Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: QmuqszH9CWJV1VVZVyj6FOfrZQG8e84BHkD+joRK4KA=
Subject key identifier: A7:5E:AE:C2:6E:5A:0D:72:BD:FC:6C:E7:71:36:87:5B:1B:16:22:1D
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019D9A3ED8336047AC962FC335A4C682471F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 18D3
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
5: hYxTxK4AHKTY1TwSA43oGaIbwvI.roa (hash: pXMygWt3Q3zIvm4RuMnURnfNgvmTHNGm+Wsjn0P2p18=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: T3tPgSzoqvaSvm6zZMGWv9vPXJXLVr36dQePOZk+hsM=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d8:33:60:47:ac:96:2f:c3:35:a4:c6:82:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=a75eaec26e5a0d72bdfc6ce77136875b1b16221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:d1:a4:32:c5:cd:54:b7:b4:31:01:9f:40:
39:3c:6e:4d:93:87:eb:9b:de:ef:a8:f0:23:8c:fa:
fc:fa:26:ee:a4:2b:64:8d:72:2e:9d:f1:8a:23:0c:
5f:a5:8b:15:e7:86:a5:bd:17:85:32:4b:3e:0c:f1:
59:03:86:4d:2d:5d:56:18:f9:d8:9a:74:ad:6a:e8:
d8:84:f1:f1:a5:d6:f9:1d:b7:98:9e:24:51:3a:7d:
33:d2:a9:f2:46:b2:05:ba:4f:52:34:8f:75:ab:00:
b7:60:be:97:63:80:10:1b:cf:60:3d:22:ed:70:07:
e2:97:d2:27:8a:e5:a3:aa:ca:6a:55:e8:a8:55:00:
ab:ca:0b:77:f2:83:48:c5:50:6e:3d:6e:da:cf:38:
18:6c:c5:4d:96:d3:4e:c2:94:16:db:a4:9b:08:34:
e0:84:f4:36:19:a3:82:b0:92:3c:61:ca:8a:1b:d7:
06:d2:f5:b2:75:d3:a6:7c:6c:1c:4b:ac:de:c4:ae:
e4:1b:a0:1b:0c:21:87:8d:58:94:ff:5a:80:45:ba:
e5:ff:44:05:bb:8e:12:c6:3e:ef:b4:c3:3a:eb:3c:
3d:c4:a7:b5:c0:32:52:0e:78:68:51:d0:43:8a:00:
29:8e:a9:0d:28:7a:86:e7:17:63:1a:0e:58:fc:94:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:AE:C2:6E:5A:0D:72:BD:FC:6C:E7:71:36:87:5B:1B:16:22:1D
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:c0:18:15:44:37:11:34:c5:f0:70:e1:a1:b8:9a:5f:39:
1d:62:a0:02:40:ec:f9:68:5d:5e:65:89:45:ed:0d:9d:cf:dc:
a8:ea:e9:b4:b4:59:cc:74:14:d0:97:95:ae:27:9c:0c:9a:1a:
cb:0b:ed:56:98:4c:db:4b:c1:52:1a:a6:dc:d7:87:3d:b6:e6:
97:cb:bc:3f:01:db:11:a4:f1:bb:29:de:8c:64:f0:91:e8:c2:
fc:75:21:f9:48:dd:24:5e:76:a1:40:00:9b:8b:b0:ab:5e:ec:
b6:ba:15:54:ca:2c:7c:dd:3f:ea:64:3d:27:7d:57:87:83:cb:
7e:48:aa:08:f6:57:41:ac:a0:36:49:12:f7:76:c4:2a:22:41:
20:2a:4c:e4:62:e9:3d:a0:c8:48:e5:94:7c:2d:43:7a:14:44:
3e:76:1c:49:29:53:6f:b6:ae:c0:8c:01:bc:11:ae:3c:c5:3c:
b5:32:f3:61:75:ab:31:7d:14:23:9d:1d:ba:3e:75:a5:77:ae:
2c:69:c0:26:c2:db:97:d4:29:81:4a:d1:d8:50:ba:c8:93:2b:
de:b4:ff:f1:3e:21:a5:69:5b:8b:01:19:71:83:07:46:80:8c:
f4:b2:79:e8:45:fa:05:ec:14:0f:f8:58:88:b8:60:49:5d:98:
37:77:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:29 2026 by rpki-client