Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: d5ZQ8uFKLOiCpV2sleS+ZsfiVPTLqfRG/uP8pmumT6Q=
Subject key identifier: A4:C8:B7:B6:EB:F0:38:46:A4:E6:D4:C1:22:4E:68:D2:04:11:C2:8E
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019FAA88A74B7603D9543B124690975B1A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 21:01:50 +0000
Manifest this update: Tue 28 Jul 2026 21:01:50 +0000
Manifest next update: Wed 29 Jul 2026 21:01:50 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: uxIf/QHP3mcvICUm2wG5v6UiMzX+bhMoQ58wiN7cp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a7:4b:76:03:d9:54:3b:12:46:90:97:5b:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jul 28 21:01:50 2026 GMT
Not After : Jul 29 21:01:50 2026 GMT
Subject: CN=a4c8b7b6ebf03846a4e6d4c1224e68d20411c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:6d:1b:0d:e0:e3:f1:d9:ba:37:3a:44:06:
01:02:a5:b1:6f:92:26:f9:74:1d:cf:99:03:f7:27:
08:64:f4:d6:86:bf:67:4e:c7:b9:c4:d4:58:9f:38:
b2:8f:75:98:af:aa:b6:8b:2e:35:f2:96:6d:43:2d:
1c:d0:75:5f:d1:60:64:01:fc:ef:08:9f:ea:88:53:
03:95:ab:a1:1f:59:e8:e3:0a:96:14:02:8b:7d:46:
3e:67:6a:0c:57:51:a7:ff:2f:7e:87:cf:1d:69:01:
9c:09:e0:1b:eb:28:b1:de:77:60:bc:23:b6:52:23:
76:a7:6b:02:d5:98:2c:f3:e5:c0:01:f2:cc:d1:7a:
57:f4:f2:a8:3b:63:36:54:22:16:f2:31:6b:b3:fb:
3e:f1:79:45:45:d0:65:83:95:08:97:25:49:4d:10:
a9:b4:8c:ff:e6:a8:87:df:94:ea:6e:f3:17:70:d4:
ec:84:27:4d:98:85:81:7c:a0:9b:33:a1:34:2f:04:
15:d9:dd:19:70:8d:d5:54:97:5c:af:b8:6d:60:d2:
71:d5:e4:ef:68:db:97:ab:d3:26:28:36:e6:e4:60:
f3:90:e2:df:3c:e2:32:af:f7:22:96:89:18:d5:72:
bb:93:f2:7c:94:29:73:70:5c:d0:9a:a9:b6:f5:3d:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:B7:B6:EB:F0:38:46:A4:E6:D4:C1:22:4E:68:D2:04:11:C2:8E
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:14:58:82:72:4b:9a:a5:46:83:e9:b6:e3:d2:66:10:9e:
31:89:65:79:e1:48:48:98:33:e9:b5:9b:f2:e0:30:18:18:d3:
fa:03:81:7e:53:ca:48:e2:9b:f6:85:6d:ff:a3:c0:74:af:5f:
dd:4b:74:32:ef:02:90:35:6b:72:67:e9:19:dc:0d:a7:c0:c1:
ac:b6:ac:e5:02:22:d4:2f:e8:99:f8:7e:00:23:2a:90:a2:fd:
e3:8c:2d:24:f1:e4:40:72:1a:ff:4a:39:6c:53:97:bb:fd:57:
dd:a7:4a:8a:8b:1b:dd:67:ad:49:12:7d:ee:79:a3:00:c2:c6:
6f:2a:e0:96:b9:8e:05:7e:13:0b:c4:5c:9c:8b:ed:d2:bb:35:
16:e9:8d:42:23:3c:57:c3:34:80:32:0b:f6:ed:3c:cb:6c:0f:
fd:f7:8e:b5:92:30:95:e1:f3:d4:89:e6:c0:5b:bd:e6:60:fc:
de:ab:e0:47:29:a5:02:b2:58:d7:53:fd:23:e9:76:95:51:2b:
35:73:53:ee:2d:a9:e6:bb:55:af:e3:31:f7:2f:77:4e:55:07:
ff:c9:53:fd:b8:98:90:91:de:1d:24:9c:d0:2d:f7:ab:f6:dd:
90:11:4a:0c:ee:17:22:6e:0f:86:52:3f:82:2b:92:df:49:4e:
e6:12:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:44 2026 by rpki-client