Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier: t6qVLXwXLPo7HaTCiy78ERH8IhKNLhJMhxyqSzx8Tf8=
Subject key identifier: D9:88:04:AE:55:DB:D7:10:8E:AF:9A:A5:0F:F1:7D:8B:78:19:DF:CB
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019DCFAC45CDF412D1581B3C5D714378C200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 16:01:06 +0000
Manifest this update: Mon 27 Apr 2026 16:01:06 +0000
Manifest next update: Tue 28 Apr 2026 16:01:06 +0000
Files and hashes: 1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
3: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=)
4: a4snBLGv5x9BUgTX8OqagmQxYq4.roa (hash: v28FpMO1x0oIkmNzipvZuAj2xt/sVOZTdJkWdv7M7/Y=)
5: iTdLQoa1ZZc0xRlTVb7cKdKcrqo.roa (hash: fRXMRZJi4kfSOE38kfwPxuehxymZ8uVjjmiNFMuJgTE=)
6: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: FLdsr2xCT5TcmvZUDUoH6QESVHIzzY0GUqAQkzTXCsQ=)
7: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:45:cd:f4:12:d1:58:1b:3c:5d:71:43:78:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Apr 27 16:01:06 2026 GMT
Not After : Apr 28 16:01:06 2026 GMT
Subject: CN=d98804ae55dbd7108eaf9aa50ff17d8b7819dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:c4:97:1b:75:6a:09:2e:23:34:4a:b5:71:
b8:7e:e8:c8:f5:11:da:16:17:72:bb:ab:ec:09:28:
b3:b0:f6:7b:c8:7d:75:33:19:6f:1f:85:25:3f:6e:
03:ed:1f:58:54:fe:ea:f1:31:7d:9f:ba:5b:cc:d4:
b9:de:e4:1c:e9:eb:de:af:6b:1b:81:98:10:b2:dc:
f3:3b:f0:08:d3:19:88:1c:8c:11:9f:ee:90:ad:c3:
e7:c1:39:66:97:4f:62:7d:f4:8e:c4:26:0c:a9:15:
2f:47:9f:b8:d6:30:12:e0:58:ba:8d:ff:8d:93:77:
e9:d3:a8:7c:76:0d:18:09:90:ca:85:51:ab:1c:43:
16:59:8d:d4:13:58:90:9d:cc:d6:92:d6:8c:2a:f8:
a9:a8:7d:d1:42:e8:8a:15:6d:16:a2:12:33:4d:00:
e1:9a:17:71:3b:35:65:ba:67:0e:fb:61:fd:c3:57:
ce:90:cd:a0:fc:a7:6b:45:9f:47:e8:e9:1e:3b:8f:
de:29:c7:1c:54:48:77:67:a4:de:b0:dc:80:b8:ac:
63:ca:1a:9c:bd:f0:27:7e:5d:61:8e:25:fd:9b:60:
6f:d0:66:19:1b:e8:f1:fe:8f:00:79:de:81:24:fa:
8f:fb:1d:b8:0d:41:77:6d:78:8e:ee:3f:84:0c:69:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:04:AE:55:DB:D7:10:8E:AF:9A:A5:0F:F1:7D:8B:78:19:DF:CB
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:03:77:44:89:26:42:6d:16:e4:28:cd:75:b8:db:3d:6a:
39:6a:39:a2:2c:72:4b:31:d6:dd:76:4b:cf:77:ce:87:79:e6:
5b:e6:4f:80:6e:c5:8a:6b:7c:38:06:e1:3c:ee:fc:ab:8b:e0:
64:8b:88:94:7c:56:95:29:9d:31:9b:58:88:a7:62:8d:79:31:
c8:5a:06:62:76:77:4a:ec:2c:df:94:b4:6f:09:a3:6d:d8:12:
aa:cb:71:0e:e6:23:a4:79:8e:5b:b9:b9:c5:5c:3a:ca:ae:89:
a1:ef:2a:a0:a7:17:39:f4:24:16:7a:38:a7:5d:c4:fe:ba:cf:
82:15:dc:a5:db:0c:ab:23:47:4a:24:7f:e8:e4:cd:d1:da:8b:
52:a2:9c:3e:e2:dc:ac:3b:30:95:68:bc:ea:4a:47:e6:ab:c8:
04:da:56:af:79:fc:b8:04:04:b2:08:e8:e9:ac:74:fb:a6:9f:
bc:da:6b:0c:15:18:22:d3:1a:35:0e:50:49:be:c3:00:7d:97:
49:a8:ad:8a:14:27:00:7b:bd:7d:2e:34:89:d9:9b:5d:47:c2:
9b:e3:78:f4:c2:ea:ea:db:4a:6d:43:60:b2:6d:aa:85:d9:7f:
0d:f2:86:60:a9:23:a6:8f:1a:eb:1e:3e:89:cd:87:fa:97:f0:
a3:c7:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:06 2026 by rpki-client