Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: aHdJNZBFee/SUiQQZlQ96qf1199/9EEMBjEfPO5GTcM=
Subject key identifier: 74:3D:47:79:46:CA:97:F3:9F:84:2A:04:08:84:99:15:D2:EE:75:50
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 01A0C5C56A6AD382557780CD340C200CD0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 17A4
Signing time: Mon 21 Sep 2026 21:00:44 +0000
Manifest this update: Mon 21 Sep 2026 21:00:44 +0000
Manifest next update: Tue 22 Sep 2026 21:00:44 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: EvVJwgfVzkpCYhPy9fh579dPKO8SRq68rZS39barQD8=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:6a:6a:d3:82:55:77:80:cd:34:0c:20:0c:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Sep 21 21:00:44 2026 GMT
Not After : Sep 22 21:00:44 2026 GMT
Subject: CN=743d477946ca97f39f842a0408849915d2ee7550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:00:f9:87:9c:57:10:a3:80:b5:8b:06:30:
ee:87:b2:c0:a0:4f:59:38:4e:71:32:15:8c:5b:df:
f7:ef:30:7a:91:b6:97:c3:fe:6a:5a:62:3f:26:17:
de:42:e6:9e:5e:a3:b8:56:7f:6a:b7:c1:89:37:4f:
62:29:38:c7:5b:4a:e5:65:5f:4c:c4:2c:52:a6:0c:
fb:e7:ba:ae:90:66:90:69:d1:93:9b:3e:62:5b:5a:
28:81:df:7d:ef:cb:4d:9b:47:48:8f:e9:80:b8:2c:
36:7e:aa:79:84:99:b3:88:11:0c:1f:f8:d8:77:84:
b7:4a:bb:79:3d:8e:2c:35:e1:08:5e:22:e7:74:e0:
4a:32:dd:52:91:79:19:e9:6d:67:26:b3:7b:0f:bb:
73:10:6b:7b:da:59:06:48:8c:01:e0:90:74:6f:3c:
06:fd:b4:fe:9e:df:b1:39:cc:59:72:d6:05:f2:79:
d4:27:08:cd:b6:9b:5e:ee:38:d7:ea:ab:24:95:46:
02:d0:54:d6:49:1f:df:96:c8:67:86:b0:d7:5e:04:
b2:58:d5:0c:3c:e0:2e:c3:64:19:34:d6:73:08:40:
69:d4:bb:d2:cf:6b:4a:21:4e:32:91:33:7a:50:c1:
17:ce:9a:ba:b3:64:34:80:65:93:67:7e:30:9d:16:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:47:79:46:CA:97:F3:9F:84:2A:04:08:84:99:15:D2:EE:75:50
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:e3:d2:51:2f:b6:7b:e5:e6:79:13:de:9c:e4:5e:ca:f7:
77:3b:b5:9f:c1:01:95:08:09:5d:91:5b:bf:60:e9:09:0e:7b:
e8:63:42:15:4e:dc:8f:0f:8c:c4:ad:ef:8f:bb:76:84:2e:68:
4b:18:01:ed:06:c1:d7:be:d3:9c:ea:0a:c1:a8:28:4a:f4:62:
75:2a:f1:70:9e:74:79:11:4b:07:f8:65:2f:64:c4:a2:eb:39:
e1:5e:c6:cc:80:d3:55:7f:1d:61:c5:8e:33:b2:c5:6d:40:61:
34:20:c4:7f:24:d6:3b:bf:ca:49:e6:01:4f:db:86:a5:1c:7a:
ec:f1:58:47:0c:15:fe:f1:2f:67:04:69:73:3d:59:d8:56:18:
92:2e:d3:8d:ef:51:98:b9:92:50:f3:67:49:dc:91:22:33:1f:
10:cd:c6:ec:8c:f4:de:a5:40:9a:7a:8f:c8:60:9c:93:81:39:
4e:bd:75:c8:eb:c4:5c:77:76:b1:a6:84:4e:fe:08:51:7f:c6:
63:c0:78:87:3c:e1:a4:d6:e7:9e:53:67:56:c5:dd:28:92:8e:
1c:58:51:d6:bc:dc:55:df:57:60:b0:7e:87:12:1f:98:fa:16:
f1:0f:62:d9:19:a1:cf:1c:19:04:eb:e6:ea:12:cc:0d:24:fd:
79:d6:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:29 2026 by rpki-client