
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: QDHHd82GJjDVThljMM6Cj6iL8nN971WHLtDoIPtoEB4=
Subject key identifier: 6A:B0:D5:CE:7C:D2:8A:EC:61:CD:7F:47:96:7D:C0:E3:81:18:E1:EB
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01A0D502A71E9136B40A36517D614095FBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 20:01:55 +0000
Manifest this update: Thu 24 Sep 2026 20:01:55 +0000
Manifest next update: Fri 25 Sep 2026 20:01:55 +0000
Files and hashes: 1: MXLkQWE8zIuxoHGVlcaZd96SrB4.roa (hash: lcHwvDQ+XAk7f98SiZArIPBioHZSyx+sbvKWQ8sRywc=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: ETRym7Cc8mfuC6fDQxFcx4bXjow7iDAyi/U50q/xct8=)
3: b7LcPCYeRdGQpVkSfGMCFgIwuO4.roa (hash: lPhW8NF2JY3/TPz1EoWCp4Oh98xvqgHXs5Du14mhgFI=)
4: eHoZqC-FpsIsxyikfNBXh7vaNt4.roa (hash: eOtby622k5yT30g4kvp2rfd8ASydD6AuBYl0+5TdLJ8=)
5: pbrI3o0EUVWtlq_mK6hu8_p9zmk.roa (hash: xcCiXTCw2zSWf2zlwuDfj20h2YVd0n/AYbF0ue9XUxE=)
6: xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa (hash: yBlZ/tOG9gPmYH/MDRBLS8io2Qd573sTgUCpq0O1dzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:a7:1e:91:36:b4:0a:36:51:7d:61:40:95:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Sep 24 20:01:55 2026 GMT
Not After : Sep 25 20:01:55 2026 GMT
Subject: CN=6ab0d5ce7cd28aec61cd7f47967dc0e38118e1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:de:29:bf:5f:ee:85:8b:c3:b6:d9:c8:4c:
e8:72:14:8f:50:cd:02:ae:35:2b:1a:45:f9:b0:f7:
2b:6b:71:f7:ca:87:4e:1b:bb:da:94:fe:e4:87:df:
49:67:b4:b1:96:77:cd:8d:21:65:8e:a7:f7:6d:fa:
d8:9b:98:c5:54:78:9f:31:5d:b6:c0:15:0e:8e:a2:
68:6e:e7:4e:10:f1:3e:3e:79:9e:6d:34:5a:9d:97:
12:39:1a:fc:b1:78:bd:10:e3:44:69:69:ec:75:80:
88:bd:66:ae:c7:87:e3:2a:19:40:2a:cb:61:0f:69:
60:5c:ad:82:c7:32:04:f6:26:d2:a3:4a:3b:39:06:
a2:db:ed:9c:d9:dc:5a:26:92:04:98:c7:44:89:6b:
b0:8b:87:0b:85:d4:4a:cf:3d:ac:24:f5:ff:46:13:
5b:36:5b:ed:7a:ff:c6:4a:ac:02:9b:73:8b:54:12:
72:d5:fe:05:95:6f:85:4d:7e:b3:21:79:f5:50:8c:
99:c3:f2:c2:4e:2d:45:b8:ad:1d:bb:2d:6d:27:23:
d4:1f:33:b4:5d:90:0a:2a:be:e4:e9:aa:2f:f4:37:
23:a4:f0:ef:ab:04:af:c7:28:6f:5e:42:4a:0a:0b:
54:60:fd:af:ed:30:61:84:fa:18:41:de:11:4e:6f:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:D5:CE:7C:D2:8A:EC:61:CD:7F:47:96:7D:C0:E3:81:18:E1:EB
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:0a:70:2e:57:0f:e0:00:aa:ec:ef:ea:b2:27:4f:44:bd:
45:0f:14:42:21:7a:9c:be:2c:9f:f2:24:97:67:6f:c1:e7:4b:
16:71:e0:5a:12:b5:1f:b2:4b:fc:63:66:d3:a5:38:c7:48:cb:
4c:a7:d8:70:de:08:83:8d:41:8f:be:58:fc:5e:18:6e:06:9e:
e5:d7:2d:5a:5f:5c:28:1d:53:f4:4b:15:9a:0b:41:7b:b1:92:
58:ff:35:59:da:45:83:bb:b1:41:90:c9:4a:ff:b4:c4:91:2e:
99:fb:95:cc:21:3b:da:f4:00:90:21:03:e3:43:5d:9f:04:b7:
cb:9d:0a:4e:72:88:f8:ef:68:3c:92:07:46:19:a4:9a:c9:f9:
20:3b:b1:c4:5d:80:07:f2:9c:22:40:ca:10:f7:6e:c0:4f:9b:
6b:e2:3b:d3:e8:d7:f0:dd:f3:e1:73:6a:5c:3a:ae:ea:a9:5c:
60:16:7f:83:8e:2e:df:83:96:51:99:b3:ee:bb:c6:7f:5b:8d:
1e:26:40:c1:39:66:5c:13:a9:e5:59:2d:a8:ae:31:2b:ec:c5:
8e:34:02:e0:38:ae:31:cc:82:1b:48:74:6b:32:a4:8b:68:f9:
fd:42:e8:70:f7:de:84:26:14:a6:ad:4e:82:22:36:26:40:85:
de:ee:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:08 2026 by rpki-client