Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: apROvMKcuWWLldkw6X10d2Qo0w+tshaYS6Y1r3UxsPY=
Subject key identifier: 68:FD:08:7A:0E:B3:10:A9:4E:B7:C8:1B:90:4E:85:F7:5D:83:74:7E
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 01A0DE3C1457372E8DF2D55F3F2A6C108438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 1567
Signing time: Sat 26 Sep 2026 15:01:14 +0000
Manifest this update: Sat 26 Sep 2026 15:01:14 +0000
Manifest next update: Sun 27 Sep 2026 15:01:14 +0000
Files and hashes: 1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: ZP8JBJtO2kH30PbaNWYCOVUVNoszO46TSuoY6HNqRbM=)
3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:14:57:37:2e:8d:f2:d5:5f:3f:2a:6c:10:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Sep 26 15:01:14 2026 GMT
Not After : Sep 27 15:01:14 2026 GMT
Subject: CN=68fd087a0eb310a94eb7c81b904e85f75d83747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:e4:05:88:70:6f:96:45:32:a2:1f:82:09:
9f:c5:dc:18:94:c0:27:80:7d:f7:ec:14:a4:ce:95:
d4:c7:61:12:c7:fd:05:8f:96:c1:fe:91:6e:11:d7:
ab:7d:8c:d9:24:fa:ec:4e:ff:c8:3f:7f:6e:4a:b2:
7a:cc:ff:93:76:fe:82:07:08:30:ec:60:1d:53:f7:
cb:ee:02:b0:77:97:e5:ac:cb:01:61:5d:99:40:99:
20:f0:b1:be:77:ff:99:a8:95:fe:0f:c3:90:94:a2:
27:4c:f1:91:2f:ac:01:34:6a:12:1a:2b:5d:70:f6:
81:b5:08:a1:9a:20:5b:8e:c3:2d:31:16:08:f8:8d:
1c:00:43:76:76:48:a6:2b:c0:50:a6:1f:4e:82:ab:
5c:8e:3d:8f:48:a1:c2:8f:80:99:8b:9a:43:cd:7a:
c5:d2:3e:25:59:40:b0:23:9a:39:50:20:a0:bb:bb:
6c:f0:ac:7f:bd:bb:a6:03:06:75:28:18:b0:e0:03:
40:87:2b:8d:99:e8:05:09:5e:30:34:17:d8:04:7e:
bb:a8:54:99:80:59:c6:59:57:0f:37:89:b7:b0:0f:
34:27:83:69:63:c6:dd:43:79:5c:0e:ad:17:92:22:
58:30:49:9f:48:a4:86:40:89:9e:e3:bd:c0:d0:79:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:08:7A:0E:B3:10:A9:4E:B7:C8:1B:90:4E:85:F7:5D:83:74:7E
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:26:a0:99:54:ab:4f:1f:7c:02:ec:f7:89:c6:e5:8d:24:f8:
a9:6d:80:e1:7a:1f:30:e1:a4:7f:d3:9c:f4:7a:b3:80:ed:09:
cf:0b:40:da:01:6e:08:25:e7:4d:f2:13:b5:f9:49:72:9c:8b:
9a:58:5e:fc:b7:da:39:f3:e4:73:8e:1e:be:85:9e:73:eb:47:
5e:f0:fd:fb:ce:4d:5f:11:4d:3a:e3:20:47:97:cf:4c:1e:96:
af:d3:0f:df:fc:ca:5a:e7:c6:5c:63:92:8b:55:d2:a2:40:d7:
1f:a1:b3:a7:88:f6:a8:46:c2:59:a0:5f:61:ed:eb:87:41:18:
5d:59:58:38:ad:94:b5:06:e3:57:46:b4:76:fe:2c:67:80:23:
e4:6b:aa:dd:91:85:7a:c7:70:e4:ed:3f:f8:e6:7a:70:1d:da:
16:7c:71:dc:d6:5c:3a:96:63:08:d2:af:7b:3a:b9:84:52:92:
2b:f5:d9:6c:bb:51:ee:dc:3f:72:b7:be:ef:7a:da:df:7c:3c:
31:9b:00:51:f0:bb:ec:52:5e:1e:32:86:8b:77:b2:c2:60:58:
8d:d0:96:4e:36:8a:0c:ca:b0:e8:1e:c1:16:92:62:3f:a5:fc:
45:c1:d2:7c:02:af:14:09:b6:04:52:89:95:8a:e2:e9:4b:60:
61:d6:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:18:10 2026 by rpki-client