Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: BIbGI9qTFx2Q3U25RB1IoHEbU6+WtxdeByx3/3OAMpA=
Subject key identifier: 74:48:DB:DA:0E:D1:42:D2:35:19:6B:72:97:88:71:AC:ED:66:EF:EE
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 01A11E2CD44BAF0B3B2FA6E91D0AEE1A9076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 127F
Signing time: Fri 09 Oct 2026 01:00:16 +0000
Manifest this update: Fri 09 Oct 2026 01:00:16 +0000
Manifest next update: Sat 10 Oct 2026 01:00:16 +0000
Files and hashes: 1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: a/fUX5x4SxvlIC43WuZTjBjJSwxGX2HWNG96T83uwW0=)
3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2c:d4:4b:af:0b:3b:2f:a6:e9:1d:0a:ee:1a:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Oct 9 01:00:16 2026 GMT
Not After : Oct 10 01:00:16 2026 GMT
Subject: CN=7448dbda0ed142d235196b72978871aced66efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:f4:cc:3b:f2:53:f3:89:51:a1:21:d8:54:
71:a0:5a:f6:a1:2b:56:51:e1:50:4c:60:eb:85:a0:
98:cc:55:07:24:8e:2e:69:32:ca:03:ff:6c:31:dc:
b4:a2:89:e0:ff:f4:e1:85:f4:06:61:bc:9e:e2:a8:
07:01:42:9e:7e:3a:8d:bf:b6:26:b0:06:9d:be:24:
33:29:0a:77:55:24:48:39:61:38:8e:9d:ba:db:13:
95:a5:de:46:75:16:07:69:51:ef:2b:bf:0b:75:ae:
eb:86:d5:98:40:a8:a9:cc:df:aa:d7:b9:15:a9:f7:
24:8b:d7:16:7b:94:0c:ac:9b:61:a3:1c:6f:8f:38:
cc:03:09:3d:72:46:f3:73:d4:d0:6e:4a:47:39:28:
3b:be:51:32:f5:81:51:73:13:ba:2b:a7:03:aa:92:
51:24:f3:90:c5:20:d2:b7:6d:32:7b:33:af:c5:f8:
22:5f:de:40:ec:10:30:b7:93:ee:80:84:cc:c8:fa:
b1:95:4a:17:b2:81:b5:25:e7:59:5c:1a:35:aa:2b:
df:8e:37:66:2e:db:45:be:62:ca:fb:1a:8a:9e:97:
b0:f7:64:19:57:03:d4:a1:ab:a4:9e:29:6f:e7:fa:
18:f4:8a:5c:1e:f3:2d:b5:0c:ab:ee:f2:c1:1b:bb:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:DB:DA:0E:D1:42:D2:35:19:6B:72:97:88:71:AC:ED:66:EF:EE
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ec:0e:20:aa:16:6e:69:70:1b:49:85:06:3c:5a:4e:d3:a3:
17:ae:ab:66:87:fb:be:ad:fd:27:73:c2:e4:20:02:e0:db:0d:
e2:16:a6:d0:9a:61:43:e5:98:a2:d0:21:ab:6f:87:39:a3:c9:
6f:ef:60:14:ad:ea:ca:12:a1:61:72:49:f9:e6:46:ee:31:b2:
73:69:70:82:98:b8:a2:67:6e:2a:5c:59:26:27:e2:c2:ce:d5:
fa:1e:20:d0:7f:7a:98:68:e0:24:56:43:8c:f4:db:cc:f4:83:
00:48:2c:3d:7f:df:39:32:53:3a:e6:8f:6f:87:f9:90:d7:cf:
ef:96:ae:54:dd:33:40:b9:14:dd:78:75:32:a8:a6:09:7f:a0:
cd:77:38:b0:d4:65:a2:be:a1:a1:c4:b5:8e:20:b4:6d:f1:cb:
27:11:2e:09:52:3a:eb:0d:9e:e2:e4:60:23:78:52:18:35:82:
6f:72:2b:e1:63:15:76:f8:c0:df:4b:7e:fb:78:d8:55:f4:32:
a1:01:29:03:25:6f:af:5e:38:8d:94:1b:13:6e:23:cd:af:2f:
28:90:ec:77:21:41:1f:63:c2:4b:7a:db:15:18:17:10:27:1d:
7b:3e:e8:11:ab:bc:ed:33:00:66:c2:44:b5:be:6c:c8:51:e5:
4a:8a:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:58:34 2026 by rpki-client