Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: ZB086g4YRqodZapoD4Gm7rS+0UGLY4onEzp/KQjOyXY=
Subject key identifier: 31:FA:59:C4:F1:61:50:B5:60:5B:70:27:65:EE:C1:8C:AF:96:DD:EB
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 01A0D45D7E8075E10339790B85EE07F72C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 17:01:32 +0000
Manifest this update: Thu 24 Sep 2026 17:01:32 +0000
Manifest next update: Fri 25 Sep 2026 17:01:32 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: CmywPg0UiriZFSdn82ozo5+WyzEvn1C0M+Zh+JyNjW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:7e:80:75:e1:03:39:79:0b:85:ee:07:f7:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Sep 24 17:01:32 2026 GMT
Not After : Sep 25 17:01:32 2026 GMT
Subject: CN=31fa59c4f16150b5605b702765eec18caf96ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:0c:ed:c0:a6:6d:52:b2:59:77:b5:31:eb:
7a:b3:e7:0b:77:08:51:6a:d5:2c:5c:e9:42:fe:8a:
9c:52:e6:45:92:4e:5f:0e:0d:2f:c5:7e:06:41:9e:
ae:27:91:b0:c5:a0:82:3d:bb:51:a0:83:fc:63:70:
02:2d:4a:26:84:a6:d4:0d:11:7b:3a:80:c9:35:79:
7b:26:21:9c:12:40:d5:85:e9:10:49:85:db:22:fb:
87:32:80:10:a6:1b:07:85:0d:7d:9b:7f:5f:ae:52:
c3:b0:5c:94:b3:44:06:0a:05:7f:54:96:41:8c:8f:
52:4d:26:b3:84:f5:81:b5:4c:66:6e:9f:1b:ec:cb:
a8:69:64:d5:6b:2f:48:e2:89:7f:ba:b2:85:8e:07:
e9:0a:ef:02:ba:ca:e7:95:a4:7c:49:38:4a:02:02:
6a:06:a2:be:ab:d1:d7:71:d3:43:2d:c0:3b:f2:99:
a3:58:5b:9b:00:93:6d:5b:a3:57:7b:0a:7b:d0:50:
44:44:49:eb:7e:29:21:90:09:f1:a0:aa:b5:ca:e0:
f8:bd:f7:f5:53:d3:82:fe:21:4e:98:46:8c:36:af:
f9:b1:d8:d2:72:91:42:d7:ea:e3:f9:55:fa:c7:6f:
16:81:60:4c:17:f7:97:d8:81:bb:97:30:a2:49:8c:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:59:C4:F1:61:50:B5:60:5B:70:27:65:EE:C1:8C:AF:96:DD:EB
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f1:1e:96:95:1d:14:65:6c:ab:52:f2:70:1e:71:52:c3:25:
73:da:ea:d2:3d:4f:ab:9b:ad:6a:3b:6f:46:a9:6e:7a:16:aa:
fa:e8:70:4a:d6:38:03:39:dd:e5:51:12:54:59:38:d7:8a:05:
72:93:b8:d9:a9:3e:49:7b:02:fc:c3:c5:ea:21:84:2d:90:44:
79:35:f4:52:bd:15:2e:5f:39:bc:22:c6:cc:5f:d5:de:c7:02:
3c:e7:9d:9a:42:70:c7:29:64:a8:68:bd:ad:af:40:84:11:b3:
48:2a:61:4d:3a:c8:8e:83:2f:31:02:66:e8:e9:d6:1a:c1:58:
2e:c4:51:83:ff:1b:bd:3e:d3:dd:b5:2d:02:20:ca:33:3f:69:
c5:7d:e0:83:88:23:eb:96:23:1d:38:84:c8:4a:9e:90:23:6b:
d2:ed:f3:f3:ed:5f:15:3d:cb:d9:8e:4b:22:37:3b:01:d2:26:
ca:f8:64:20:8e:44:c8:3f:e4:00:90:69:f6:a3:55:dc:ca:c6:
89:6f:4b:88:f3:b7:3a:01:56:01:6b:79:d2:e9:91:69:8e:5b:
d1:c0:62:14:64:c3:44:7c:47:0a:fe:eb:74:ab:37:a2:28:80:
7b:a4:18:69:5f:06:d0:54:5f:a4:90:18:52:3d:8a:5b:dd:59:
0b:b5:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:50:02 2026 by rpki-client