Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: 8Dq/GRY2lgXpnsuosWMNBmBiw0I9rvrulfOlgZmz4/A=
Subject key identifier: A1:18:C2:C4:08:69:B9:B3:09:44:BF:EC:01:E7:BC:B6:AA:1D:89:E0
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A0DCF28107A030243FBBE4492854F4CF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 1A9B
Signing time: Sat 26 Sep 2026 09:01:15 +0000
Manifest this update: Sat 26 Sep 2026 09:01:15 +0000
Manifest next update: Sun 27 Sep 2026 09:01:15 +0000
Files and hashes: 1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: u/Gss17bvHkH9CbGEaj8sVxMO7zQZZFhffnZvVvaa8M=)
6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:81:07:a0:30:24:3f:bb:e4:49:28:54:f4:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Sep 26 09:01:15 2026 GMT
Not After : Sep 27 09:01:15 2026 GMT
Subject: CN=a118c2c40869b9b30944bfec01e7bcb6aa1d89e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:ca:af:6e:f2:7b:39:23:50:97:49:eb:9e:
e8:2c:59:ed:8e:75:e7:37:84:a8:de:b9:28:9e:be:
05:99:f6:4d:34:53:b4:9d:16:d3:e4:40:bb:7a:70:
6f:3d:30:57:3a:58:1b:98:6a:73:60:65:e8:4f:23:
d5:e0:52:bf:26:11:b1:fe:86:21:ab:89:58:d8:c3:
bb:d7:6e:b2:88:1c:fc:25:44:7d:be:69:61:fe:54:
4c:8d:0d:c4:63:9d:a7:9d:aa:44:fc:7a:8e:e5:6c:
fb:42:ba:4d:62:cc:65:df:5a:79:de:32:7a:9c:3e:
d3:3d:01:37:ee:bc:45:a2:c1:e8:cd:f7:fe:fb:30:
bc:c6:5b:39:9f:01:94:7d:00:5f:2f:8d:1d:b0:ae:
3e:d9:a8:ef:d6:46:21:b1:19:0b:55:b2:72:ec:41:
51:00:48:58:a3:46:bd:45:d1:b7:5b:bb:f5:76:74:
75:94:47:bf:02:5b:9a:95:25:ad:0b:9e:9a:46:78:
07:e5:84:18:9a:0e:78:9e:84:fa:98:1c:48:ab:bf:
4a:ac:70:bb:86:b3:7a:87:fe:27:34:7e:e8:5c:18:
5e:3d:86:3c:e5:0e:f2:a6:17:d8:a1:fb:b7:c6:44:
e6:70:ff:ba:6a:56:8b:90:65:ed:3c:3d:42:1b:17:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:18:C2:C4:08:69:B9:B3:09:44:BF:EC:01:E7:BC:B6:AA:1D:89:E0
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:88:11:b8:96:0f:17:b0:7a:23:82:92:6b:61:83:ec:99:a5:
22:e9:68:04:06:e3:30:ce:0e:39:12:45:f4:98:02:6a:53:98:
0a:7d:d9:84:55:64:be:a5:a4:b9:99:b6:43:0b:8a:48:34:03:
25:c8:fc:5d:e5:a8:89:db:ff:72:41:d2:9f:5e:19:a0:bf:4b:
ce:45:dc:0e:a9:83:8a:3d:4d:da:64:82:53:52:5f:17:c0:7a:
fa:af:ff:b3:7b:fc:de:90:a4:d2:4a:a2:47:13:92:66:dc:c4:
fb:cd:9e:4b:7d:08:e6:c3:65:0b:26:a3:de:c1:df:5e:8e:9e:
9c:8a:ce:a7:fe:32:50:b9:c5:f1:ae:c7:0c:39:7f:2b:8b:24:
e0:d4:98:cf:6f:9b:dd:27:c5:9a:b4:49:b0:ea:27:64:b5:1b:
a2:e3:24:bd:95:14:01:97:f6:f5:c5:ac:db:78:b1:67:ba:d8:
c1:11:a0:77:72:24:5f:b5:56:a8:19:41:84:7b:81:3b:8e:e0:
0e:02:50:4f:23:0a:4b:08:f2:80:f1:d7:12:f7:cd:d0:9f:fb:
ce:d8:9e:19:25:02:88:46:30:d1:a7:bb:1a:ce:4b:45:f3:55:
5e:a5:93:c7:62:60:f0:39:28:dc:86:b0:4c:d0:ce:56:1f:eb:
c5:17:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:22:37 2026 by rpki-client