Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: q3uonTHmaPxlRx22pLbtOu7z6bm/jd9PF8pglI24/pY=
Subject key identifier: 82:25:6D:F0:AD:9B:F5:5F:A8:4A:7D:28:44:2C:1A:60:40:65:E4:C8
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 01A17C5FAA2BDE310F27C3E063F85DF60D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0FA7
Signing time: Tue 27 Oct 2026 08:00:06 +0000
Manifest this update: Tue 27 Oct 2026 08:00:06 +0000
Manifest next update: Wed 28 Oct 2026 08:00:06 +0000
Files and hashes: 1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: dBpSO/Hi5huReciXPG6POgMVbiGGStnTI364EfgKfKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:aa:2b:de:31:0f:27:c3:e0:63:f8:5d:f6:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Oct 27 08:00:06 2026 GMT
Not After : Oct 28 08:00:06 2026 GMT
Subject: CN=82256df0ad9bf55fa84a7d28442c1a604065e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:4d:89:81:36:60:cd:bb:b5:df:ac:b5:a9:
62:fe:56:e7:8f:04:c9:6d:84:65:67:ce:7c:3e:b2:
fc:38:36:07:4b:f2:46:b8:b4:e6:17:c0:3d:ca:22:
a7:54:4e:8f:0c:1c:ab:99:b5:5b:23:8e:dd:c2:2a:
7f:d2:93:23:ab:63:99:63:0e:ab:b1:c0:e1:73:08:
9b:35:2a:bc:cd:a9:bc:dd:7d:8a:04:96:bc:97:8e:
3b:47:8b:30:48:c2:09:7c:37:f3:ef:9e:19:8e:5e:
35:1a:66:b1:94:79:e1:cc:b4:6f:a3:f0:cf:7d:f6:
94:fd:ee:c6:14:39:8e:4b:1f:47:4e:93:37:c4:18:
bf:46:9c:e4:a7:a4:0c:18:a6:9b:31:26:02:85:27:
ea:c2:fe:52:c8:f3:da:db:10:ea:2d:0e:01:85:66:
06:81:42:79:d3:22:15:34:78:61:69:42:a0:ee:77:
b7:5f:c7:fc:db:dd:ca:1e:48:3b:b8:88:08:e8:18:
69:68:41:e1:f9:b6:63:cd:d8:1b:75:91:85:78:f6:
ad:bd:d7:dc:e1:fa:b4:8f:e2:2e:f1:27:bc:c3:1d:
5b:d5:eb:8c:14:79:a1:ee:df:00:26:0b:ef:d4:c3:
35:f2:a7:bd:c3:bc:5b:b4:b0:23:1b:50:62:00:95:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:6D:F0:AD:9B:F5:5F:A8:4A:7D:28:44:2C:1A:60:40:65:E4:C8
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:86:8f:78:09:e6:dd:15:9e:86:24:2c:7f:c5:79:df:8d:54:
30:ee:73:4c:6d:73:a4:4c:6a:bd:a2:d1:1d:96:ce:26:ba:2f:
00:60:70:21:44:76:b3:02:62:f9:bd:0c:40:c0:df:04:fe:30:
54:7e:61:80:8e:a4:11:a1:e4:7f:60:8e:95:6b:ca:c4:e2:2f:
40:7e:0f:ff:f7:4e:c9:a7:62:6b:fc:9e:fc:c4:3a:07:37:b9:
80:7a:3e:8f:fc:1d:e6:76:48:3c:0b:95:1d:ad:0d:00:5a:8b:
16:83:6c:22:47:29:f5:1a:c6:31:ae:a9:32:80:f4:0c:4f:21:
22:40:63:3b:3d:de:f5:52:f3:eb:c7:b6:e7:d7:a4:49:39:8b:
f0:04:31:40:9f:de:b8:dd:b3:9b:4a:01:9c:e8:69:e4:fe:80:
41:72:0e:fd:68:75:01:7c:f6:7e:b6:d7:e7:c5:03:65:b5:42:
3d:66:fd:64:72:af:4c:b7:c6:89:94:a6:ad:53:5f:15:a7:15:
d9:1c:10:e1:09:d6:5a:61:77:50:a3:72:3d:6c:30:1e:c9:c6:
b4:09:92:a0:08:c3:b8:c5:45:89:58:ff:e0:af:0a:aa:e0:53:
80:ba:06:0f:57:3a:37:d5:84:69:da:f5:d1:69:a8:9b:77:e8:
89:2e:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:14 2026 by rpki-client