Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: /ONtybh+IlgrlrMI0WwSianw2hjKF9cq/eeYVb80q40=
Subject key identifier: 77:C3:03:BF:03:2C:9D:CD:5C:B9:88:42:EB:15:3F:78:E1:3D:4D:43
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019EB68E34BABA1EAA966C9E1A28918B0AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 12:00:33 +0000
Manifest this update: Thu 11 Jun 2026 12:00:33 +0000
Manifest next update: Fri 12 Jun 2026 12:00:33 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: 9vh8pTaK820uKjAZdGc32LaQtBAE6FwW4jsJXyW4dfA=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:34:ba:ba:1e:aa:96:6c:9e:1a:28:91:8b:0a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Jun 11 12:00:33 2026 GMT
Not After : Jun 12 12:00:33 2026 GMT
Subject: CN=77c303bf032c9dcd5cb98842eb153f78e13d4d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:44:0c:a2:ed:cc:e2:af:f1:40:de:19:81:
12:be:07:49:63:cf:b9:57:08:67:bf:e8:e4:1b:08:
f4:b0:45:cb:41:bc:5d:fe:2d:eb:ea:01:68:28:6f:
bb:23:13:ae:7f:02:9b:5d:7e:4d:46:89:2f:f6:ea:
e1:39:53:c4:7c:fa:af:a9:17:e0:12:4c:f8:e1:74:
40:8e:34:6d:0c:66:e6:0b:3e:52:97:54:37:85:30:
0a:88:56:f9:10:88:60:70:7d:32:52:3d:12:ee:ef:
f2:7b:15:99:a9:a4:88:fc:f7:d7:e8:22:9a:31:97:
7c:1a:ae:16:1a:ea:96:1b:af:f7:93:8e:18:3a:69:
ce:85:13:9b:f9:80:37:9e:46:f8:6f:61:98:99:c4:
22:d1:76:6e:9c:1d:22:a0:a8:5b:e7:41:8f:6c:66:
93:7d:36:b2:b2:90:92:fc:ab:ec:02:e2:46:fe:0b:
8c:34:18:46:66:fb:a3:7f:49:11:7a:45:23:01:c1:
cc:5a:4a:c5:5f:f0:7a:77:88:72:34:57:74:4b:c8:
4a:ff:1e:89:ba:90:2a:55:e6:d2:1a:26:10:b2:17:
6e:0b:d0:7d:4f:25:81:fa:5e:88:1e:af:62:15:08:
2a:d3:51:59:e3:19:f2:28:d4:a4:b2:6d:75:92:5e:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:03:BF:03:2C:9D:CD:5C:B9:88:42:EB:15:3F:78:E1:3D:4D:43
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:c1:df:c6:d9:d8:a5:c6:5b:f9:33:91:8c:0a:13:e3:72:
ec:43:d4:03:14:9c:12:95:bf:7c:b3:7d:21:da:20:5a:72:07:
32:9a:d5:3d:91:a0:75:42:4d:4f:66:08:65:44:5e:6f:c0:77:
9c:6f:cc:46:ab:0e:64:b0:7e:b3:0e:8b:af:f5:28:ca:34:2e:
dc:bb:27:1b:15:26:fd:57:10:e6:05:1b:94:f6:54:ea:0a:37:
72:9a:d2:8c:29:b0:a4:a5:63:da:d2:d0:af:e3:4e:67:7a:5e:
06:81:1a:34:ed:de:3a:c6:05:29:a4:30:30:b9:26:fe:52:0e:
64:68:ba:43:be:57:ac:c2:fb:86:65:01:c9:22:cd:65:fd:1a:
40:cf:e7:77:d4:b2:e6:6b:17:76:bf:c7:b6:cc:97:0e:a8:5c:
36:c0:92:e3:fa:ca:f7:9c:d0:fe:38:2f:91:4e:53:b7:f0:c8:
ab:3b:e1:60:ee:ed:de:44:02:b3:9c:25:3e:11:ed:0f:a4:fa:
9d:f0:42:f0:70:3e:a1:9a:69:91:ff:dc:cd:2f:06:47:22:a5:
c2:70:af:42:b3:f5:c2:85:d0:fd:df:de:2a:b0:ad:95:e7:43:
8a:b6:ee:c4:86:9d:82:ba:b2:0c:43:7d:29:e9:57:96:0b:0e:
9b:c6:f7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62jjS6uh6qlmyeGiiRiwrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjYwNjExMTIwMDMzWhcNMjYwNjEyMTIwMDMzWjAzMTEwLwYDVQQD
Eyg3N2MzMDNiZjAzMmM5ZGNkNWNiOTg4NDJlYjE1M2Y3OGUxM2Q0ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9JEDKLtzOKv8UDeGYESvgdJY8+5
Vwhnv+jkGwj0sEXLQbxd/i3r6gFoKG+7IxOufwKbXX5NRokv9urhOVPEfPqvqRfg
Ekz44XRAjjRtDGbmCz5Sl1Q3hTAKiFb5EIhgcH0yUj0S7u/yexWZqaSI/PfX6CKa
MZd8Gq4WGuqWG6/3k44YOmnOhROb+YA3nkb4b2GYmcQi0XZunB0ioKhb50GPbGaT
fTayspCS/KvsAuJG/guMNBhGZvujf0kRekUjAcHMWkrFX/B6d4hyNFd0S8hK/x6J
upAqVebSGiYQshduC9B9TyWB+l6IHq9iFQgq01FZ4xnyKNSksm11kl7nVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfDA78DLJ3NXLmIQusVP3jhPU1DMB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWjB38bZ
2KXGW/kzkYwKE+Ny7EPUAxScEpW/fLN9IdogWnIHMprVPZGgdUJNT2YIZUReb8B3
nG/MRqsOZLB+sw6Lr/UoyjQu3LsnGxUm/VcQ5gUblPZU6go3cprSjCmwpKVj2tLQ
r+NOZ3peBoEaNO3eOsYFKaQwMLkm/lIOZGi6Q75XrML7hmUBySLNZf0aQM/nd9Sy
5msXdr/HtsyXDqhcNsCS4/rK95zQ/jgvkU5Tt/DIqzvhYO7t3kQCs5wlPhHtD6T6
nfBC8HA+oZppkf/czS8GRyKlwnCvQrP1woXQ/d/eKrCtledDirbuxIadgrqyDEN9
KelXlgsOm8b3NQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:57:53 2026 by rpki-client