Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: MqJ30m1JdjOlgcCBpSJz+M7laM2rToWK9xafaGVeuKs=
Subject key identifier: FE:D8:B1:7E:DF:DD:87:FD:00:CA:4C:7A:98:53:A7:48:8E:47:D1:48
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 01A0DFBC70F42A7E5EEF131BCC9720ECBF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 22:01:03 +0000
Manifest this update: Sat 26 Sep 2026 22:01:03 +0000
Manifest next update: Sun 27 Sep 2026 22:01:03 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: xk0EblDBVoJXcBnq5sdEPgLvkuKtQJZ4LTwHG6P6zag=)
2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:70:f4:2a:7e:5e:ef:13:1b:cc:97:20:ec:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Sep 26 22:01:03 2026 GMT
Not After : Sep 27 22:01:03 2026 GMT
Subject: CN=fed8b17edfdd87fd00ca4c7a9853a7488e47d148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:e2:09:b5:90:3b:9c:09:66:f6:d2:a0:6f:
96:61:9f:eb:74:fb:b5:68:1a:63:a0:5b:44:f1:32:
a0:99:68:e4:a1:12:a6:8c:01:d8:7a:9e:79:9f:42:
7d:36:5f:78:43:91:ea:2d:c8:a3:8a:d7:f2:f9:f7:
23:08:04:03:a2:89:0f:ba:08:81:a2:6a:e2:0d:95:
9e:e8:23:9c:be:0a:0a:19:27:af:2f:6c:39:25:c3:
27:60:58:fa:7b:e1:6b:08:41:ef:97:18:00:77:c4:
e5:3d:c0:e9:2b:63:f4:37:9e:62:c9:60:1d:a9:34:
1d:ef:14:a0:06:b9:3e:fc:88:52:74:44:92:c3:c6:
21:43:0f:de:e9:f4:9d:56:c3:46:1d:2a:db:b6:8a:
69:7e:8d:2d:65:2f:64:76:69:49:5b:60:51:b5:7f:
a3:88:d5:1d:4c:74:5a:f9:77:87:42:6c:47:fc:07:
64:4d:94:99:73:83:e8:5f:66:fd:4b:93:de:ae:77:
e4:37:26:32:f5:bb:9f:87:16:52:57:3b:14:7f:60:
97:9a:2f:a6:50:6e:69:3f:ef:f0:91:6c:c5:31:13:
24:a8:aa:5d:6c:48:dd:03:e3:42:be:36:a5:cd:ed:
21:34:14:1d:18:d7:64:6e:4b:e2:94:2d:d5:5b:f9:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:B1:7E:DF:DD:87:FD:00:CA:4C:7A:98:53:A7:48:8E:47:D1:48
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:91:0f:9c:d4:f4:66:1f:13:17:12:85:06:d0:bd:e3:72:4a:
12:43:61:23:6b:64:dd:d9:e3:a1:fd:92:2e:cf:92:c1:7a:b1:
dd:cf:42:f3:f4:10:26:fd:3b:4c:47:8e:2a:9f:76:8a:52:6f:
93:13:12:e0:b5:66:63:a9:4e:9d:31:d9:4b:4f:f7:c7:6f:0f:
77:b4:87:dc:19:ba:44:b6:4c:ee:ab:f7:bf:91:06:2e:7b:64:
a2:d8:c3:a5:22:3c:d1:f1:68:7f:44:4f:f0:05:37:37:c4:02:
4a:e7:5d:52:5f:35:bf:fd:03:34:f4:f5:7b:57:26:cb:5c:b2:
a2:40:34:11:18:f3:dc:f7:f4:1a:83:3a:ef:78:f0:c3:02:f3:
2a:05:4c:f3:aa:cd:06:27:cf:64:36:cd:25:1b:cd:d0:c4:38:
4d:78:90:96:4d:af:ad:80:d9:db:92:59:cd:2d:98:d6:64:d1:
99:c5:d3:62:df:44:0b:a2:95:dc:72:67:87:1d:ec:24:27:82:
8e:e7:44:d7:35:0f:cf:f4:7d:39:c5:99:7f:4f:06:e1:05:66:
a7:e4:bf:e5:0f:17:d8:4b:80:e2:06:c0:a7:bc:24:05:2f:77:
e9:6e:3c:91:36:7d:aa:78:3f:83:f1:05:b7:cf:00:73:3d:5c:
b0:06:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:32:42 2026 by rpki-client