe:18:2d:7f:cf:
e7:59:60:2b:52:e4:03:4b:7b:21:6f:29:86:9c:03:
d1:2d:1f:ba:16:cd:1c:5e:ce:0f:ca:a8:ea:61:d6:
d1:f9:42:0e:a3:c1:b4:13:8c:f2:1f:c9:12:de:47:
c9:79:15:a1:6d:54:5f:00:82:24:a2:65:b5:5e:19:
77:d1:af:7f:a4:81:e8:5a:30:5a:a5:90:2c:4b:20:
9a:f5:72:a6:fd:d6:6d:8b:6b:ca:15:83:8a:52:d1:
e1:8f:29:65:94:1c:72:23:98:d3:2b:a5:14:df:e1:
e8:f6:f1:7b:a3:8d:c3:8c:1f:dc:43:03:a5:82:55:
bb:ce:dd:08:ef:87:72:80:f5:39:6d:4d:77:48:17:
10:70:f3:e9:62:95:73:a8:7d:52:75:f0:7d:b0:00:
2a:3c:0c:af:68:44:55:55:c8:1a:fc:67:8a:62:ec:
d3:17:d1:6a:36:fa:9a:c0:c9:ee:d7:a9:1a:67:6f:
64:ee:7e:df:06:f2:31:25:29:c8:44:f1:0b:df:22:
58:a4:45:b2:bf:ff:9f:5b:0a:76:78:b4:87:91:d1:
2b:c8:3b:65:a3:4f:c4:8b:2d:5a:e3:c3:e7:d7:10:
3e:f9:38:1c:92:dc:91:b1:c3:1d:ee:46:99:93:98:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:FB:8D:DB:47:A3:F8:B1:CA:45:A9:49:3B:39:BE:89:12:3A:58
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:3b:7d:31:46:26:7f:03:88:0d:00:0d:5b:a0:8c:e0:89:
01:79:d1:a5:5b:65:53:c2:b3:29:ea:8e:f6:fa:09:ee:52:68:
6f:21:31:c0:33:40:7d:62:b7:38:f6:5d:38:eb:06:13:2a:4a:
67:d6:cd:64:69:8b:ff:fb:e7:8b:13:98:36:c0:ce:45:e8:b0:
d2:c3:97:cd:3b:c6:7d:de:44:cb:05:6c:dd:03:a6:18:75:17:
fa:4f:c8:ce:f1:72:05:d1:27:5b:6a:9f:fa:d7:aa:bb:32:33:
e4:1c:b4:85:91:89:23:22:1d:ef:e1:bd:86:31:be:46:be:cf:
7b:10:dd:89:d8:ca:98:ba:25:b5:d9:54:44:45:a7:2b:b1:84:
0c:9c:52:da:42:d2:1a:7e:ba:d7:c7:ee:6f:eb:d5:28:7a:56:
ee:fd:0c:44:95:be:bc:48:b6:13:0b:03:e4:f4:c8:1f:cf:9b:
57:41:11:aa:d1:ed:9f:28:24:f9:a4:a8:fc:6c:80:41:77:4b:
ab:8e:cd:a4:b6:b4:7e:97:d9:49:b5:46:f5:10:f1:6f:33:df:
0d:56:10:72:3d:3e:47:2b:41:5e:e4:ce:93:f0:39:3f:dc:37:
ba:02:78:79:b4:cd:bc:43:20:b7:71:da:69:0b:b7:6d:ab:c9:
22:1a:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:31 2026 by rpki-client