Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: OCQisWa4fYK0xvjgoA2kKGa76FBTCGQosj4Gyh2AJg8=
Subject key identifier: B0:45:A7:55:7C:00:66:D1:84:64:8C:B4:87:76:43:18:CA:6B:06:14
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01A0C8596C12B1B1855E35E9E55623391EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 09:01:38 +0000
Manifest this update: Tue 22 Sep 2026 09:01:38 +0000
Manifest next update: Wed 23 Sep 2026 09:01:38 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: fq4rwmm+wiW0ZM95QXjWr4dWwXYBEULt9Zx3cLzBWAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:6c:12:b1:b1:85:5e:35:e9:e5:56:23:39:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Sep 22 09:01:38 2026 GMT
Not After : Sep 23 09:01:38 2026 GMT
Subject: CN=b045a7557c0066d184648cb487764318ca6b0614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:86:4a:8f:ed:bc:15:08:b2:ed:76:20:9f:
33:fe:66:67:d4:05:0b:65:dc:dd:71:3d:8b:22:73:
16:90:94:06:6a:d9:d5:ee:68:22:30:a2:75:45:cb:
db:05:a6:9a:09:73:ff:95:ad:22:71:a5:3d:bc:1e:
36:61:9d:fa:6b:5b:a1:b7:b3:7c:67:c9:f9:2c:cf:
dd:da:a0:b7:fc:45:ce:a6:47:6b:64:59:8e:75:2d:
21:a7:f6:62:e9:6c:fd:1c:91:90:39:37:b6:75:06:
77:b7:3d:51:b7:5d:9c:8e:ed:c5:5f:f6:f6:43:b1:
f7:cd:07:96:99:ea:f6:f8:8d:01:61:6d:62:7d:40:
16:ea:dc:8b:d8:71:73:3f:84:0b:c4:25:b7:10:5f:
41:c9:c7:16:38:2f:20:43:aa:43:13:93:51:2a:c4:
d6:dc:1e:36:1f:de:93:b1:b1:ef:54:c6:29:4b:4c:
69:f6:f4:ca:21:de:72:e0:33:a8:37:25:7a:63:15:
cb:13:71:f8:f1:be:f3:a9:1b:5f:c9:f0:46:a4:d6:
fb:eb:fd:28:97:c4:5a:12:16:5f:6e:07:47:1b:33:
04:99:eb:33:f8:47:c6:74:68:39:f1:32:52:f0:35:
20:de:ce:e7:bd:5a:a4:8d:a0:69:ff:5e:f9:59:2b:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:A7:55:7C:00:66:D1:84:64:8C:B4:87:76:43:18:CA:6B:06:14
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:16:f0:e5:5a:6f:56:c6:2b:5e:bc:5b:3d:ed:49:ee:ea:19:
c7:b4:62:3a:fb:4e:71:2c:00:83:9f:ff:ff:82:70:be:59:97:
55:84:7b:a8:0b:ca:8b:af:db:21:0a:68:6c:bd:c0:1a:ba:42:
ad:95:d2:04:58:a6:37:cb:73:f1:16:84:16:70:b6:dd:63:4e:
3b:02:17:1a:e7:f3:32:8a:5c:f7:ba:44:f0:0c:a8:a9:2e:d7:
4d:a3:96:88:45:d6:e3:de:2b:d9:da:62:96:ad:e7:16:bb:a4:
2a:01:9f:e3:d0:0d:ac:f6:2f:05:e9:a7:88:8f:07:95:07:3d:
b0:ef:f3:18:94:d3:f5:59:c7:37:b5:5f:30:fe:e7:1b:b8:bf:
08:c0:83:33:6b:99:ac:64:26:5f:35:82:2f:29:31:5e:0e:b0:
78:51:71:8d:26:2f:e6:05:31:52:76:cc:67:95:24:12:fc:00:
a6:46:7b:da:5f:f7:8d:5f:fc:83:49:d8:1d:86:b0:be:d7:87:
b3:78:83:c5:20:1a:03:ff:d8:f0:9a:60:67:0e:ea:ac:ad:17:
47:d4:ad:6b:c8:72:a4:3b:db:31:a6:8e:13:4a:90:01:df:14:
f1:f2:ce:8b:4d:89:b2:20:ee:62:d3:ac:59:08:90:98:d0:ab:
33:51:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:33 2026 by rpki-client