Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: SAXozrIpTQlnEuC/iITjCkIZIzrhhWHRL/OGcOHqsCU=
Subject key identifier: EB:E1:75:AD:84:A3:A9:23:48:BE:55:12:83:CC:68:0C:3C:26:DD:00
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01A0C2567C98C54736CA8CA56E1ECDB49A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0CAD
Signing time: Mon 21 Sep 2026 05:00:42 +0000
Manifest this update: Mon 21 Sep 2026 05:00:42 +0000
Manifest next update: Tue 22 Sep 2026 05:00:42 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: KfI+8p/D1+EWLmG4E+Gt/zyuOn2fXcwJs7uHjSfdObQ=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:7c:98:c5:47:36:ca:8c:a5:6e:1e:cd:b4:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Sep 21 05:00:42 2026 GMT
Not After : Sep 22 05:00:42 2026 GMT
Subject: CN=ebe175ad84a3a92348be551283cc680c3c26dd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:42:13:5d:e1:e9:49:29:99:fe:c6:06:54:
74:56:5a:95:07:7b:5e:9f:0b:cc:fd:b2:cb:20:29:
37:c3:8b:31:57:0e:c7:b8:62:20:08:55:1b:28:79:
c2:63:45:d1:8c:35:ac:30:99:ed:69:76:bb:e3:c1:
69:9f:34:01:b6:44:6c:94:b9:fe:67:09:dd:69:81:
90:61:8f:25:a3:27:7e:77:1d:10:3b:6c:c6:fd:ec:
87:98:7f:00:cb:ce:06:75:a1:38:a8:c0:ca:d8:da:
64:3e:70:2b:27:88:60:69:c2:16:9a:72:02:9d:73:
4d:32:61:55:f2:bc:65:77:ed:ee:b0:cc:97:cb:b9:
c6:45:d3:ca:b6:40:52:43:3b:3a:6d:b5:07:fd:7e:
a4:84:18:67:a7:96:3b:be:54:e4:14:09:f1:13:ed:
27:3b:8a:08:b3:c7:fd:2c:af:0c:02:98:a9:23:de:
9c:2e:5a:51:73:93:57:8d:08:46:c4:84:b8:5a:d6:
30:31:a8:10:4d:8c:b7:e2:83:8c:37:17:ca:9c:9d:
b0:f2:c5:f9:e4:ed:61:b9:2a:2a:2a:2a:5f:74:ba:
fd:ae:03:49:0a:f7:1b:fc:0d:b3:4c:2d:a2:33:8a:
28:ad:ac:2f:93:b5:95:2f:35:79:74:d0:ea:66:e0:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:75:AD:84:A3:A9:23:48:BE:55:12:83:CC:68:0C:3C:26:DD:00
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:89:25:e8:a4:6d:08:b2:fa:2c:6e:84:cb:95:50:f6:0d:
1f:4d:8e:39:57:bd:c5:96:2d:b9:0e:7a:09:04:ee:c2:e8:7a:
54:0b:46:f6:dc:0b:32:1a:f6:b9:60:bc:4c:66:3c:34:cd:ce:
c5:2a:ff:0b:42:38:e8:46:57:41:f1:d5:af:94:41:1f:e3:bb:
38:51:40:f7:f0:10:cc:7b:d6:f9:84:22:e3:6a:92:e9:98:d9:
ee:f1:ad:41:a5:7f:e7:73:b9:ca:4a:a5:15:ad:18:2f:67:25:
a9:97:79:d4:44:7f:81:17:20:62:f7:89:64:e0:0c:0d:42:08:
5e:a9:5e:c9:c6:7b:e1:65:58:59:12:52:e3:1b:9c:ea:41:4f:
b9:c8:e3:69:e5:47:77:fe:18:21:df:13:c5:e3:32:dd:b9:57:
8d:ac:00:41:96:87:4f:94:c5:1b:93:b3:40:01:b4:a2:3c:75:
7c:38:04:7a:ea:f1:95:83:fa:7a:5c:8e:f2:8d:e6:f2:54:35:
a7:c1:1a:af:59:f1:54:7c:5f:42:b6:6d:80:1f:26:e9:3a:d1:
62:64:37:64:10:ea:c7:d6:b6:44:12:59:a0:a4:3e:00:dd:a1:
88:9d:de:a8:2f:e4:d9:27:6c:91:74:92:0b:ab:c0:06:56:70:
2c:76:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:30:14 2026 by rpki-client