Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: B1Y6xfCNvhAdSn7WMGdXFJPuJJUh2we5hUTjyI8Xkxo=
Subject key identifier: D7:54:F7:2F:89:49:8E:2B:DE:71:51:93:FD:25:39:90:66:7D:62:5E
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019CABD92CB1B5D8041B9644D18A71724F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: HxEMSjHEACJbD3vNrme8kMZDYSG7NQYhVkinJIYTfFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2c:b1:b5:d8:04:1b:96:44:d1:8a:71:72:4f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=d754f72f89498e2bde715193fd253990667d625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:03:62:95:69:97:5e:d2:6b:14:7e:f2:f2:
d0:44:16:5e:63:1a:53:bc:0c:8c:df:0d:e8:0a:87:
c8:f8:f7:f2:71:70:73:ae:89:f4:90:87:e0:f5:15:
fc:62:7a:34:5a:15:93:f6:e7:a5:3d:cd:2e:de:36:
c6:0a:bf:21:bf:b1:1b:1d:3c:22:e9:26:63:cc:33:
14:cd:90:3f:94:fc:29:7d:df:34:0e:42:c4:da:5f:
bc:91:ba:fb:bf:17:04:cd:a9:20:12:a5:56:36:2e:
03:0d:97:ed:fb:ec:91:44:36:81:af:65:24:0e:cd:
3d:30:14:60:ca:4f:49:58:1f:ff:7f:26:94:d8:57:
84:db:c5:71:40:be:1b:71:00:14:35:5d:9a:ff:8a:
7d:bd:c7:e2:0f:cd:62:2b:b3:ab:b2:7c:82:d0:c1:
db:fb:8a:28:e9:89:e5:18:c3:82:68:9c:78:d2:87:
5b:91:83:06:e7:30:08:14:4e:50:3f:9a:81:c5:b5:
99:7d:7e:a9:60:26:51:b5:49:42:a1:2a:6b:b9:89:
36:e4:0c:d4:df:94:e0:0c:6e:0b:4d:58:dc:00:e1:
ec:7f:a0:c9:66:ce:db:0b:6d:f1:e9:75:18:a6:29:
f8:b1:e4:c8:69:44:60:1e:b1:5e:32:fc:ff:ec:4b:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:54:F7:2F:89:49:8E:2B:DE:71:51:93:FD:25:39:90:66:7D:62:5E
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:77:88:04:0f:77:1f:b6:ab:82:80:e1:4e:cb:b7:dd:ca:d2:
04:5e:80:7e:f6:43:ad:f1:7e:c7:5e:b2:f4:83:af:0c:dd:52:
19:7d:ee:ce:68:2f:1c:81:fb:4e:fb:d4:2a:e5:43:76:99:cf:
c0:75:f1:07:d6:79:c7:ca:5d:fb:7f:5e:64:f8:dc:a9:98:58:
09:17:a5:d5:5c:18:f4:39:91:70:a8:dc:e4:e3:f7:bc:44:30:
19:e8:6c:99:6d:cd:d5:50:e6:bc:37:05:2d:d8:b2:34:16:51:
a5:49:79:ae:62:3f:91:05:df:74:e1:f8:54:7f:32:66:aa:35:
78:fb:87:44:0e:d8:1b:bb:c4:b9:03:6f:0e:83:5f:14:1a:05:
62:02:bd:a5:33:2a:76:66:57:3e:a0:1c:ed:a2:08:09:d6:02:
dd:0e:23:ff:4b:91:a6:e0:67:01:72:52:e9:ab:21:47:5f:f2:
3d:90:c2:03:79:1c:87:e2:b6:3a:b1:82:83:40:46:b5:db:22:
55:09:cc:00:b2:63:0c:0c:f7:92:c0:b6:f5:07:04:84:a0:11:
82:23:6b:f1:9a:ae:5a:5b:c5:67:e5:e6:d9:27:d9:25:2a:53:
20:17:54:07:e3:04:c7:16:5a:41:83:e3:38:75:61:1d:21:83:
e0:a4:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:31 2026 by rpki-client