Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: 9Hvl/FZyEQCb87JSqY6KkfZuvdMUkrRHiUZDYItNGxg=
Subject key identifier: C2:6E:D7:A2:FF:4A:AE:F9:28:C3:E2:11:E9:1B:02:81:64:B5:20:10
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A08B311FDDB14174A3E696306C27007D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1A59
Signing time: Thu 10 Sep 2026 12:00:47 +0000
Manifest this update: Thu 10 Sep 2026 12:00:47 +0000
Manifest next update: Fri 11 Sep 2026 12:00:47 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: xpzANxGf8nt/Rb2zbob0raDmtkyzCNKruY0tv9AuZfQ=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:1f:dd:b1:41:74:a3:e6:96:30:6c:27:00:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Sep 10 12:00:47 2026 GMT
Not After : Sep 11 12:00:47 2026 GMT
Subject: CN=c26ed7a2ff4aaef928c3e211e91b028164b52010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:73:b9:c4:40:e5:64:f2:4d:24:7d:49:5c:
dd:c3:a1:8f:1f:bf:26:10:1c:3c:3b:6b:db:a5:e0:
e0:59:36:f3:df:16:cc:e2:fb:9f:87:5c:aa:bd:89:
04:a9:cc:44:01:d5:05:de:67:f5:ab:a6:95:cf:8b:
0e:36:fe:f8:ff:5b:dd:60:e2:9b:7e:32:4c:e8:2c:
85:2d:0f:0f:ac:5a:ea:47:7e:4e:e1:35:fd:da:0b:
40:a5:22:d3:e0:5f:bb:eb:7b:21:eb:2c:2a:7d:f1:
ec:dc:8b:d1:8f:be:af:69:57:fd:76:43:05:cb:c7:
8d:b1:b2:a5:a6:50:1b:60:55:88:ec:b1:d3:e1:27:
7b:62:1c:1b:7a:fa:61:b2:3c:86:8d:21:34:d1:4e:
66:73:bc:bc:04:4c:35:84:8a:65:a5:67:18:10:18:
7b:4a:1b:20:41:3e:ba:a4:e6:ac:d9:95:0b:cb:6f:
bb:fb:eb:38:7c:57:83:c4:7a:4a:a2:c5:e3:50:fb:
bd:38:d3:be:94:aa:53:1e:59:f9:86:bd:15:cd:10:
1c:3f:64:18:64:b0:20:3b:5b:ab:96:55:09:34:a6:
41:22:32:a8:50:3a:16:84:92:4b:8b:46:7e:d6:6d:
31:71:21:98:d1:9b:86:a5:67:3e:b6:82:2b:54:d7:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:D7:A2:FF:4A:AE:F9:28:C3:E2:11:E9:1B:02:81:64:B5:20:10
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:93:d3:51:ca:59:8f:2c:e1:39:0f:b8:bd:d3:f5:bf:cc:
e8:ca:2f:d6:ce:6d:ae:9e:e7:fe:e5:4a:f9:ac:f7:1a:f8:32:
95:f7:49:8b:ca:00:e1:15:5b:39:8a:37:c1:22:e2:2a:41:81:
31:b8:28:b2:f4:04:d1:e1:ea:0f:ab:73:f9:3b:bd:fe:f3:b6:
d7:89:b1:60:03:c9:d9:63:4b:c3:37:de:27:c6:10:d1:e9:da:
62:6a:8c:45:5d:ec:64:32:09:e2:9a:87:d1:60:b8:3f:44:54:
ec:bb:4b:f5:e4:98:8e:ce:fa:9d:31:c7:29:5d:51:cd:09:68:
a2:c8:af:38:d1:42:db:69:58:bb:35:eb:13:b9:b4:82:cb:db:
62:7a:d8:96:e2:a3:39:61:26:f0:86:f5:55:ec:98:38:50:e5:
6f:eb:c3:16:e2:c7:6f:56:54:f6:5a:d4:f6:b4:e7:5d:6f:75:
15:90:07:e4:a0:a8:06:a8:87:cf:54:82:c6:35:20:0d:df:ae:
bb:f3:a9:8e:39:8b:9c:b4:5e:95:bc:23:cb:ff:64:72:67:a3:
91:e3:94:44:4e:99:af:ba:d5:7d:6b:30:5e:7b:7c:fc:b8:6d:
60:9a:a7:26:79:01:59:31:fd:b3:24:1a:1c:55:6b:56:89:63:
c1:70:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:02:07 2026 by rpki-client