Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: bEe23Bml6wLFXg+gBmstwtLjYavwLvUFjLWNy/+J0Ys=
Subject key identifier: 36:BD:A9:CA:51:B7:30:0E:68:65:12:2A:8E:20:0E:EB:64:80:2E:44
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019F9F95B3EC231F6433B1D0A6375458B7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 19DF
Signing time: Sun 26 Jul 2026 18:00:15 +0000
Manifest this update: Sun 26 Jul 2026 18:00:15 +0000
Manifest next update: Mon 27 Jul 2026 18:00:15 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: dqdDcNjLb2t+MeJ4cBvsSm017RRX9Adz9hOMzhHPeY4=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:b3:ec:23:1f:64:33:b1:d0:a6:37:54:58:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jul 26 18:00:15 2026 GMT
Not After : Jul 27 18:00:15 2026 GMT
Subject: CN=36bda9ca51b7300e6865122a8e200eeb64802e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:6c:47:29:24:e2:29:60:79:df:ab:96:34:
a7:17:34:fd:60:6a:44:d1:ca:7f:95:ec:cc:59:a7:
12:d5:1a:37:65:1a:9e:98:29:eb:e1:01:49:fb:31:
a3:57:ca:4c:a5:70:1b:24:d5:ec:6f:e3:08:38:e2:
07:15:dd:79:33:dd:00:51:75:eb:df:9a:7d:04:d5:
fc:c3:9d:3c:1c:6b:5f:1f:6b:27:b0:4e:26:25:97:
df:82:06:b2:60:51:b0:59:9d:17:75:76:42:cd:44:
0c:5d:e5:53:e9:f2:33:bb:91:3f:8b:18:8f:ca:65:
5d:04:c8:9b:3e:b1:1a:f5:42:c1:7c:46:90:f1:92:
5f:f5:b7:01:9f:5d:37:bf:41:57:f9:4a:47:42:9d:
46:66:73:f1:7b:b6:b0:36:5f:3b:90:a1:aa:81:95:
f7:2e:6b:87:d5:c8:7f:99:8a:04:b3:07:1d:ed:50:
69:35:c0:8f:6d:87:f4:8d:66:7a:cb:bc:65:70:a9:
81:e3:6a:d6:c4:f4:19:7b:01:1d:ca:1e:18:fb:28:
4d:86:68:8a:5f:a5:51:3d:40:a6:55:ad:cb:5a:1c:
61:8a:c1:a4:71:9e:72:de:e5:6c:6f:55:8a:6e:a0:
b7:d1:24:40:47:46:5d:23:eb:31:21:cd:35:75:29:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:A9:CA:51:B7:30:0E:68:65:12:2A:8E:20:0E:EB:64:80:2E:44
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ae:d4:51:95:78:41:e2:5a:67:de:90:7a:5b:30:a0:37:44:
04:71:18:58:58:e9:45:a3:21:4a:ae:c6:66:48:bd:cf:81:02:
dd:a2:2e:6c:26:22:ed:b3:c1:67:99:43:ef:d9:32:0a:b7:79:
42:2b:b6:5e:e7:31:49:ae:2b:77:bb:14:6d:58:d2:9c:22:e5:
4c:1c:9f:e4:40:7f:e0:ad:82:fd:a5:65:10:8b:0a:f7:64:a8:
54:77:8f:df:e3:2f:dc:57:ed:97:2f:0c:2a:ae:d4:93:62:6a:
a0:2a:dd:15:c4:2c:56:52:ef:6b:bb:8d:35:0b:0d:db:04:5a:
3e:37:fa:a8:ec:71:53:a5:fa:0a:1d:3b:48:e0:f9:9c:bb:3b:
59:a1:12:15:91:f0:10:a1:6a:a6:0a:d1:ae:c5:16:91:11:5c:
ba:d6:60:ae:dc:c4:27:23:80:ca:a8:0b:d8:ab:d2:79:17:c0:
6d:f4:ca:3a:60:d6:18:e0:5f:36:2a:7b:54:fc:0c:ba:4e:98:
c8:30:db:1d:5b:6e:db:83:a1:22:da:9c:0b:fa:b5:7c:68:e9:
a9:ce:72:79:a6:66:ae:6c:73:9e:fb:bb:f8:38:69:24:30:5d:
bf:21:25:cc:fa:70:24:ee:de:6f:86:d7:9f:e1:1c:07:db:a8:
7a:ec:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:15 2026 by rpki-client