Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: 3ZidAvZXSkqp5FFQg+bkMV/k8K/ypwaEXUdr89HJOKw=
Subject key identifier: 90:38:BC:37:FE:1F:78:88:83:02:B0:42:4F:12:BC:79:51:76:87:B1
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019FAB2C0E2F0793D31EA68ED9D346277A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 19E5
Signing time: Wed 29 Jul 2026 00:00:18 +0000
Manifest this update: Wed 29 Jul 2026 00:00:18 +0000
Manifest next update: Thu 30 Jul 2026 00:00:18 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: /bTRQ/YiUatoLISzcf0rpCyNMQfUkAF6cATwnEFGImg=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:0e:2f:07:93:d3:1e:a6:8e:d9:d3:46:27:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jul 29 00:00:18 2026 GMT
Not After : Jul 30 00:00:18 2026 GMT
Subject: CN=9038bc37fe1f78888302b0424f12bc79517687b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:72:28:f5:09:b1:b2:2d:52:df:86:b7:d2:
f0:cc:3a:fa:65:45:52:61:fe:af:a5:8b:bd:30:72:
18:cd:14:82:82:aa:d1:05:ed:b0:76:ba:5d:53:06:
ad:49:8e:06:d3:fb:45:c2:65:43:4a:3c:f2:08:df:
59:06:4e:1c:c5:51:1d:3a:f6:69:88:67:30:7e:08:
d3:8c:7e:c9:9f:fc:64:fd:f7:26:27:01:54:a2:e8:
ff:a2:4b:a5:63:38:37:07:c6:b2:06:1d:c3:16:3f:
71:6e:d3:d4:9b:a8:a9:0a:12:f4:0d:64:f2:c7:5a:
6d:01:ba:41:63:af:9a:6f:13:e5:97:8b:1f:05:ad:
d6:96:c9:7b:7f:e3:91:64:bf:eb:34:75:25:45:f4:
61:06:f2:7d:af:23:15:9e:98:4a:be:4c:56:10:12:
61:a0:22:38:1a:9d:a4:df:15:92:17:3e:92:d0:0b:
6a:71:06:ba:c2:71:05:01:9b:14:ff:ef:72:96:b1:
f3:ca:54:02:3e:2d:b7:e4:57:12:c0:95:59:b1:d0:
0e:04:4a:07:0a:e4:0a:06:66:2a:7d:a9:9a:02:c6:
d5:6a:16:25:b8:e3:19:80:05:ab:1e:27:cc:d3:45:
ed:6c:fa:c4:12:f0:fc:cd:5a:04:75:24:f8:73:4a:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:BC:37:FE:1F:78:88:83:02:B0:42:4F:12:BC:79:51:76:87:B1
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b3:8b:37:3f:00:8b:1b:c2:59:e6:54:fa:2c:ca:1c:29:e1:
c0:cb:95:e8:d5:04:74:04:6e:08:7d:f3:b3:24:b3:cb:e9:b5:
cf:1b:fb:b8:2a:b5:a1:96:b1:3f:85:46:7a:0f:e5:af:20:0d:
50:7e:85:28:35:2f:7d:4b:8e:e3:9f:3e:d6:42:e6:16:d9:c3:
b1:3c:c4:35:76:34:28:2f:2c:06:ba:2c:97:bd:91:bc:9f:cf:
f9:98:c0:53:91:48:96:59:05:c0:b9:b9:95:7a:1f:80:18:d5:
b7:e3:dd:51:75:04:e4:89:72:a1:f9:a6:4b:96:0d:a1:70:14:
39:57:3e:73:c8:3d:ec:54:a8:47:b1:b6:3c:b6:48:9d:b2:b2:
f0:1c:75:d3:e2:2c:1e:8d:98:13:52:6b:66:aa:5e:7b:1f:34:
4e:56:92:19:b6:f0:93:16:d4:52:e7:93:31:cc:e9:da:af:28:
5f:47:43:64:84:df:94:5e:30:a3:a9:eb:00:c1:5f:8b:cc:9c:
df:81:57:b8:db:30:2e:68:1f:b4:6d:19:e2:e0:a4:58:c2:e8:
fd:99:d3:a3:16:67:20:6d:14:de:8c:f7:07:c1:51:f9:e6:22:
4f:dc:14:06:61:0b:02:68:db:95:53:04:9b:f6:1f:f1:30:0e:
2a:dd:0f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLA4vB5PTHqaO2dNGJ3qVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjYwNzI5MDAwMDE4WhcNMjYwNzMwMDAwMDE4WjAzMTEwLwYDVQQD
Eyg5MDM4YmMzN2ZlMWY3ODg4ODMwMmIwNDI0ZjEyYmM3OTUxNzY4N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnltyKPUJsbItUt+Gt9LwzDr6ZUVS
Yf6vpYu9MHIYzRSCgqrRBe2wdrpdUwatSY4G0/tFwmVDSjzyCN9ZBk4cxVEdOvZp
iGcwfgjTjH7Jn/xk/fcmJwFUouj/okulYzg3B8ayBh3DFj9xbtPUm6ipChL0DWTy
x1ptAbpBY6+abxPll4sfBa3Wlsl7f+ORZL/rNHUlRfRhBvJ9ryMVnphKvkxWEBJh
oCI4Gp2k3xWSFz6S0AtqcQa6wnEFAZsU/+9ylrHzylQCPi235FcSwJVZsdAOBEoH
CuQKBmYqfamaAsbVahYluOMZgAWrHifM00XtbPrEEvD8zVoEdST4c0rrawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA4vDf+H3iIgwKwQk8SvHlRdoexMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7OLNz8A
ixvCWeZU+izKHCnhwMuV6NUEdARuCH3zsySzy+m1zxv7uCq1oZaxP4VGeg/lryAN
UH6FKDUvfUuO458+1kLmFtnDsTzENXY0KC8sBrosl72RvJ/P+ZjAU5FIllkFwLm5
lXofgBjVt+PdUXUE5IlyofmmS5YNoXAUOVc+c8g97FSoR7G2PLZInbKy8Bx10+Is
Ho2YE1JrZqpeex80TlaSGbbwkxbUUueTMczp2q8oX0dDZITflF4wo6nrAMFfi8yc
34FXuNswLmgftG0Z4uCkWMLo/ZnToxZnIG0U3oz3B8FR+eYiT9wUBmELAmjblVME
m/Yf8TAOKt0Phg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:42 2026 by rpki-client