Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: EKQEbo7LZh+26HN1hfWZPOUv8I1tLMq2IXQxUB3DXak=
Subject key identifier: B7:8A:67:26:6C:33:99:CF:42:D7:8C:10:BF:07:7C:69:3A:5E:C7:08
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A18450F8C01ADE5899B603A227869CEC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1ADA
Signing time: Wed 28 Oct 2026 21:01:01 +0000
Manifest this update: Wed 28 Oct 2026 21:01:01 +0000
Manifest next update: Thu 29 Oct 2026 21:01:01 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: v9kQjFF6LlAxl09RSz+JpOV70ZJIgpwR8sAfC7v1I0Y=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:f8:c0:1a:de:58:99:b6:03:a2:27:86:9c:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Oct 28 21:01:01 2026 GMT
Not After : Oct 29 21:01:01 2026 GMT
Subject: CN=b78a67266c3399cf42d78c10bf077c693a5ec708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:5c:54:8e:7b:fb:bf:8d:ba:bf:f3:b8:67:
12:d8:23:b6:5c:dc:1d:28:3a:a3:ed:89:6e:60:c8:
39:e3:64:11:bc:92:8e:53:59:aa:64:a9:f1:19:af:
87:71:28:de:43:90:92:62:73:20:ee:9c:49:b6:9e:
4e:b0:14:d6:b9:bc:58:1c:3c:53:0c:f8:ea:13:a2:
80:60:dc:21:c1:c5:be:ae:8e:39:da:aa:4e:75:b7:
5c:cf:6e:1d:a0:37:df:89:9a:60:97:02:22:92:5d:
35:a1:fc:3c:31:dd:c3:b3:b5:33:9f:60:67:e0:5e:
78:52:55:e4:e1:7d:cb:68:b7:5f:2a:ff:d4:69:ff:
df:e9:2d:b4:27:9a:bb:e2:da:02:41:f1:71:81:01:
69:8e:f2:28:91:f3:ef:9a:b1:b6:61:07:24:bd:4d:
03:41:2e:c6:d6:ab:25:1b:53:75:98:b3:e9:87:f5:
b5:c5:2c:c9:9f:4b:20:12:2f:ab:e4:4c:49:97:8b:
c9:13:dd:27:f8:ea:b6:c9:bd:93:d1:67:1e:b5:77:
12:15:70:ed:e5:e8:2d:f3:f7:d5:f9:32:e8:d5:55:
fb:96:65:2c:ad:1a:28:f8:4e:37:f7:77:86:d2:89:
fe:f0:87:ca:48:58:de:88:fa:a2:ab:a8:d3:c9:84:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:67:26:6C:33:99:CF:42:D7:8C:10:BF:07:7C:69:3A:5E:C7:08
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:24:23:48:c4:40:32:82:cb:3b:9e:54:cd:d9:ed:65:17:
42:1b:a9:d0:b5:fe:5a:9a:2f:46:38:67:dc:6e:f8:52:f4:05:
18:ea:1a:02:3d:e0:4d:55:6c:df:32:41:45:f1:c5:35:4d:38:
3c:77:a4:94:c1:ee:83:65:a5:65:51:90:38:a8:3a:de:61:f3:
8a:cb:eb:63:c9:bb:2f:a8:cc:b5:05:32:0e:63:4d:fa:01:10:
99:a8:4b:32:6f:98:ed:fa:69:dd:bb:6e:8f:31:0b:b4:76:5b:
75:02:e3:c0:39:37:cf:24:c1:7c:fd:03:1c:10:fa:6f:06:02:
38:90:be:e5:68:48:1c:8f:a3:17:bf:0c:1d:97:a5:58:e5:31:
df:46:45:46:f5:e4:f2:b4:44:c8:e0:bb:8a:db:e3:aa:bb:e0:
6f:35:fb:97:56:30:a3:3b:a9:f9:a1:78:be:f9:45:49:74:56:
dc:ba:25:3e:a1:17:ba:4f:31:54:c9:64:75:2a:71:92:cb:d7:
b4:11:79:c9:48:2c:1c:b8:bf:8d:0e:02:72:25:10:02:ad:8e:
87:86:2a:e4:da:4c:95:84:d4:0d:f8:03:60:17:b5:8d:ae:8e:
eb:29:c6:c3:0b:9f:a6:0c:9f:62:b3:ec:44:93:40:79:e7:5e:
ec:73:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:53:05 2026 by rpki-client