Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: +w6PeKVlshHANhvpgNFNbl0RaKf9lbPoQrOQ5z6fD8c=
Subject key identifier: 09:DB:69:EB:5A:88:68:C7:EA:10:66:74:FF:6E:AC:CA:0C:98:24:DC
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 01A0C2C40C6F66D967B3525428D5FC62B3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 07:00:23 +0000
Manifest this update: Mon 21 Sep 2026 07:00:23 +0000
Manifest next update: Tue 22 Sep 2026 07:00:23 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 1ntGz0VTS7IhyJO+usTNd5Jny426QNMlAQ0u+KNqwsg=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:0c:6f:66:d9:67:b3:52:54:28:d5:fc:62:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Sep 21 07:00:23 2026 GMT
Not After : Sep 22 07:00:23 2026 GMT
Subject: CN=09db69eb5a8868c7ea106674ff6eacca0c9824dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:08:52:d0:25:af:a6:63:12:a9:16:66:f5:
9f:4a:c9:67:5f:33:6e:d0:9a:ec:b5:ec:cc:46:54:
19:d0:64:d5:0b:10:b8:a6:17:be:34:ce:c5:29:df:
58:af:75:92:2a:b6:69:92:2c:8e:71:0b:0a:7c:c4:
77:a0:09:92:5d:ae:82:b7:17:9a:cc:d3:45:b8:7c:
ba:0a:aa:8b:03:19:98:6e:c6:6e:35:b5:6a:3e:a4:
8e:b4:a1:78:19:fe:de:35:51:c0:63:28:07:86:f0:
1e:74:c9:13:71:01:0f:d3:f9:54:bc:cf:27:5d:93:
f5:99:b1:e3:ec:a2:6b:e6:5f:f6:1a:af:a0:9a:f8:
70:34:da:c1:1c:23:05:b3:1f:b8:0b:52:fe:0c:46:
6a:bb:72:8d:6f:d4:70:1c:73:9a:ba:0e:53:bd:aa:
26:0f:56:2b:e4:5d:4a:85:3c:13:a5:de:66:f3:b8:
97:1f:b6:95:5c:2e:e6:d5:79:fc:79:52:54:fa:6f:
88:4e:68:95:9c:16:06:92:53:db:4e:b6:d7:a1:e8:
b7:fb:38:45:32:1d:57:1f:4f:4f:54:84:05:64:0b:
5f:bb:60:06:1e:a8:d7:da:06:60:1b:d3:95:69:2d:
15:fc:04:6a:09:01:90:d1:64:f2:48:ac:ae:27:51:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:69:EB:5A:88:68:C7:EA:10:66:74:FF:6E:AC:CA:0C:98:24:DC
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:84:02:47:ae:4a:88:a5:1c:50:a2:3a:94:15:56:a2:8f:
77:87:8c:fa:16:a7:97:df:a3:ff:d7:68:b9:9a:fe:61:bc:8b:
5a:6c:62:a2:0e:bb:ce:c1:e3:3a:24:c3:80:09:83:e0:74:47:
3b:cf:21:87:23:a4:5e:b5:ec:d0:b3:fc:63:bc:4f:9f:2e:87:
7c:2d:50:7c:cf:a5:a3:79:b8:a5:9a:cf:65:91:82:0c:dd:18:
e2:d7:ea:88:73:7b:28:92:de:3d:89:04:87:31:2b:0c:da:72:
1e:bd:26:48:92:fb:55:8b:e0:ea:38:c2:93:eb:4a:87:e9:25:
13:a3:0a:3c:c0:d9:98:d8:99:18:a5:6b:67:96:46:0f:5c:39:
70:38:4b:b5:98:78:42:a6:84:16:d7:ed:ea:05:58:f5:27:d4:
56:1b:7e:2b:48:4e:43:13:51:30:e9:31:9e:54:fb:dd:16:d4:
f6:b9:b0:a2:61:95:00:c2:f9:45:a0:64:51:a0:87:b8:18:79:
16:78:13:f2:ee:16:e0:c3:ee:ad:34:f6:5c:4a:74:a8:58:91:
77:30:45:26:95:0c:58:cb:36:56:e7:07:dc:7a:67:e0:fe:fa:
d9:39:21:57:e2:5d:3c:49:41:46:1e:60:92:ca:ba:56:74:99:
e6:d4:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:24:14 2026 by rpki-client