Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: 3N8mEFGv8QhKNzXZc7mZFucW7V2BC8H6CZTX1fb4ntc=
Subject key identifier: 8D:05:64:B1:BD:B8:4A:FC:5B:5F:1E:C8:5A:A8:7F:DF:AD:BD:CF:DF
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01A08A8D17838D7BD521F04569A434CBD459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 09:01:37 +0000
Manifest this update: Thu 10 Sep 2026 09:01:37 +0000
Manifest next update: Fri 11 Sep 2026 09:01:37 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: DnChLlSHs2XvTlsUht4XftnnXl7Q2DF7ulxRBXTjMEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:17:83:8d:7b:d5:21:f0:45:69:a4:34:cb:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Sep 10 09:01:37 2026 GMT
Not After : Sep 11 09:01:37 2026 GMT
Subject: CN=8d0564b1bdb84afc5b5f1ec85aa87fdfadbdcfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:44:fb:e7:6f:c1:2c:19:18:09:cb:50:3c:
91:54:97:8a:0c:11:a6:ed:63:93:fc:c7:2a:db:3b:
33:91:5d:01:b3:a2:5a:3a:46:af:b4:57:c5:78:a8:
5c:92:8f:d1:21:1d:16:6e:df:28:d5:1d:f3:7e:97:
98:a0:2a:34:be:08:b3:74:96:6b:e9:51:a5:26:d5:
b0:fc:82:89:9b:9e:59:8f:7e:e1:69:6c:c7:9a:1d:
c8:ba:23:1a:91:c9:9d:71:4b:dd:fe:ca:1d:97:22:
17:9f:7b:42:53:6d:08:50:38:09:ba:1f:49:b6:0e:
6a:91:33:77:fa:75:54:25:0f:70:c5:d9:63:24:c4:
f5:dd:6a:94:21:29:61:ff:5a:14:4c:3e:55:5e:31:
b6:4a:5f:ab:07:75:a2:be:5a:c8:7e:d4:ac:87:26:
90:1a:35:27:b9:c4:f0:67:c6:98:f6:9c:35:60:7d:
54:c2:8c:b4:3f:9d:01:cd:e2:0c:f6:f5:85:11:77:
af:bb:9f:38:e4:30:47:a9:d9:05:83:dc:04:6b:25:
af:98:2c:ba:45:11:39:d7:9a:be:98:09:5c:6e:08:
d5:c1:58:4d:b0:5d:80:2a:9a:ef:64:63:61:53:0b:
f7:14:c3:28:f7:04:87:66:c1:55:4d:32:53:b7:2a:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:64:B1:BD:B8:4A:FC:5B:5F:1E:C8:5A:A8:7F:DF:AD:BD:CF:DF
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:94:f5:7c:ae:f3:9d:62:b4:76:7a:69:4e:8b:55:56:5e:
7e:07:6d:b4:3b:d5:3c:d6:9e:eb:5b:3b:87:bb:82:f6:9c:8f:
a0:12:86:e1:2d:93:47:51:27:68:fc:51:be:de:08:52:e4:ac:
f5:db:69:82:6a:af:4d:1f:b0:c1:3a:83:2e:d2:81:9d:d4:87:
f2:92:07:db:c4:15:e7:8b:e8:40:e6:0d:92:ce:70:fa:68:0d:
6e:80:6a:cf:dc:d7:a9:2e:90:a7:73:42:61:5d:3b:4b:65:c6:
56:e6:d5:9a:aa:aa:44:a4:44:0e:d2:c6:72:bf:2c:ba:27:43:
56:aa:84:a8:aa:36:80:7e:d9:d5:ae:9a:96:7e:a1:23:c7:90:
88:ae:66:6b:49:1c:fd:3d:c2:48:af:86:f8:2f:15:4f:2c:36:
52:34:f1:b2:7b:11:d7:e1:78:8b:6a:9a:f5:b7:66:84:22:cd:
d4:06:0b:26:ff:d6:e2:0b:70:32:0f:11:56:84:6b:ce:a8:ac:
6e:44:e7:0f:73:36:f3:62:69:e1:64:c1:10:a8:17:49:c1:93:
07:e9:70:5a:40:6a:e9:ce:1b:41:8c:2b:5f:d1:3e:cc:00:22:
22:4c:ed:cb:8a:a7:e5:2c:db:7b:10:60:ff:f8:57:3f:c0:89:
dc:ce:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:29 2026 by rpki-client