Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: XJsFiNVC6NAlMhKNUaNBE8vETzBbf7vjGTpOobPjXiQ=
Subject key identifier: 92:8C:D2:B0:EE:FE:26:4F:3B:8B:04:52:1D:CD:9A:CE:EE:46:7D:88
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01A17A04120B9C6B136EA17BA8BAFE34723B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 21:00:49 +0000
Manifest this update: Mon 26 Oct 2026 21:00:49 +0000
Manifest next update: Tue 27 Oct 2026 21:00:49 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: kjR/LXkUmDqrnnhw9M0E6gRClSof6xECl2/O5KOIngk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:12:0b:9c:6b:13:6e:a1:7b:a8:ba:fe:34:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Oct 26 21:00:49 2026 GMT
Not After : Oct 27 21:00:49 2026 GMT
Subject: CN=928cd2b0eefe264f3b8b04521dcd9aceee467d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:59:61:da:af:c1:45:46:7c:8b:b2:95:20:
28:90:10:5a:9b:c4:43:39:3b:63:bb:95:6f:b9:63:
83:58:39:fe:b2:0a:db:6c:66:2e:62:7a:4d:95:df:
d7:36:c3:2b:58:f8:58:bf:e8:58:51:0d:65:9b:38:
3b:92:da:aa:a8:c2:ca:1c:45:5c:6c:8d:f7:19:d5:
c7:ae:7c:97:a1:a7:6d:47:e1:ff:c0:63:92:b9:f9:
3a:71:9c:8e:7b:9e:8c:cc:03:bc:f5:c0:4b:0f:db:
f9:ab:0d:4d:f5:de:d7:9d:af:2c:5c:5d:ea:bb:74:
d2:3c:e0:3f:fb:6c:42:9d:19:2c:bf:6f:eb:6b:38:
35:69:cc:dd:1f:22:d7:81:8f:64:8d:df:8a:de:aa:
3b:26:da:32:27:b0:0f:9b:7c:7f:35:b0:d7:e3:06:
25:a6:e5:ec:a4:0e:a8:b6:3e:a0:f9:d7:68:c8:14:
11:b3:1f:77:0a:f4:97:f8:dd:b4:19:4a:3f:ac:ed:
24:3d:3d:f0:6b:51:b4:bf:38:76:cd:8b:6c:4a:44:
3e:1d:eb:aa:26:fb:9a:59:5f:4b:5f:a4:ad:95:c1:
aa:79:5f:b9:8d:6f:b9:22:b2:2a:70:9c:58:94:b2:
1d:6f:ef:53:16:bd:65:dd:e6:27:33:ca:37:55:5d:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8C:D2:B0:EE:FE:26:4F:3B:8B:04:52:1D:CD:9A:CE:EE:46:7D:88
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:aa:d8:c6:2f:e5:e6:49:c6:24:08:14:37:16:00:ba:5d:
1d:17:70:4d:ec:6f:5d:1a:6e:99:5d:6d:ce:48:19:cc:ca:f8:
05:22:9b:a3:eb:8c:5a:c3:a5:8e:38:15:ef:e2:8b:f0:68:1d:
c4:66:f2:2b:9a:71:94:82:5c:67:d8:eb:4b:e4:9a:ed:a5:67:
71:ea:db:c4:94:dd:f6:19:28:4f:ad:52:61:69:e0:58:cd:9d:
d7:7f:ee:a5:1f:06:c5:35:fe:b6:c9:fe:a6:dc:74:40:bc:cb:
f0:00:66:7d:c6:d7:40:40:e1:76:1d:a8:de:f6:7a:a4:88:0e:
6d:97:f0:5a:ce:fa:e6:f1:73:74:13:77:2a:41:73:e0:35:5f:
a2:56:fb:66:07:3d:aa:48:9e:4d:81:af:66:7b:43:ac:b2:e6:
6a:51:a4:1d:7e:41:a2:0f:b4:39:49:41:8d:5c:fb:08:30:d4:
5f:b4:25:61:00:6e:ed:36:a1:dc:68:90:a6:83:1f:e0:ab:0c:
14:bb:2e:29:d1:5d:df:51:5e:b2:cb:f9:d5:bb:c3:6e:17:0e:
23:d9:e4:07:57:a7:cd:cb:73:60:e2:f0:06:9a:ed:e4:94:21:
c5:a8:9c:52:69:fc:e0:5d:a1:6f:50:dd:67:b2:5d:b3:08:d8:
5d:9f:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:44 2026 by rpki-client