Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: GnvOjXtP/kUxJNbIqTEKuQgbxiKc2WM8UUE06uWNXys=
Subject key identifier: 36:8C:C3:84:CD:32:EC:AA:DC:4A:18:89:56:4F:88:23:75:F3:44:5A
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019CE5C87101DD0BDDA05DF59321AE3EAD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 06:00:44 +0000
Manifest this update: Fri 13 Mar 2026 06:00:44 +0000
Manifest next update: Sat 14 Mar 2026 06:00:44 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: 7jIjdGjHq5ulZPwb8YmeRuXpMZH5AM+snkJSpUJ1NEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:71:01:dd:0b:dd:a0:5d:f5:93:21:ae:3e:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Mar 13 06:00:44 2026 GMT
Not After : Mar 14 06:00:44 2026 GMT
Subject: CN=368cc384cd32ecaadc4a1889564f882375f3445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:61:44:0e:fe:57:39:2c:b5:48:25:a4:c1:
89:c1:ed:e1:27:64:d3:17:dc:63:a0:c7:5c:02:71:
6d:76:f9:12:9b:1a:c1:91:81:1e:1c:19:7c:31:eb:
81:3b:6f:c4:e2:c5:a7:c3:03:f6:40:bc:a3:0a:72:
2e:a9:a2:bb:4d:28:69:0e:17:a7:a2:ee:22:96:ac:
70:ed:d4:90:1a:5d:12:f7:3b:e9:7f:5a:12:52:79:
21:ef:a4:fe:52:39:08:de:62:ce:ae:14:34:27:a8:
6b:69:81:42:df:9a:93:35:49:4b:e3:39:6a:12:63:
8f:e2:ab:ee:5b:70:cd:cb:47:74:26:91:7d:be:e5:
d0:89:7d:aa:ba:42:c7:5a:67:2c:f5:a1:4a:e1:8a:
3c:57:ad:cf:ed:98:8c:9f:de:68:0c:96:c4:c9:c0:
ce:34:f9:2b:b4:f2:17:e7:fb:4e:d0:77:bc:c5:6d:
b1:3f:cc:72:33:2b:bb:32:ce:4c:eb:89:df:e0:fa:
c4:84:51:3f:c6:cd:c2:88:e4:88:13:65:31:3f:d2:
4b:ea:7a:fe:81:26:65:95:bd:47:41:03:b5:df:8c:
fa:72:f0:42:72:3e:7a:ce:69:c9:fe:75:74:25:ae:
49:d7:bb:95:32:b1:eb:70:45:97:af:c8:c6:5d:40:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:C3:84:CD:32:EC:AA:DC:4A:18:89:56:4F:88:23:75:F3:44:5A
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:94:43:22:4c:87:00:00:20:6f:d5:e6:5b:cc:3c:f7:c5:74:
ca:52:94:9d:b3:2b:89:b3:69:4b:de:6a:7b:88:e9:ca:16:1b:
8a:78:f9:3e:25:a1:67:4a:f0:52:cc:99:14:28:3e:a0:ce:d9:
07:c7:c3:00:c4:67:53:4f:0f:ec:48:47:ac:66:4c:c2:55:41:
3a:e1:1c:31:ad:bb:8f:07:17:fa:1c:90:aa:c1:31:45:df:a7:
69:04:0a:69:22:d2:2f:07:cf:40:73:e0:03:7f:75:b1:83:83:
48:00:da:ad:21:e1:26:48:e5:c1:aa:67:e3:3a:9b:62:32:50:
4b:a4:c8:d2:f0:56:df:51:b9:65:fd:04:bf:02:1f:8a:83:05:
73:c4:fc:7c:ec:19:a9:be:0c:60:24:93:e0:02:c7:9b:8f:bd:
09:19:fa:58:41:66:ab:ab:b9:cf:25:35:ee:af:90:f6:99:49:
3f:10:19:ca:8c:8e:b8:89:62:51:5c:b4:01:fe:8d:08:ef:b4:
64:ef:87:d7:5b:91:d7:a8:69:2e:5d:ad:da:e4:83:61:0f:48:
aa:7f:64:52:10:61:78:10:37:4a:00:d9:b7:e7:b8:28:2c:95:
aa:a2:e7:c9:54:e5:0d:d4:ed:8a:5f:60:a3:d5:26:2a:11:95:
2d:26:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:02 2026 by rpki-client