Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: BRGDdmV7Tu3elm92Mlrhxzkyih/gvFX77bRtEfkOkZo=
Subject key identifier: 5D:A2:A1:7D:34:F1:63:95:F8:AB:B4:4A:38:94:57:C0:2D:80:D2:9C
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01A0C09F2F95C41B7C8F4EB4495B31337005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 17AB
Signing time: Sun 20 Sep 2026 21:00:52 +0000
Manifest this update: Sun 20 Sep 2026 21:00:52 +0000
Manifest next update: Mon 21 Sep 2026 21:00:52 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: a7mPnzRbjrmzvQNfXnwvJfsQz8g4NbJsWrL4AWVy7CM=)
2: DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa (hash: yhb5vBNekieAt8tCcz4pxh0ekvD8nMPbWHt3jJMgJRs=)
3: iwqmKLXUuOArXvbBkZW7y-ChZt0.roa (hash: YnoIi/iHGRKLb9cTSBFYYYySVFtx+jH8kBK+SYHWRvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:2f:95:c4:1b:7c:8f:4e:b4:49:5b:31:33:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Sep 20 21:00:52 2026 GMT
Not After : Sep 21 21:00:52 2026 GMT
Subject: CN=5da2a17d34f16395f8abb44a389457c02d80d29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:93:99:b9:8b:69:4a:8d:64:ed:0d:bb:90:
8f:a1:37:0b:21:aa:1e:7a:c4:a0:01:59:bb:8d:82:
8c:78:e0:55:24:f8:79:54:6c:ce:b7:cc:c8:db:92:
9c:df:7e:b6:30:75:71:ce:60:c7:20:0c:8f:99:d3:
40:bc:cd:d5:5a:12:07:96:b1:8f:94:68:85:37:3c:
fd:55:c5:56:a3:28:bf:1b:1b:90:71:07:64:11:c4:
4a:9c:b8:f0:ac:11:84:e6:e3:8d:0b:ca:b4:90:31:
d8:a4:2c:c9:dc:33:d9:73:28:f1:aa:4c:e8:bd:01:
a9:82:d1:ef:f8:a0:1b:5e:16:47:db:01:33:11:80:
b7:fa:c3:e7:fc:fd:12:3a:77:af:b9:2b:a5:03:eb:
37:b6:4d:14:3e:35:22:38:ae:45:65:f6:f2:bf:c4:
18:3f:bb:50:d7:07:ed:a6:63:13:28:95:25:0e:93:
ec:eb:d7:9c:96:98:ea:f9:09:eb:7a:4e:a0:a4:13:
4d:f8:81:11:4e:a9:25:ef:cb:53:a5:dc:9f:5e:42:
16:fe:e9:46:99:90:59:0a:3f:4e:85:04:fe:45:38:
e6:cd:08:86:8a:b5:48:c6:9f:e9:12:ef:52:f2:b9:
3b:9d:ce:22:7c:7d:9f:37:46:f1:b6:cc:ea:5e:f3:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:A1:7D:34:F1:63:95:F8:AB:B4:4A:38:94:57:C0:2D:80:D2:9C
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:3e:df:09:dc:da:d9:04:9c:53:eb:6f:7f:f6:76:e0:4d:
ad:93:56:b9:85:1c:4c:77:4f:e7:98:95:76:70:14:d4:a5:82:
bc:53:35:b5:46:4b:54:a9:c6:19:63:01:56:44:63:51:f2:d9:
60:9b:07:e3:3c:56:e6:9c:0d:0e:bd:e5:83:1f:c8:bc:f3:ae:
3b:e2:50:86:41:71:ac:01:02:bb:e8:e9:58:94:9d:c3:a4:71:
86:58:3f:16:c4:94:fc:b9:43:03:c5:9c:af:94:70:86:91:60:
0e:74:1e:ca:1e:1b:7f:dd:34:fa:0f:86:71:84:09:e5:7f:40:
2f:48:10:1c:5b:33:24:7d:28:76:af:5b:1f:ef:ae:32:33:f3:
51:36:a5:7f:a3:cb:94:ab:c1:3b:16:fb:64:f4:15:6e:0c:b0:
2c:08:bb:94:ff:d2:9a:9c:c4:f6:c8:16:e7:86:a0:e4:01:23:
80:aa:b4:10:0c:ec:e4:64:3f:b3:4c:ae:d2:59:9f:b6:10:eb:
43:ea:38:d3:db:7d:45:26:72:20:c8:15:0e:31:50:f0:56:e3:
f7:da:9e:1f:80:b0:7c:27:f4:d1:54:d5:4f:bd:4a:91:76:f2:
1e:8c:62:08:28:b3:a8:28:05:7b:d3:a4:9b:5d:05:09:c1:3a:
a3:3f:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:04 2026 by rpki-client