Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: /7lNskpMwXnTnLyEwXbwpnuY8nrNQnSycMC3JoDY1HM=
Subject key identifier: AD:35:D0:72:7D:5C:1E:53:C6:81:7F:1D:BA:C0:A2:FE:34:C8:F2:6A
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 01A177A83C6323CCB0E7AE0B879F959BE598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 0A10
Signing time: Mon 26 Oct 2026 10:01:16 +0000
Manifest this update: Mon 26 Oct 2026 10:01:16 +0000
Manifest next update: Tue 27 Oct 2026 10:01:16 +0000
Files and hashes: 1: 2n1oysBsLoiaYcanB-5u9wHCku4.roa (hash: N9Y8sdrm6t7ka/+qYdutIPmZstG6eMi6hXnCFfXaBBI=)
2: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: YGo/OBJ2iL1nL4ftvBRwcS2t/WOV1GaKOCZCKq3qfhA=)
3: o7Mh-e1vqi6VEezsIe8usF1WqvY.roa (hash: PFuzeZNfVF7MAR1EKpSC2koEaTw4wzxZUsj6BIdCeKE=)
4: oa7xclPWOANlu86ailSyWI_SQhI.roa (hash: o8aDlt3R/Sz/MaNPGXv2qlYMmPH0QqPJXMaia7wcAjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a8:3c:63:23:cc:b0:e7:ae:0b:87:9f:95:9b:e5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Oct 26 10:01:16 2026 GMT
Not After : Oct 27 10:01:16 2026 GMT
Subject: CN=ad35d0727d5c1e53c6817f1dbac0a2fe34c8f26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:70:cc:cc:36:0c:9b:d7:19:19:0f:ba:8f:
cf:9e:73:76:5b:45:69:39:f1:0b:e5:fb:d9:25:79:
e7:8d:b3:f6:e6:dc:ee:27:4c:4c:da:56:75:8e:0b:
1c:49:10:b9:91:07:5e:0c:f1:12:ab:4e:38:21:9e:
16:17:c0:22:cd:eb:59:d3:a9:77:90:3b:01:b3:bd:
46:52:3c:a9:33:90:fa:ad:ef:d3:d7:7a:d3:92:72:
6b:a1:3f:44:b2:36:c0:55:df:0f:3d:30:4f:33:39:
2e:84:63:e6:21:86:48:b4:c3:50:23:4c:40:a4:e3:
c9:85:de:47:ae:4d:1e:45:3b:9a:55:0a:06:e7:48:
d5:20:8f:e5:81:e4:56:f5:ad:8b:17:39:da:06:e6:
ec:0f:27:9d:f2:65:f8:43:05:01:fd:eb:23:17:b7:
c2:72:f3:71:b2:7c:5e:66:51:71:47:a3:9e:bb:68:
de:d3:c1:d5:b4:f7:8e:8e:06:8e:58:6f:84:ad:65:
c2:80:6b:d7:12:ab:fc:1d:08:ee:38:3a:64:a2:84:
20:f6:51:4f:bb:02:be:57:be:0a:32:9f:4f:8d:82:
e5:bd:ec:bd:47:7a:21:c7:20:f0:7a:e3:c2:0a:ce:
05:93:84:62:8f:e3:e7:db:65:f2:60:49:9d:bf:f6:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:D0:72:7D:5C:1E:53:C6:81:7F:1D:BA:C0:A2:FE:34:C8:F2:6A
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:63:fb:92:f4:0c:e2:f6:ed:6c:61:e3:eb:57:fd:4d:f5:
0a:bc:a3:4f:f2:9b:76:4f:32:b1:75:0a:4e:fc:c9:f3:00:fd:
82:e2:d2:d6:bc:34:e4:92:3f:15:dc:79:44:e5:5b:d6:b2:31:
ff:47:d2:fa:15:0a:06:67:0e:af:a4:c0:49:ac:74:7e:81:5b:
9d:c2:ed:25:a1:dc:14:c3:5a:3f:63:a1:66:ca:84:c0:27:bf:
18:ed:5a:56:8e:ef:56:88:a8:dc:1f:32:83:fc:7d:67:9c:5a:
a7:5c:46:44:e4:60:88:8e:e9:cd:6d:f6:5c:cd:94:88:86:ea:
c4:15:e5:8e:ca:50:3d:16:43:1f:24:90:f7:58:33:0f:27:bf:
5c:a3:b4:5f:b3:07:05:6e:a1:66:2a:c1:c6:e3:84:3a:06:f6:
29:a1:7a:b0:98:cf:c0:f6:b7:a0:b5:bf:77:ac:88:99:77:fd:
ac:ba:8e:68:98:9d:b2:ea:73:83:ad:fc:7b:63:bd:0e:bd:17:
28:5d:52:6c:02:0d:c2:03:6e:85:87:4c:5a:ef:2e:6a:59:8d:
40:8b:2b:8d:05:cd:0c:fd:a3:59:93:5d:4f:03:6c:c5:2e:74:
d4:ab:0d:e9:25:37:1d:35:31:79:ef:6a:83:8a:8d:ce:c3:03:
09:77:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:05:32 2026 by rpki-client