Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: jzNNxeXbU7f2u6fw229g4oclSN1XBJ7FnlmVsa99jZI=
Subject key identifier: C0:18:43:C1:1C:BD:51:92:7D:61:31:97:3B:E8:0C:2B:A9:8A:BF:D1
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 01A0DFF456115776AD039E73F5DD8F7512E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: EE
Signing time: Sat 26 Sep 2026 23:02:07 +0000
Manifest this update: Sat 26 Sep 2026 23:02:07 +0000
Manifest next update: Sun 27 Sep 2026 23:02:07 +0000
Files and hashes: 1: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
2: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: aREFRKGVLFzvZDaJqytMSd9uzNSWulcAQfloeOJ+9EE=)
3: scZvkun21Is5PRqjjJOokr7vv3k.roa (hash: nZkf46asWgI7bQf2kDqMzJ8K9GjokdXc1dqOvremZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:56:11:57:76:ad:03:9e:73:f5:dd:8f:75:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Sep 26 23:02:07 2026 GMT
Not After : Sep 27 23:02:07 2026 GMT
Subject: CN=c01843c11cbd51927d6131973be80c2ba98abfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:fd:bd:06:a7:af:43:de:12:62:8d:f8:81:
57:8b:2f:4e:24:dd:72:60:82:71:ae:66:3a:39:3b:
f0:c3:e7:30:e1:02:e5:cd:81:fd:f0:28:d8:90:55:
3d:54:77:15:60:c2:ce:6a:03:a1:4c:1a:1f:f1:c2:
20:17:3b:ed:cc:28:e0:0e:58:3d:25:ac:d0:61:22:
04:43:bf:c5:b3:f7:e9:da:50:90:41:d0:1d:6d:86:
f1:73:1a:ef:a4:7b:a2:8d:14:0a:f8:65:41:d2:87:
a8:9e:f5:b7:22:f8:f8:70:05:50:5d:ad:ce:8b:40:
1f:fb:b7:79:5f:cd:44:76:6f:92:59:1f:76:88:3e:
84:47:2e:c8:4d:ca:4a:bd:2f:4a:2a:50:29:02:b8:
91:71:4f:aa:05:70:b3:87:8a:42:a0:2f:0f:19:c1:
ce:3f:41:87:5d:1c:b7:6b:a1:25:6e:f4:ab:7d:91:
07:f5:07:98:69:3f:6d:3e:79:21:ae:99:ef:1f:9c:
c1:51:bf:b5:ee:f4:5a:4e:e8:b0:89:2c:ec:2b:c4:
0c:6b:5c:06:a5:1e:53:89:ff:b9:57:ff:25:f7:e9:
1f:e6:3e:1b:3a:5f:c0:87:8c:56:2c:5f:15:d9:7e:
9a:22:3d:6e:96:eb:a2:57:dc:57:6e:02:14:9a:51:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:43:C1:1C:BD:51:92:7D:61:31:97:3B:E8:0C:2B:A9:8A:BF:D1
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:27:e1:12:25:b3:86:42:65:b3:28:fc:1b:b2:01:be:01:64:
20:33:9e:f7:b1:23:c3:be:40:5d:1c:38:6a:00:b4:a9:7a:a4:
2b:86:22:25:6e:97:9a:59:29:6f:b8:99:d4:ba:37:15:5f:26:
2e:74:47:6d:8a:98:d5:39:36:44:f6:46:c2:cc:10:4f:5a:bb:
1d:88:0c:dd:39:ef:2a:10:3e:cb:af:33:f3:8a:ff:1d:a8:66:
83:5f:a8:2f:04:c0:db:9f:d8:eb:ee:bb:b6:a6:7b:bb:26:eb:
5f:00:27:22:7a:d3:ed:5f:86:e3:15:2d:58:5f:f5:71:00:e4:
1c:d7:e2:e8:00:f7:70:91:ce:72:99:49:ea:2f:e8:af:e5:b4:
a3:20:5f:76:de:4d:24:be:84:fd:fa:54:3d:a2:5f:ea:3a:6d:
80:9f:0a:91:f4:29:36:f0:f2:d4:5d:0e:68:1b:b2:6c:fa:25:
4f:4c:f1:97:50:80:3c:47:ce:c5:b5:db:26:f1:f2:2e:81:eb:
c7:b1:57:02:4f:8e:fd:9d:17:0e:89:d7:7d:17:00:99:40:c6:
48:49:89:12:4f:3c:93:a8:e8:53:a9:c2:c2:0d:0d:65:db:d9:
c7:ea:00:42:f5:80:27:6c:1c:9e:da:92:83:d2:6c:10:a7:1b:
63:e0:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:13:14 2026 by rpki-client