Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: EWzr/nyYA2YNQ3DInZgRyeyM4Jvjd/LEXv0FpnpsEy4=
Subject key identifier: EE:C7:1C:CD:94:5A:37:9A:79:30:C8:63:5C:CF:F8:40:5C:00:20:15
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019FA0E0F94C78A4B36C88F0DDF4D7DE12FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 00:02:06 +0000
Manifest this update: Mon 27 Jul 2026 00:02:06 +0000
Manifest next update: Tue 28 Jul 2026 00:02:06 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: +Ivd01xEwbeUDzC1P/RWLkjuBLyr2epn2IkxJvwzvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f9:4c:78:a4:b3:6c:88:f0:dd:f4:d7:de:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jul 27 00:02:06 2026 GMT
Not After : Jul 28 00:02:06 2026 GMT
Subject: CN=eec71ccd945a379a7930c8635ccff8405c002015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:c4:51:73:48:64:fc:f1:cc:b9:d9:37:c6:
a6:70:7d:bf:de:7d:71:46:30:5f:b3:a7:43:42:5f:
0e:f6:09:b0:97:c8:42:76:a1:87:54:f5:8b:0c:f2:
8c:52:fb:65:8d:e9:20:71:50:bb:e5:39:41:54:dd:
03:41:35:2a:5b:d7:32:e9:bf:cf:6f:54:d5:7f:10:
50:56:8d:d1:31:5c:f0:57:49:77:56:2f:eb:4d:5b:
62:aa:05:1b:72:1b:a0:cf:6e:fd:b6:1f:9b:a7:64:
bd:6a:57:f1:84:45:77:c6:21:9b:de:11:fb:a8:8f:
0d:58:56:3e:81:df:64:e9:17:e9:c5:04:12:4a:8a:
41:a4:1d:c3:80:64:d7:89:9a:b0:ba:1c:12:97:e1:
32:7c:b9:01:8c:bb:5e:bc:89:b9:2b:20:43:82:79:
8b:7b:84:b1:28:d2:4a:b8:7f:28:fa:91:8f:16:98:
a9:e7:df:77:95:a3:9a:d6:6e:a4:a3:98:d5:bd:bc:
cc:0d:c9:26:f1:be:e5:6a:f1:a3:6e:c9:6f:e8:5d:
63:76:2d:85:78:2b:87:f5:ec:7f:85:0f:c9:7b:61:
e6:fb:a5:83:b8:52:ca:9a:a3:0b:3f:15:36:f7:10:
23:6b:84:eb:1c:a6:1c:a1:a0:2b:16:7e:30:75:b4:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:1C:CD:94:5A:37:9A:79:30:C8:63:5C:CF:F8:40:5C:00:20:15
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:74:37:40:31:7a:e1:cc:05:f2:61:03:af:2f:6e:2c:34:
23:a6:f0:2c:55:58:57:64:7e:fd:9c:88:a6:91:2b:4a:03:7f:
42:31:84:b5:5c:68:e9:63:48:cc:dc:bb:dd:8c:36:01:c2:6f:
b4:c2:a6:92:69:20:bd:34:9d:b6:d4:be:7b:c3:bb:18:e0:a9:
3e:2e:92:69:34:31:11:ab:23:91:e6:a5:21:4b:a3:aa:30:68:
0c:a8:6c:05:84:92:04:d7:c7:9a:11:9c:09:82:c0:c0:b4:23:
2f:01:66:40:a3:b7:98:63:74:68:e8:af:6c:f2:b5:66:f2:cb:
89:13:1d:f6:c2:31:c3:38:b8:58:7d:7c:e8:d3:84:4b:a5:3a:
13:4e:c6:95:02:0c:82:5d:d1:3f:58:71:b9:72:1d:ce:81:d5:
7e:88:f3:e5:05:8c:de:db:d5:5d:b8:92:c3:43:24:f7:38:8a:
6f:5e:ea:8b:64:c6:fa:78:40:a6:86:02:c5:e2:7b:e6:1a:20:
93:d7:43:5e:3f:dc:ea:92:58:dc:48:f3:a2:3b:96:74:ce:a5:
5b:3b:17:61:7a:44:41:4d:09:b9:ed:f0:32:f3:90:d1:91:4e:
5d:90:de:48:18:f5:b3:68:93:e9:d8:34:22:01:b9:65:5e:ae:
23:f1:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:21:30 2026 by rpki-client