Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: eNJAgZtXUQ57NTaq++BT9359fGlpzVUVLjMtueyUVIk=
Subject key identifier: 45:C5:D6:9E:C8:F3:6C:04:74:66:D4:FA:FF:A5:04:CD:5C:A9:78:3E
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019FAD1A850CBFDF4BBEA0083D74CD50FECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 19E6
Signing time: Wed 29 Jul 2026 09:00:23 +0000
Manifest this update: Wed 29 Jul 2026 09:00:23 +0000
Manifest next update: Thu 30 Jul 2026 09:00:23 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: cbjXUmKOzaiW8ni3d6k9ZLzoRdxS12IJrs6pt4Xxff8=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:85:0c:bf:df:4b:be:a0:08:3d:74:cd:50:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jul 29 09:00:23 2026 GMT
Not After : Jul 30 09:00:23 2026 GMT
Subject: CN=45c5d69ec8f36c047466d4faffa504cd5ca9783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:21:3f:da:00:84:2c:48:c9:06:cc:b5:71:
d7:fc:5e:7b:4f:17:a8:0c:e9:0f:86:64:47:6a:e7:
7e:8b:3b:09:10:c5:81:98:e0:b3:6b:58:31:91:5a:
3b:f5:87:bc:89:83:40:d1:e2:77:84:4f:d3:d2:32:
61:0a:ed:e0:4e:3e:a1:b6:43:9d:3b:56:2a:93:fa:
84:cd:96:c9:01:da:ce:13:67:a7:e4:aa:db:73:ca:
cf:66:8c:e7:ea:85:0a:41:06:46:d8:0c:04:36:9b:
52:2b:a5:00:0d:59:b2:28:77:c7:93:da:3c:b3:dd:
21:0a:a8:16:72:94:5f:c0:b8:29:32:58:75:f4:db:
84:e2:5d:be:84:6a:37:78:96:6e:80:6a:b2:62:53:
5c:f7:6d:92:11:9d:cb:02:dc:67:3f:db:12:14:f2:
cd:f9:9b:de:e7:67:8d:e4:66:f1:de:38:07:49:78:
d5:51:e6:c7:2f:2a:36:f3:60:65:80:40:42:27:64:
f2:1d:f1:be:e8:21:70:30:5d:65:98:8e:64:b6:c8:
67:ec:55:b6:5e:0e:89:65:34:ec:e4:74:94:3a:47:
60:2a:92:0b:a2:da:8d:48:a9:1c:14:e2:32:c4:f9:
a2:b6:87:fa:c1:af:27:3b:6a:aa:2d:bf:f3:b2:b7:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:D6:9E:C8:F3:6C:04:74:66:D4:FA:FF:A5:04:CD:5C:A9:78:3E
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ac:1b:22:0f:2c:0a:a9:72:df:9c:ca:82:7d:84:55:24:0a:
2d:06:42:3b:6d:9c:53:96:9b:e6:06:27:2d:9c:fa:c0:6e:82:
6c:cf:bf:a4:a5:ce:95:da:7d:ca:0a:85:64:06:a7:de:81:e7:
d2:fe:a4:9b:17:fa:b2:6e:a7:3f:89:9c:c1:4e:15:45:ff:56:
48:70:69:32:bc:4e:d9:0f:17:40:ec:ef:99:41:40:7d:d5:15:
1b:42:60:85:f7:ce:18:0f:ca:c9:3e:f3:39:8c:df:58:df:49:
19:72:8f:fc:8b:15:50:c3:54:b8:71:bc:23:54:47:10:c9:f6:
6d:7a:dc:e7:23:22:fc:92:46:63:e6:f8:11:31:8f:ab:2a:1e:
6e:cd:66:2f:50:8e:3e:f7:3f:af:69:e7:dc:14:ad:8a:f7:2f:
ee:6b:94:c9:bb:7c:af:c9:76:02:00:c7:e2:0c:c7:aa:a5:ad:
88:37:80:26:ca:ce:35:2c:15:ef:60:a7:2c:bd:11:05:ef:d0:
dd:ae:b1:be:9e:a8:0e:96:ea:10:50:d6:79:5f:ba:91:06:1d:
42:51:83:c9:26:62:b5:ef:b3:02:d7:da:01:2b:1d:3b:5f:11:
66:77:6d:c0:65:13:ac:5b:67:09:ac:a1:98:85:a7:ff:68:08:
28:78:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:36 2026 by rpki-client