Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: NYdtQBrO5vW77Gpa94KWDsf2BQ7eLLRVtbi5e65eszU=
Subject key identifier: BD:BF:26:A9:6D:99:9C:B3:B9:B6:FF:28:3C:6F:D7:8B:DD:EA:3F:3B
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A17AA8946C13749A5FE867A5B68E1DDCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1AD5
Signing time: Tue 27 Oct 2026 00:00:30 +0000
Manifest this update: Tue 27 Oct 2026 00:00:30 +0000
Manifest next update: Wed 28 Oct 2026 00:00:30 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: rmAvo9OzRjbY8LTJVTffzFlb7gbINr3ySJUfgE1UXtE=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:94:6c:13:74:9a:5f:e8:67:a5:b6:8e:1d:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Oct 27 00:00:30 2026 GMT
Not After : Oct 28 00:00:30 2026 GMT
Subject: CN=bdbf26a96d999cb3b9b6ff283c6fd78bddea3f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:8c:0e:97:4c:a4:63:2b:ac:15:de:be:a6:
02:17:80:c2:ff:40:da:ea:59:6a:43:c7:68:24:ed:
24:28:50:96:20:56:9b:0e:f3:33:6c:1a:f2:26:af:
47:5a:07:1a:ad:fe:4a:57:95:a3:da:d5:18:10:35:
d9:6e:3d:33:a9:62:fc:53:b2:0c:7e:6e:a8:60:c4:
36:a1:02:a4:85:5d:92:5c:3d:c0:e5:39:72:c7:17:
32:17:05:d6:41:6e:68:c7:7d:34:0c:ed:ef:28:7e:
ff:f4:87:7a:d6:15:5d:e4:6d:28:ae:45:26:a5:b1:
42:c2:f7:db:ec:40:60:d3:a7:e1:41:51:73:6e:da:
76:31:97:c1:4b:77:30:fb:77:7e:8c:84:83:c2:80:
41:ae:8a:9e:23:e8:e6:02:b8:19:7f:f0:e7:8d:c6:
59:8d:88:94:2e:7f:f1:68:a7:1e:27:16:0a:5c:d0:
29:5a:bd:a2:f5:4e:17:7b:20:90:c0:5c:ca:29:01:
b6:bd:85:27:0f:eb:35:36:b5:9a:06:a1:3c:0d:1a:
25:4c:4c:75:91:f5:3b:29:88:ee:97:ee:12:c3:f0:
47:58:03:87:48:30:73:58:ae:66:83:cd:89:7d:a8:
f1:d2:67:10:24:a2:e4:a8:93:82:22:86:f3:c8:18:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:26:A9:6D:99:9C:B3:B9:B6:FF:28:3C:6F:D7:8B:DD:EA:3F:3B
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:6a:dd:64:0b:7d:85:93:6b:cc:bd:09:b1:bb:d7:0c:9b:
61:ec:5b:97:23:b9:eb:66:ef:f4:8d:46:6a:35:57:f4:70:e7:
b1:d9:33:bc:a5:ba:cc:13:97:10:13:82:5b:44:ec:44:b0:55:
09:b4:64:2f:3b:62:90:91:69:30:05:96:6f:bf:ee:ea:11:49:
b1:05:c2:8c:f8:5f:46:91:f3:f0:7e:83:b2:29:e2:de:23:8b:
93:01:7b:72:0e:bb:33:af:a2:2d:be:59:7e:fa:66:fd:f1:19:
6a:34:5a:fe:cc:54:57:06:81:13:47:f0:56:cc:f9:36:9c:4b:
18:0f:a1:6b:96:88:32:22:17:c7:ce:03:70:ae:3a:0c:ce:54:
fe:43:82:5d:11:d8:de:0f:3e:1a:7e:e4:c9:ca:5e:9a:ef:e4:
23:32:c8:69:3a:fe:4c:37:9a:c7:c6:4e:3c:21:38:00:64:0a:
21:91:2a:7e:b7:db:92:27:60:b4:e1:a0:8d:6a:c1:7e:6e:ff:
a2:84:05:b7:e1:d0:90:42:2f:2e:8f:01:86:82:f5:28:66:d5:
38:49:d1:b8:0b:92:b4:8d:81:56:31:f8:40:2b:b9:51:cd:29:
34:7d:37:c4:9a:9e:5d:82:62:f2:ee:75:d6:ea:a7:b3:20:2e:
07:67:56:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6qJRsE3SaX+hnpbaOHdzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjYxMDI3MDAwMDMwWhcNMjYxMDI4MDAwMDMwWjAzMTEwLwYDVQQD
EyhiZGJmMjZhOTZkOTk5Y2IzYjliNmZmMjgzYzZmZDc4YmRkZWEzZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsECMDpdMpGMrrBXevqYCF4DC/0Da
6llqQ8doJO0kKFCWIFabDvMzbBryJq9HWgcarf5KV5Wj2tUYEDXZbj0zqWL8U7IM
fm6oYMQ2oQKkhV2SXD3A5TlyxxcyFwXWQW5ox300DO3vKH7/9Id61hVd5G0orkUm
pbFCwvfb7EBg06fhQVFzbtp2MZfBS3cw+3d+jISDwoBBroqeI+jmArgZf/DnjcZZ
jYiULn/xaKceJxYKXNApWr2i9U4XeyCQwFzKKQG2vYUnD+s1NrWaBqE8DRolTEx1
kfU7KYjul+4Sw/BHWAOHSDBzWK5mg82Jfajx0mcQJKLkqJOCIobzyBgH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2/JqltmZyzubb/KDxv14vd6j87MB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibBq3WQL
fYWTa8y9CbG71wybYexblyO562bv9I1GajVX9HDnsdkzvKW6zBOXEBOCW0TsRLBV
CbRkLztikJFpMAWWb7/u6hFJsQXCjPhfRpHz8H6Dsini3iOLkwF7cg67M6+iLb5Z
fvpm/fEZajRa/sxUVwaBE0fwVsz5NpxLGA+ha5aIMiIXx84DcK46DM5U/kOCXRHY
3g8+Gn7kycpemu/kIzLIaTr+TDeax8ZOPCE4AGQKIZEqfrfbkidgtOGgjWrBfm7/
ooQFt+HQkEIvLo8BhoL1KGbVOEnRuAuStI2BVjH4QCu5Uc0pNH03xJqeXYJi8u51
1uqnsyAuB2dWzg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:31:09 2026 by rpki-client