Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: J1SlUwQyHXRIY1VDwFqmynH4xGDKc23PJ5+hJWm5z9w=
Subject key identifier: CE:D9:55:32:D8:D5:48:7B:ED:B7:02:F4:BA:42:27:F4:69:0B:19:3B
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01A1A8CB4F1D84DBACD4272915EF7781C998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1AEC
Signing time: Wed 04 Nov 2026 23:00:58 +0000
Manifest this update: Wed 04 Nov 2026 23:00:58 +0000
Manifest next update: Thu 05 Nov 2026 23:00:58 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: ToWprGrui9ipghykdB4DRpCVvdfG5OmOT/HdeVBvM4A=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:4f:1d:84:db:ac:d4:27:29:15:ef:77:81:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Nov 4 23:00:58 2026 GMT
Not After : Nov 5 23:00:58 2026 GMT
Subject: CN=ced95532d8d5487bedb702f4ba4227f4690b193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:24:43:ba:ad:20:e2:62:b8:d4:d8:ca:e7:
ea:de:bd:04:9a:77:7c:0f:e2:6b:9d:06:db:78:db:
45:6d:cf:ca:ef:5f:77:9b:25:47:7e:e8:b5:e5:f3:
b5:21:bb:40:ee:86:0f:87:2b:04:99:88:0b:04:81:
32:a1:0e:74:ab:09:0e:50:f4:d1:01:8a:dd:cc:e0:
a9:3c:d6:dd:a9:bb:2a:a9:33:fa:63:43:9d:f5:69:
d8:50:af:47:b9:67:29:6f:5e:f4:ef:7e:20:87:0b:
45:7b:12:63:b0:7f:97:31:6c:54:f2:78:c1:d4:26:
ba:3e:c6:32:cb:47:cc:87:d6:2c:c3:8f:69:fc:e1:
b2:a2:39:c0:da:3d:01:6f:14:24:57:9c:5e:60:0f:
a2:b8:ef:97:c4:89:f0:bd:e8:09:b6:22:1f:0d:bb:
50:62:36:67:9a:45:2d:52:cf:01:64:7c:b4:f9:74:
1d:49:8d:de:29:8a:04:26:c5:74:c2:20:a3:51:be:
f3:03:dd:b0:2d:bc:95:af:6a:e0:66:c8:86:20:72:
11:b1:32:e4:91:16:f6:e1:07:9f:6b:00:f3:90:51:
7a:e4:b4:0c:49:2f:2c:2a:ff:a9:b5:d4:38:89:20:
93:fd:25:df:4e:1f:1c:4d:44:be:c7:b8:b8:48:bc:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:55:32:D8:D5:48:7B:ED:B7:02:F4:BA:42:27:F4:69:0B:19:3B
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:9f:26:fc:93:c7:12:b0:38:28:be:0c:13:da:4c:48:4a:
3a:de:9f:4a:09:a0:84:a8:8b:0b:ff:0e:3a:7a:86:3f:94:8c:
f2:11:6f:bd:ad:a5:a8:d0:3a:22:af:1e:ec:30:5a:e9:3e:4c:
d8:f4:20:eb:4e:d0:a4:5c:c1:d4:f3:8d:92:cd:ea:2d:d7:4b:
06:bf:e2:1f:73:60:f4:16:b4:ce:57:f3:48:5c:57:0d:be:ad:
96:6c:e6:10:2d:5b:34:60:6f:63:f8:ea:07:ac:51:0a:2d:51:
88:95:5f:94:1f:96:be:37:84:47:88:43:13:a4:6f:ee:41:c4:
77:3d:8d:0c:5a:1c:75:e6:2e:3b:bc:ef:2c:f9:f5:d8:a7:51:
63:1c:7b:8c:e4:f7:44:02:9a:aa:66:18:ab:61:d1:7f:9f:46:
25:77:1a:d3:c2:da:3b:bf:2f:e1:f4:a0:f2:35:65:2d:88:8a:
25:2e:1d:55:e8:07:fa:e0:26:63:9e:b7:0c:18:94:47:2f:1c:
e7:a2:32:52:11:18:07:ff:16:d8:4d:da:29:58:97:8c:57:2c:
8c:29:5f:80:9e:c3:7d:4e:32:5f:7a:80:01:13:c6:7e:81:e8:
9a:ca:b4:3a:1a:97:03:2d:e5:97:e2:22:e5:ae:63:19:65:1f:
4f:38:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:26:10 2026 by rpki-client