Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: ZmOLtWa83SQrYQT8pRj7rHfl1kCZ2J3Ztw8Fbeo9q1Y=
Subject key identifier: 6D:1D:ED:C8:0B:9B:4F:B4:3D:B3:84:08:22:90:7F:66:55:0F:DA:2F
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A0CDEC9BF8F8F6B5B1C58E1541CD174607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 11:00:30 +0000
Manifest this update: Wed 23 Sep 2026 11:00:30 +0000
Manifest next update: Thu 24 Sep 2026 11:00:30 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: AtvbggIIDx4zfxPutiI3qKKwAgmxj1/a8HqNrKKFF5Y=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:9b:f8:f8:f6:b5:b1:c5:8e:15:41:cd:17:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Sep 23 11:00:30 2026 GMT
Not After : Sep 24 11:00:30 2026 GMT
Subject: CN=6d1dedc80b9b4fb43db3840822907f66550fda2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:d2:52:e8:7e:f4:00:04:80:66:62:02:1c:
80:1c:81:9e:71:03:ea:a8:00:96:c6:1e:2e:9c:7d:
5f:97:b8:6a:89:71:9e:dd:05:74:de:9c:60:6b:8f:
52:86:a4:cc:bc:cd:6b:3c:3c:f9:d7:c3:9f:49:ef:
99:0f:81:d3:80:65:05:34:22:a4:25:31:e8:61:6a:
19:ce:60:35:46:f3:2e:fa:86:36:e3:90:14:11:b3:
02:60:85:22:82:91:e7:46:6e:0e:89:a1:2b:57:aa:
e7:73:93:b3:6a:60:5a:b5:03:e3:75:c8:3b:72:dd:
91:af:08:44:7d:1d:58:78:e9:65:9a:51:ee:43:0d:
15:d6:c5:eb:bf:6f:28:15:ae:ec:9d:3a:90:27:99:
87:07:f1:85:ea:35:a9:51:4a:1a:3b:32:64:36:4c:
5e:93:a8:d6:3f:f8:76:e5:83:52:8a:a7:55:72:2c:
ab:1b:73:69:8a:5e:0c:0b:bf:e9:07:d5:96:6c:62:
35:53:e0:98:8e:65:23:be:8a:47:dc:01:1a:6a:6f:
44:17:03:f5:c6:6b:04:6f:b5:4e:0f:f1:80:11:37:
85:f6:74:c9:84:6e:c9:9b:b3:2f:8e:4d:c7:34:09:
8f:5f:70:f8:7b:dd:85:c7:9b:1b:bf:ce:a8:ba:a8:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:ED:C8:0B:9B:4F:B4:3D:B3:84:08:22:90:7F:66:55:0F:DA:2F
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e0:bc:5a:74:56:fd:18:44:0e:35:3b:09:55:76:1a:9c:3a:
1f:38:aa:b0:f8:f4:58:12:7f:08:b5:3e:4d:6d:30:9c:fe:1b:
30:33:e5:40:f0:66:5f:c4:eb:dd:c1:29:fa:62:a6:77:da:98:
ef:9f:9e:02:0b:93:b8:71:0d:8e:c5:6a:ff:ab:d7:db:97:a7:
2e:b7:6e:c3:fb:a9:28:62:7d:69:a6:ce:24:fd:1a:62:16:cc:
1e:f3:28:ee:78:ee:c0:2e:14:63:2d:48:20:b5:96:90:02:1c:
c2:1c:e4:62:af:4f:b3:74:6a:57:19:fc:94:04:a7:30:83:f2:
9c:41:16:73:6b:80:ce:a2:50:4c:86:54:2d:69:d1:74:e2:79:
37:90:ae:a2:94:9a:85:44:eb:42:e3:39:6b:f5:10:c4:e8:45:
37:c4:ad:24:8f:41:d1:95:64:1b:40:72:dd:44:dc:ce:5a:82:
06:68:f7:0e:95:37:99:a9:9b:77:79:a6:5b:ba:56:2f:ad:e2:
ea:a0:04:01:fa:6b:04:b0:aa:84:9b:c2:9e:f1:05:06:97:98:
98:37:b0:a4:e9:22:bb:4a:e9:4f:17:50:4b:b9:7f:fd:ac:70:
bd:56:a4:58:43:b9:f9:81:4b:52:24:f4:1e:0b:8b:b3:2d:da:
0a:1b:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:31:24 2026 by rpki-client