Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: J/Lhk4KpE/HhCAaP6ppQDB5CrgkzMWH9uMJAgeZCCzw=
Subject key identifier: 7E:7D:6E:4F:9E:D8:F0:CB:25:44:45:14:19:B0:82:14:0A:68:90:A3
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019D9AE2D86FFD001B6E6C54519BC5BDDA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 1031
Signing time: Fri 17 Apr 2026 10:00:50 +0000
Manifest this update: Fri 17 Apr 2026 10:00:50 +0000
Manifest next update: Sat 18 Apr 2026 10:00:50 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: d9GLK8FK6ntVCvGLRu5euboszsBz1oYWo4kEfhFwR5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d8:6f:fd:00:1b:6e:6c:54:51:9b:c5:bd:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Apr 17 10:00:50 2026 GMT
Not After : Apr 18 10:00:50 2026 GMT
Subject: CN=7e7d6e4f9ed8f0cb2544451419b082140a6890a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:98:e9:9d:09:bf:ba:5b:17:b6:96:0f:f8:
6e:9c:aa:5e:59:7a:e3:c5:0d:24:96:05:d6:22:27:
24:00:e4:10:6b:00:e3:fb:c8:74:2d:98:13:61:93:
82:15:01:20:73:9d:05:f1:39:f1:21:ea:48:74:80:
55:7a:02:e0:f8:b6:56:30:40:20:21:cb:31:10:63:
a7:77:45:cc:bd:9b:c3:15:93:fa:66:75:5f:bd:11:
00:d6:3b:68:ce:0a:c4:85:36:e9:3c:71:1e:41:08:
41:a0:41:a6:72:d0:35:69:b3:60:06:ba:59:dc:35:
77:08:95:0e:dd:e0:c9:67:4c:b6:c5:69:82:34:e3:
54:6f:5c:b4:bc:a2:74:75:13:f4:1f:75:58:bd:64:
89:2a:50:91:a3:db:2b:e4:64:22:73:5b:cb:7c:d2:
68:cc:ed:8a:46:81:6b:ab:27:e3:2c:22:dc:5c:04:
cd:87:5d:1d:c7:15:73:8b:b7:eb:ff:5a:12:59:96:
73:37:13:00:60:8a:fe:e0:93:00:8b:87:1f:40:49:
9f:13:ec:e2:e6:1e:8c:e1:76:6d:ad:31:0b:3b:69:
95:12:4c:22:fc:51:64:d0:74:d4:4c:2b:1a:b4:56:
33:dd:4b:eb:b1:56:39:e7:f5:5b:3f:72:de:c2:32:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:6E:4F:9E:D8:F0:CB:25:44:45:14:19:B0:82:14:0A:68:90:A3
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:8c:83:b7:00:ce:1c:37:0a:66:40:62:9c:da:70:36:e2:
bd:7a:86:f4:46:b8:93:d5:77:9b:3f:f1:07:a6:e3:c7:c9:da:
cf:49:63:da:c8:37:06:bc:89:07:dd:2b:aa:7b:07:16:4a:4d:
9e:e8:0c:f2:23:cd:fa:15:bf:74:99:be:64:62:0b:80:73:85:
e5:3a:26:10:1c:4e:55:db:38:bd:c6:e2:ea:8f:d6:37:0b:a8:
f0:e3:c4:f1:21:4c:19:84:fc:70:4b:c3:1c:7d:99:80:b6:c9:
d5:06:30:cf:a9:90:1c:32:09:11:ab:e0:60:c6:7d:74:83:e2:
8b:4b:4a:d8:36:1a:3e:af:c9:1f:a9:eb:f3:ee:eb:db:ed:78:
b3:4a:89:e3:45:35:4a:57:7c:c1:47:bd:7c:9c:47:ab:82:c5:
3d:11:7e:29:b0:54:c0:f2:9d:67:82:2c:c5:2e:2c:8d:bb:7a:
57:30:d2:8b:f9:a6:ab:5f:e9:3e:b6:40:9c:f9:2c:87:5a:04:
98:e7:4e:27:97:58:1d:d2:e8:a5:a9:be:b1:70:37:e9:46:48:
fd:2e:ba:58:33:87:94:1b:06:24:2d:c6:dc:5c:12:a1:fa:a3:
a7:81:4f:98:4d:26:ff:62:d1:7b:06:0f:0b:33:fe:6b:54:39:
a2:0b:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:19 2026 by rpki-client