Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: 1/WtblfF+U/OiaJpDWiwv38DbPFMQ8z8NxpxMGQc6oA=
Subject key identifier: EF:AD:C2:27:62:EE:0B:7E:49:BF:F5:4A:32:60:5B:1F:F8:C3:7B:22
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019EBE480FFB9000737C00159525B7943E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1697
Signing time: Sat 13 Jun 2026 00:00:54 +0000
Manifest this update: Sat 13 Jun 2026 00:00:54 +0000
Manifest next update: Sun 14 Jun 2026 00:00:54 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: HlZYzwes9AU6mMgr1/V6j79XopLpto7BTgoJ49pS6NI=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:0f:fb:90:00:73:7c:00:15:95:25:b7:94:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Jun 13 00:00:54 2026 GMT
Not After : Jun 14 00:00:54 2026 GMT
Subject: CN=efadc22762ee0b7e49bff54a32605b1ff8c37b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:59:b3:db:e5:de:ab:d7:3e:c9:6d:b2:a7:
24:df:f4:70:d0:9f:cf:66:d8:4a:f6:4a:18:e6:13:
46:7b:6c:97:22:47:de:a3:da:bf:97:11:fe:53:2e:
5c:d3:98:45:9e:d1:fc:26:99:a1:08:b1:34:f9:d6:
1b:c9:ce:ae:d2:44:68:66:af:3b:5e:bf:1a:67:5b:
c1:2c:a0:14:56:b9:38:93:e5:5c:71:7f:1c:e1:b1:
2a:b5:45:13:f9:f2:a0:0e:30:7b:8e:b3:7f:41:a1:
b4:49:fa:9f:8d:33:28:51:4d:cf:41:1c:16:51:80:
46:d7:1f:8f:21:aa:af:01:9a:85:19:d3:ee:f6:ae:
d3:81:c9:f3:83:11:3f:13:a0:c0:17:7f:c4:ef:c1:
9a:3b:14:be:fb:fe:7e:da:12:6d:91:29:27:0e:c2:
15:0e:67:5c:81:4b:57:f2:5e:89:2b:0d:46:37:35:
ff:b6:29:06:2e:ae:20:5b:67:15:f2:53:27:b7:c7:
a3:a8:d6:05:d3:17:c3:a1:c3:9e:9a:8c:fe:98:90:
f1:ce:4a:59:9e:3a:ed:09:fe:64:e6:eb:dc:30:5b:
ec:3c:6e:13:86:88:3e:92:60:ac:d4:70:34:1e:61:
3b:0e:65:60:a2:e3:64:ee:60:96:af:82:c7:04:32:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:C2:27:62:EE:0B:7E:49:BF:F5:4A:32:60:5B:1F:F8:C3:7B:22
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:7e:da:d3:51:6f:62:d1:ae:86:d8:84:df:56:90:f1:6b:
3c:35:a5:2b:98:e7:f7:81:95:13:c4:c3:01:59:6c:8c:f6:f6:
86:e9:c9:52:bf:c9:9e:d4:2b:0b:72:79:fd:1c:ee:3d:09:1c:
40:c6:76:f4:64:b7:45:17:4b:b5:0b:53:11:fe:c7:e5:c6:e8:
fe:6f:11:01:c7:2b:c1:69:3a:8a:72:0a:b4:0b:6f:41:18:01:
01:94:be:4a:19:a0:c8:a2:c0:89:07:60:9c:42:59:b3:d6:e1:
12:92:32:68:e9:35:9c:38:ba:5c:a0:33:da:e0:0c:6e:73:2d:
a9:2b:f6:30:42:c8:f4:53:b9:96:31:5f:1c:22:52:ef:91:45:
40:91:5c:c1:32:99:2d:e9:87:54:ab:b4:da:78:7b:95:2c:60:
05:99:43:35:c0:93:bb:7e:2d:ac:83:a7:c3:0e:51:aa:de:78:
11:3c:f4:84:19:0f:22:a6:50:eb:a6:19:41:07:c8:47:5e:e6:
bb:ba:28:1a:81:7e:7b:4f:a4:99:e8:24:4f:0e:67:7b:35:ff:
d3:a1:28:95:1a:d4:a6:b1:b4:25:46:5c:36:5d:df:79:f3:ae:
7b:54:b8:88:9a:50:66:ed:eb:95:6a:95:91:39:07:95:9c:7b:
8f:c7:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:56 2026 by rpki-client