Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: QpdlQDhsdq8fqax19BjPuDYHQIyx6OrnESM1E5D3WTc=
Subject key identifier: 6C:AA:92:3D:00:CC:89:96:96:E5:19:C5:FD:C6:7D:D0:ED:6C:11:3F
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A108B8C472CBE45EEE7CB5D0EE0D4B22AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1A9A
Signing time: Sun 04 Oct 2026 21:01:28 +0000
Manifest this update: Sun 04 Oct 2026 21:01:28 +0000
Manifest next update: Mon 05 Oct 2026 21:01:28 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: CSy+moZDYEaa+JdG5PKHcIPgOtT+GsmZLmX0frHAFE0=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:c4:72:cb:e4:5e:ee:7c:b5:d0:ee:0d:4b:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Oct 4 21:01:28 2026 GMT
Not After : Oct 5 21:01:28 2026 GMT
Subject: CN=6caa923d00cc899696e519c5fdc67dd0ed6c113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:28:5a:e5:46:96:f8:05:c7:b7:54:27:8f:
c2:45:cf:69:cf:c0:ec:3a:0c:1b:45:bf:ce:f4:7e:
fe:f9:44:c1:15:89:be:06:e4:e7:e6:fe:00:4b:47:
ad:3c:59:c0:ca:c1:fb:0f:11:d8:4d:24:6d:75:0b:
5a:23:43:46:cb:e6:81:e0:a5:73:b7:88:69:c4:4a:
30:95:0b:c9:dd:44:17:b4:71:2f:12:b5:83:e0:4f:
b7:3f:d6:3d:df:2a:8f:05:a1:cc:9c:af:91:f0:69:
d1:90:ac:3f:0c:3a:bd:b3:cd:7d:3c:38:5d:bf:29:
dd:7f:c6:49:af:a2:c3:2e:83:f7:84:1a:c8:2c:9b:
fc:e3:ab:b7:41:2f:b6:59:dc:12:fd:91:70:ad:30:
ed:13:d7:5d:44:f1:49:46:8d:9f:6c:e2:86:3d:7d:
97:38:8f:09:dc:8f:5d:74:a4:8a:00:b2:73:95:1a:
aa:b9:01:9d:ec:a8:ac:5c:e6:04:6f:a6:f3:e6:aa:
b3:33:0c:48:2a:40:06:b2:aa:34:4b:3d:f4:5a:64:
ab:ad:4a:b7:ae:4e:d7:01:f2:de:52:e1:b8:41:3f:
fb:95:3a:50:c6:a0:19:75:2d:e3:0a:e5:b7:d7:79:
2c:67:bf:0e:01:d4:0a:05:7b:31:dc:7f:59:f4:cf:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AA:92:3D:00:CC:89:96:96:E5:19:C5:FD:C6:7D:D0:ED:6C:11:3F
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a1:7a:57:26:14:63:ef:3e:77:b2:94:7f:f3:7f:6a:fe:71:
1d:f9:f4:c0:86:fe:cc:64:11:50:b6:6a:a4:32:05:1a:19:47:
e4:2c:e0:b2:8e:67:f2:8f:89:45:d1:29:42:04:d8:52:c5:cc:
6a:b7:3f:55:eb:9f:38:08:ae:69:65:d4:90:39:2b:c9:b3:b1:
c4:e8:12:d9:10:66:0f:e9:97:ca:92:23:b4:83:bd:6a:e1:f7:
9f:17:75:01:91:8e:9a:d5:ae:59:83:69:e7:35:27:ac:71:c5:
77:9b:2d:bf:cd:a3:7a:aa:7c:3e:07:d8:fd:92:07:68:6a:f5:
b7:8c:37:67:80:22:f7:6c:5d:43:ba:2a:6b:a8:e9:57:28:ba:
33:7b:3d:5f:e6:c2:02:85:b2:13:4e:b7:f4:90:f4:02:28:7c:
cd:78:fd:8b:8f:68:81:0d:e3:16:55:42:9d:4f:84:d2:e1:c1:
00:1b:7d:fd:2f:81:d1:34:dd:5f:b7:d5:de:40:bd:a0:f2:90:
dd:b4:10:e7:c5:85:d3:36:9a:ad:54:89:90:74:19:54:44:94:
49:46:d1:66:56:a9:3e:29:b4:b0:a0:85:63:8a:74:81:8d:15:
61:ff:1b:9b:5a:ba:6b:20:f4:c3:f1:6b:95:08:8f:6a:39:27:
19:13:bc:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIuMRyy+Re7ny10O4NSyKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjYxMDA0MjEwMTI4WhcNMjYxMDA1MjEwMTI4WjAzMTEwLwYDVQQD
Eyg2Y2FhOTIzZDAwY2M4OTk2OTZlNTE5YzVmZGM2N2RkMGVkNmMxMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL8oWuVGlvgFx7dUJ4/CRc9pz8Ds
OgwbRb/O9H7++UTBFYm+BuTn5v4AS0etPFnAysH7DxHYTSRtdQtaI0NGy+aB4KVz
t4hpxEowlQvJ3UQXtHEvErWD4E+3P9Y93yqPBaHMnK+R8GnRkKw/DDq9s819PDhd
vyndf8ZJr6LDLoP3hBrILJv846u3QS+2WdwS/ZFwrTDtE9ddRPFJRo2fbOKGPX2X
OI8J3I9ddKSKALJzlRqquQGd7KisXOYEb6bz5qqzMwxIKkAGsqo0Sz30WmSrrUq3
rk7XAfLeUuG4QT/7lTpQxqAZdS3jCuW313ksZ78OAdQKBXsx3H9Z9M+ylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyqkj0AzImWluUZxf3GfdDtbBE/MB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKF6VyYU
Y+8+d7KUf/N/av5xHfn0wIb+zGQRULZqpDIFGhlH5Czgso5n8o+JRdEpQgTYUsXM
arc/VeufOAiuaWXUkDkrybOxxOgS2RBmD+mXypIjtIO9auH3nxd1AZGOmtWuWYNp
5zUnrHHFd5stv82jeqp8PgfY/ZIHaGr1t4w3Z4Ai92xdQ7oqa6jpVyi6M3s9X+bC
AoWyE0639JD0Aih8zXj9i49ogQ3jFlVCnU+E0uHBABt9/S+B0TTdX7fV3kC9oPKQ
3bQQ58WF0zaarVSJkHQZVESUSUbRZlapPim0sKCFY4p0gY0VYf8bm1q6ayD0w/Fr
lQiPajknGRO8uA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:10:27 2026 by rpki-client