Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: sCIUG5y+orOrs5G+77VgGHWZkTeSESUiOgb2dpg3yP8=
Subject key identifier: 3E:B2:23:54:48:6D:17:FA:19:CD:88:98:7F:02:31:E7:D9:84:09:22
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01A0D26E82C5AD36A2C01F83C1A3CFD841FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 08:00:52 +0000
Manifest this update: Thu 24 Sep 2026 08:00:52 +0000
Manifest next update: Fri 25 Sep 2026 08:00:52 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: PpZlaKV5UtQBY0m7umnQn9IklLuEb7Lk0dQqBaxr71A=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:82:c5:ad:36:a2:c0:1f:83:c1:a3:cf:d8:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Sep 24 08:00:52 2026 GMT
Not After : Sep 25 08:00:52 2026 GMT
Subject: CN=3eb22354486d17fa19cd88987f0231e7d9840922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:fc:3b:55:2f:84:0f:41:2c:eb:8a:56:de:
3b:18:62:b4:87:b3:32:9c:41:39:8f:ec:77:29:0d:
40:de:24:19:b5:c7:29:45:04:7e:06:2a:ab:72:6d:
c0:90:e6:65:c3:73:0f:f0:a0:d8:ba:0a:e8:bd:e8:
a8:ff:e5:aa:1e:4b:56:23:96:01:91:73:79:f5:51:
c9:7f:50:6f:28:3c:16:1c:ad:13:50:c7:41:35:87:
07:f2:d3:dc:ec:68:06:d8:e1:9f:7b:51:d3:17:0d:
9d:ec:94:37:a9:a7:ec:68:53:8b:11:a3:e1:98:3c:
54:6d:74:87:5b:51:30:62:7e:f9:e0:e9:23:ce:a1:
9a:c9:71:2b:c8:69:59:08:43:0e:6b:43:08:6b:1b:
61:34:19:7d:f8:05:2b:ef:4e:43:8c:59:f7:9a:d0:
d4:e6:22:55:38:b2:42:4b:51:6e:6f:3b:72:f8:21:
ac:9e:96:d4:0d:99:68:50:7c:a6:22:5a:45:c6:d8:
74:ef:07:5e:c2:74:4c:b5:f4:75:ba:65:86:50:a9:
2a:39:8c:62:d4:bf:ac:cd:98:c6:41:60:3d:4f:18:
7d:96:b6:52:33:85:16:60:52:bf:06:e8:4f:19:64:
34:b8:84:61:1f:25:34:d4:f2:15:d8:67:ab:04:9c:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:23:54:48:6D:17:FA:19:CD:88:98:7F:02:31:E7:D9:84:09:22
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:2b:bd:d8:72:9e:09:dc:de:06:7b:6c:63:b5:96:c3:f0:
4d:0f:f0:bd:2a:7d:81:c7:52:34:47:63:c7:83:b3:61:bb:87:
52:f2:14:93:cd:2e:47:80:2e:55:f0:ae:81:fe:55:63:ac:81:
dc:2d:60:05:15:eb:15:7c:e5:79:d8:1b:ac:6f:9f:bd:46:4c:
c1:3f:8c:3a:a3:f5:1a:42:48:09:51:9f:7c:29:f6:9e:2c:56:
2a:b9:1d:9b:15:4a:95:ed:fb:a6:1d:d7:03:8e:82:63:1c:37:
17:f4:6d:31:87:9e:20:02:c1:5d:87:95:01:d0:3c:38:e0:92:
85:c2:5d:3d:24:45:bb:c3:4c:e8:18:70:54:6b:09:62:a5:6f:
20:7c:0d:94:e0:a5:ed:46:24:50:a8:de:6b:2f:21:61:45:57:
10:95:43:52:1c:1c:1f:11:be:b1:b9:14:23:35:c9:da:11:3b:
50:71:a0:63:1b:d2:80:6e:81:dc:5d:59:0b:18:84:ff:50:a4:
4d:9a:2f:7c:08:5f:33:1d:fa:cb:f3:91:03:db:ae:b5:a8:ed:
16:af:95:9b:90:62:8d:69:39:35:cd:dc:03:ef:26:fe:2a:8a:
04:55:f2:0b:ab:5e:5e:a1:b8:59:b5:f2:7b:b9:23:3e:2a:fd:
c0:d3:46:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSboLFrTaiwB+DwaPP2EH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5
MmFlYjcwHhcNMjYwOTI0MDgwMDUyWhcNMjYwOTI1MDgwMDUyWjAzMTEwLwYDVQQD
EygzZWIyMjM1NDQ4NmQxN2ZhMTljZDg4OTg3ZjAyMzFlN2Q5ODQwOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPT8O1UvhA9BLOuKVt47GGK0h7My
nEE5j+x3KQ1A3iQZtccpRQR+Biqrcm3AkOZlw3MP8KDYugroveio/+WqHktWI5YB
kXN59VHJf1BvKDwWHK0TUMdBNYcH8tPc7GgG2OGfe1HTFw2d7JQ3qafsaFOLEaPh
mDxUbXSHW1EwYn754OkjzqGayXEryGlZCEMOa0MIaxthNBl9+AUr705DjFn3mtDU
5iJVOLJCS1Fubzty+CGsnpbUDZloUHymIlpFxth07wdewnRMtfR1umWGUKkqOYxi
1L+szZjGQWA9Txh9lrZSM4UWYFK/BuhPGWQ0uIRhHyU01PIV2GerBJwQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6yI1RIbRf6Gc2ImH8CMefZhAkiMB8GA1UdIwQY
MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt
NDU2NWYwNGY4ZDg1LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1
LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPkrvdhy
ngnc3gZ7bGO1lsPwTQ/wvSp9gcdSNEdjx4OzYbuHUvIUk80uR4AuVfCugf5VY6yB
3C1gBRXrFXzledgbrG+fvUZMwT+MOqP1GkJICVGffCn2nixWKrkdmxVKle37ph3X
A46CYxw3F/RtMYeeIALBXYeVAdA8OOCShcJdPSRFu8NM6BhwVGsJYqVvIHwNlOCl
7UYkUKjeay8hYUVXEJVDUhwcHxG+sbkUIzXJ2hE7UHGgYxvSgG6B3F1ZCxiE/1Ck
TZovfAhfMx36y/ORA9uutajtFq+Vm5BijWk5Nc3cA+8m/iqKBFXyC6teXqG4WbXy
e7kjPir9wNNGoQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:03:19 2026 by rpki-client