Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: 78nBhTbCLMFy3MY3ZM4Eto3kyN28AQ1z+ol3x4sKQis=
Subject key identifier: 25:CF:E3:91:20:3D:C8:81:6A:01:49:93:86:AE:A7:4F:CB:CB:EF:62
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 01A0E1E1A2F9211A72E650DB8E57D6401526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 08:00:55 +0000
Manifest this update: Sun 27 Sep 2026 08:00:55 +0000
Manifest next update: Mon 28 Sep 2026 08:00:55 +0000
Files and hashes: 1: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
2: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: FcEOF8RL7IMi6w/ZN66YnCnp88sYf63dY3GnOfzwviQ=)
3: scZvkun21Is5PRqjjJOokr7vv3k.roa (hash: nZkf46asWgI7bQf2kDqMzJ8K9GjokdXc1dqOvremZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:a2:f9:21:1a:72:e6:50:db:8e:57:d6:40:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Sep 27 08:00:55 2026 GMT
Not After : Sep 28 08:00:55 2026 GMT
Subject: CN=25cfe391203dc8816a01499386aea74fcbcbef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:70:77:80:2a:2b:a5:87:d6:a1:df:1e:11:
e6:83:12:00:43:5a:67:17:cc:4f:98:10:b8:3a:36:
28:fe:97:45:92:5e:8a:42:8e:08:af:c7:c7:9d:bd:
5a:7c:64:36:6b:52:2c:81:a8:10:0e:4f:f7:75:26:
49:fc:5b:0e:7a:52:b4:04:f0:c8:d8:be:06:b8:27:
59:a9:16:dc:5e:e2:b2:18:82:b3:c5:a2:d1:04:6e:
61:9c:c2:31:85:2b:5c:ad:1d:2d:70:f6:40:51:10:
64:c9:9c:60:ed:d7:b2:ab:9d:2f:47:e5:89:48:60:
85:bd:0e:19:c2:35:bc:a1:32:75:ee:b9:bc:ef:80:
b9:c1:29:52:22:de:44:1e:17:27:51:cc:73:d8:b1:
86:20:93:d2:f6:05:22:75:ba:de:60:61:e0:9d:98:
5c:91:34:d6:5b:01:18:2d:0e:bf:01:2a:bb:af:04:
2b:aa:cc:41:fc:be:fd:b3:d6:01:5e:e7:5b:b1:9c:
25:d5:18:c6:52:34:4a:5c:6a:93:97:fc:58:01:fd:
ab:a3:3b:1e:bf:86:d7:be:ba:5d:b2:da:9b:1f:35:
91:0d:08:18:24:11:e6:f0:8a:13:6f:bc:37:26:b8:
81:7d:b9:ee:ff:ed:10:5b:97:db:c5:a9:03:84:fa:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:E3:91:20:3D:C8:81:6A:01:49:93:86:AE:A7:4F:CB:CB:EF:62
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:f8:c9:6b:30:7e:4a:a6:79:f5:24:0a:a6:f7:c3:56:48:
d9:31:7e:2b:bb:be:1e:b2:67:1d:b5:08:a8:bb:10:a7:62:67:
89:71:0d:f9:c7:51:69:75:a7:47:93:f3:14:66:cc:ef:a5:29:
cf:0e:69:41:b3:49:d8:b6:2a:7f:e2:0c:e3:2e:9c:a7:27:12:
a4:b8:d5:62:71:53:81:71:78:89:3e:a8:a5:ad:55:55:13:db:
f5:91:b8:d8:b9:b0:fd:a9:39:2b:ca:2a:28:41:ad:9b:a3:01:
cd:19:5c:17:bd:1c:0e:f7:42:e8:27:96:85:e6:a1:31:e5:3a:
07:b6:b4:c5:fa:be:7f:3d:16:3e:47:43:cf:77:6b:87:5e:31:
6b:f4:3a:28:aa:2a:22:2e:41:65:20:82:b5:3b:23:12:00:50:
ba:85:e0:ff:1a:ab:7e:e4:c0:30:41:95:21:53:b6:fb:b4:e0:
3d:11:75:4b:5f:4c:8d:af:35:ca:5f:55:8e:32:a8:45:dd:d4:
f6:78:46:b3:9d:2a:da:29:f2:75:cb:9e:7c:77:e5:ee:54:97:
c4:ee:a4:78:1f:ae:e0:d4:db:3e:67:2e:8f:49:ab:74:3b:81:
34:3d:1e:22:6b:27:2e:ca:62:37:d5:e8:f4:d2:e4:5d:a7:37:
6f:c6:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:49:34 2026 by rpki-client