Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: Rczxr/sxGmVYBFroVSRZ9bioH0fChGEu/j9ZwoWEBOA=
Subject key identifier: B3:41:2D:9F:47:A3:EA:9E:CB:91:4D:3B:4B:4F:00:D3:91:41:84:97
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 01A1103B5D2EB0EBC42E26853567909EBAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1A92
Signing time: Tue 06 Oct 2026 08:01:28 +0000
Manifest this update: Tue 06 Oct 2026 08:01:28 +0000
Manifest next update: Wed 07 Oct 2026 08:01:28 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: MttmdlIUNwEmSGo21AH21wDjKHfGJb2NBb4Cif3lOBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:5d:2e:b0:eb:c4:2e:26:85:35:67:90:9e:ba:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Oct 6 08:01:28 2026 GMT
Not After : Oct 7 08:01:28 2026 GMT
Subject: CN=b3412d9f47a3ea9ecb914d3b4b4f00d391418497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:42:5b:66:2a:87:9a:a3:ab:6f:fc:cf:1d:
c8:6d:f8:3b:73:d1:43:06:3a:5a:d8:24:7f:16:8c:
14:92:1b:a5:65:8e:c3:b6:fc:e0:82:12:e9:bd:f7:
ab:2c:c9:da:33:79:42:7c:3c:bb:92:3f:55:8a:94:
fd:4b:d2:4d:06:4a:c7:8b:e9:23:da:dc:20:5f:ea:
d5:6d:c5:51:2d:0e:65:c3:2c:0d:6c:19:3c:0a:9d:
b9:44:d6:c2:e6:ce:91:7f:0b:ad:77:dc:d6:66:2e:
f0:d1:33:42:2b:4d:0b:e6:b7:60:e5:85:be:ab:4d:
a4:55:8f:a4:81:7b:e8:35:a9:63:5b:cb:31:03:0b:
39:e1:93:39:f9:d6:0e:4b:fc:6c:1d:f4:3d:89:73:
00:f2:aa:75:e8:cc:6d:c9:32:1e:eb:fe:98:eb:92:
2d:bd:e8:76:e5:01:ea:51:77:61:a6:a3:21:c3:c3:
b8:c5:62:68:2c:9c:02:8f:5c:52:a1:d9:76:8b:7a:
a4:d4:41:c1:f6:90:36:c3:43:c2:bc:b0:6a:e8:e5:
f7:29:94:23:89:1d:04:dd:fd:b0:9d:eb:a0:1f:f3:
00:ee:13:07:cb:1e:ce:e1:fe:cd:69:f2:78:04:5c:
08:49:a7:53:e8:b1:52:a7:65:4c:57:36:1b:fa:95:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:2D:9F:47:A3:EA:9E:CB:91:4D:3B:4B:4F:00:D3:91:41:84:97
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:74:1a:cc:76:18:53:6e:ed:70:5f:ba:42:83:3b:80:04:
e8:0a:4c:68:09:7f:8a:5b:f6:a0:33:ec:e9:c0:67:c2:34:1e:
f2:d2:91:80:d1:50:ca:fa:e9:0e:af:39:6a:64:b4:dc:56:db:
eb:b1:60:a7:fc:f9:a4:b3:ae:79:7f:cf:5b:66:7c:99:5a:49:
5c:64:77:05:a4:e9:97:44:36:eb:a0:ab:9d:9d:58:56:2b:15:
c3:ce:9e:2f:17:75:93:b4:84:45:3d:20:69:c2:6f:8a:6d:59:
62:b2:07:24:40:ec:04:b1:36:20:9f:91:36:9a:81:46:e9:a4:
e5:06:c0:8d:76:e8:68:ec:bf:8c:7e:de:76:03:24:0e:c9:41:
a1:94:4b:cf:c8:25:03:c2:94:fd:d6:c5:39:d6:28:18:c8:7d:
60:c1:e8:c7:18:39:3b:6a:f5:79:e3:9e:75:44:d9:ed:83:41:
76:8b:c0:1a:19:ca:14:72:fd:81:15:2a:5e:9c:d2:20:a6:20:
05:47:81:7f:98:48:57:18:76:4e:38:e4:6f:24:0b:0f:f6:af:
98:02:64:1d:de:5f:6b:b4:21:ce:8d:e3:86:07:03:20:6c:6c:
e3:1e:69:a2:48:09:52:db:03:fc:0c:04:c9:f7:e6:db:34:af:
10:88:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:52:26 2026 by rpki-client