
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier: EvUoxWVhnkoJIyFP2VlJBVwCS4neFVH22No9Zz3YaGA=
Subject key identifier: 26:20:BB:03:BF:32:0B:A5:AB:9C:CA:93:0F:50:1A:CF:BA:47:54:52
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 01A17F2A8FB30D774335A6A1EB77D6900707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 21:00:57 +0000
Manifest this update: Tue 27 Oct 2026 21:00:57 +0000
Manifest next update: Wed 28 Oct 2026 21:00:57 +0000
Files and hashes: 1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: JXRbgGsJgByFpMGG8X6D3Og+wvjWlWpeoS8+WLGYum0=)
5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:8f:b3:0d:77:43:35:a6:a1:eb:77:d6:90:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Oct 27 21:00:57 2026 GMT
Not After : Oct 28 21:00:57 2026 GMT
Subject: CN=2620bb03bf320ba5ab9cca930f501acfba475452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:f6:59:9b:8e:7d:33:91:90:05:37:06:fb:
78:61:03:7d:d3:c8:fe:9d:04:71:5e:1a:f2:28:74:
d3:94:fd:87:da:71:9c:ce:0c:4d:8a:b0:5c:a8:05:
92:22:d9:c3:63:dc:0c:ba:e4:87:be:bd:76:93:e5:
78:f7:1e:a4:1a:31:58:83:ec:42:70:5e:7f:47:94:
de:c4:be:fa:82:8d:5c:7f:4d:1f:15:50:ba:61:af:
6a:fe:23:f5:5e:f2:43:9f:bb:8d:c5:2d:70:a7:e2:
57:28:ae:7d:f3:ac:e5:cf:ef:32:4b:ea:d4:97:3b:
c4:64:b3:99:42:93:8c:29:64:2f:d8:4a:7d:aa:34:
ec:e7:be:58:70:a7:96:9e:b9:a2:3f:4b:60:bf:a7:
6c:b3:f8:9f:75:75:53:06:48:68:35:cd:c0:31:e4:
1e:dc:26:f4:00:06:8a:cd:c2:47:6f:62:27:d4:57:
35:d2:f3:cf:08:9e:22:db:bd:e3:75:ad:b0:6e:80:
ed:13:96:5f:f6:af:46:e6:96:d7:dc:1f:9a:a4:8d:
e6:25:ca:a6:9c:06:f3:e5:51:b0:aa:3a:35:61:3a:
19:2c:6b:89:ed:ee:64:ef:f1:5d:00:b1:92:a7:d8:
09:c4:f4:00:8a:38:39:7f:b0:ba:77:45:c7:be:20:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:BB:03:BF:32:0B:A5:AB:9C:CA:93:0F:50:1A:CF:BA:47:54:52
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:17:10:b5:ec:7e:40:dc:30:c8:ce:46:91:50:29:06:88:a4:
9f:7d:42:a9:2e:15:42:5d:7e:2a:de:90:03:3a:29:a4:56:cc:
56:b2:a1:75:b2:80:e6:c5:99:2d:b9:11:b6:cf:ce:9b:8c:21:
c7:4a:ef:cf:27:55:70:63:9a:8b:2b:11:9f:cb:e0:66:a1:e6:
73:b6:1b:81:ab:b6:80:1a:1b:da:9c:9d:01:d9:05:88:c7:02:
5b:78:85:64:3d:2c:bc:8a:a3:2a:02:16:2a:7a:ba:fe:bc:4e:
1c:1f:2d:a9:ea:96:e5:1e:69:4e:4f:dd:0b:ef:a9:06:19:5c:
ec:a1:84:4c:3a:c6:89:7b:3d:aa:f5:60:66:c8:03:3a:fe:78:
39:19:23:c0:39:9f:07:55:d1:7b:51:c0:7e:79:8a:52:63:e1:
f5:ea:04:89:4f:93:9d:8a:b2:d5:18:f0:4f:e0:c9:7e:93:f6:
aa:ea:c3:39:ac:00:f5:32:96:eb:9d:2a:73:9f:9b:1e:9c:3e:
26:fd:99:85:00:ac:79:10:51:3d:66:3a:10:58:91:9d:a9:fb:
d1:ce:59:43:94:95:fb:bc:8f:37:38:14:a3:4e:eb:d6:32:78:
48:d2:cd:24:2e:2d:00:10:9e:bc:b2:56:a3:e0:8e:7a:93:34:
b6:8f:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:10:10 2026 by rpki-client