Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: aTkmEGdi/xS2G/upmDKQN/GOJ4ZOrdBDVtZ22biNEQE=
Subject key identifier: DF:97:39:53:DF:02:FD:E5:B0:28:63:CA:56:8A:1D:D5:F0:73:08:A7
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01A0C5C5587D021DCC726F79DC2D2B3225C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 21:00:39 +0000
Manifest this update: Mon 21 Sep 2026 21:00:39 +0000
Manifest next update: Tue 22 Sep 2026 21:00:39 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: dP2sLdnGa9WCZeNf8Q1foHM7RL6AkXkkjXWiqG0/vd4=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:58:7d:02:1d:cc:72:6f:79:dc:2d:2b:32:25:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Sep 21 21:00:39 2026 GMT
Not After : Sep 22 21:00:39 2026 GMT
Subject: CN=df973953df02fde5b02863ca568a1dd5f07308a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:05:d3:52:be:2e:ee:f8:d7:10:a2:11:86:
2f:3a:7a:a5:29:88:25:40:84:cc:8d:cc:a3:4a:30:
15:86:82:ff:c2:48:08:38:08:23:2d:59:bc:34:03:
ef:46:41:bb:66:21:f8:39:b2:b8:fd:10:95:92:d3:
f0:7b:6c:e3:b1:e6:78:b3:78:a7:97:85:fc:78:19:
65:7a:c4:f9:fd:bc:ed:1d:1d:cf:75:d6:b9:9c:c9:
fb:29:b0:ef:20:44:7f:0c:00:c5:3a:d7:35:af:ee:
df:23:20:f5:0c:a7:4a:4a:fd:ea:c1:3e:d5:4c:dc:
89:27:07:04:6a:76:e8:c4:ff:42:0a:86:e7:94:27:
26:fc:9d:78:b5:da:57:6b:99:ee:a0:69:12:90:e4:
d6:43:3b:18:13:d8:b7:7e:98:b5:2e:eb:a4:4c:ba:
bf:9f:95:8d:33:7b:80:7a:18:c4:69:07:6d:cd:e7:
90:2e:9a:e2:4c:00:94:b1:77:5f:bf:c6:79:14:a7:
ae:19:6a:31:67:c4:3b:b2:dc:3f:7b:47:d4:8d:a5:
cb:e9:bc:41:68:dc:b5:7c:5b:a0:9d:e9:44:1a:68:
59:07:0c:69:08:e9:75:88:8b:c5:b4:d4:69:c6:5a:
e8:f2:9f:31:10:79:02:6f:4e:50:bf:3d:80:2e:4f:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:39:53:DF:02:FD:E5:B0:28:63:CA:56:8A:1D:D5:F0:73:08:A7
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:19:e8:e7:ef:10:6d:0c:c7:55:1d:6d:ed:eb:3d:bf:c5:41:
ba:ee:55:bb:7d:c9:31:e3:84:f3:3b:ae:aa:c6:27:d7:0d:73:
4a:b7:af:71:ac:43:14:ec:d0:77:26:fb:e1:15:48:1e:26:57:
f1:b2:87:1b:7b:eb:39:2c:9b:ec:b0:e4:84:64:7c:ee:76:a5:
67:4c:34:a7:c6:a6:5b:9a:5b:47:ab:74:b9:9e:7c:95:c6:db:
99:d4:ef:9d:19:93:8e:aa:ae:44:c1:79:96:ad:ab:8b:bd:2c:
1c:0d:e8:63:22:87:78:b5:ea:b2:e2:04:14:4b:6e:71:e8:fe:
6f:e5:89:c7:44:5d:d0:9b:64:d5:c1:a3:9d:68:6e:69:ea:80:
a3:f8:5d:99:3e:65:63:6c:d7:89:97:02:39:0e:b2:3b:5b:4e:
f8:e8:3f:2c:50:f5:11:3a:fe:b5:68:44:26:9c:2d:ab:6c:9d:
df:9a:2d:50:98:17:41:af:67:91:6e:86:62:42:ab:a8:98:8b:
d4:55:1d:13:a9:fd:7a:c6:ef:19:d7:22:e8:0b:0d:2b:2e:ed:
e9:7a:74:f8:c6:df:4e:7d:85:15:b6:1d:a5:e0:3a:6f:f3:74:
72:c5:9a:2a:e1:40:83:a5:66:08:ff:25:94:34:b8:23:f2:df:
1a:fb:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:07:27 2026 by rpki-client