Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: +ilCqgkI1xu/jNjDKPuM0QNHASPJvLLYoZUgV+iURb4=
Subject key identifier: 7B:8E:B4:8D:20:69:40:96:4C:C5:1E:24:99:07:C2:05:4B:3A:98:F8
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019E1DFE81CF0E631A9C01025EF23C23355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1644
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: L0gDnuqv8Y+5Nepqvm98sMmFcMX9eL8hSeJp5Zq6dpc=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:81:cf:0e:63:1a:9c:01:02:5e:f2:3c:23:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=7b8eb48d206940964cc51e249907c2054b3a98f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:d9:ef:de:06:4a:95:d8:2e:4b:0d:fa:2d:
5e:07:e3:01:9d:72:7a:22:da:04:fe:b2:5b:b7:23:
32:13:bd:0d:01:6f:5a:b4:d4:ac:bd:4b:08:8a:16:
7c:3c:54:fb:02:0b:1d:e7:7b:66:79:da:03:11:6d:
a3:0c:d8:87:66:32:0e:39:46:f9:c5:e7:2b:b6:c2:
81:e1:9d:a8:65:25:90:91:96:49:c5:5c:af:d6:9a:
db:f9:88:ed:bc:f5:2a:aa:71:d3:a5:e6:de:67:de:
dd:4c:d7:36:92:d0:e5:2f:82:28:2f:6e:b7:d1:80:
32:66:9f:12:39:64:1b:de:ac:90:10:5c:7b:2f:ef:
2a:24:72:8d:8c:02:65:e9:5e:ab:e2:7d:b4:f2:4f:
26:19:84:62:45:d8:10:d0:5b:79:45:0f:cb:8a:d9:
d5:d7:e8:94:84:77:c6:48:66:c0:4e:f4:7b:7c:8d:
bf:f8:76:b5:fe:98:d6:9e:dc:d2:67:4b:22:3b:38:
89:e7:cd:d6:13:08:ea:a0:bf:97:04:06:7b:b8:30:
ba:e0:58:6e:e3:2d:62:de:c1:dc:25:df:2f:c1:11:
39:9c:c4:eb:62:22:64:76:bd:e4:5d:cc:50:18:59:
2c:ad:f8:f4:35:5a:0e:1f:f6:66:4f:dc:90:54:43:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8E:B4:8D:20:69:40:96:4C:C5:1E:24:99:07:C2:05:4B:3A:98:F8
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:82:51:50:13:08:49:ee:95:bf:75:52:53:e1:a0:ea:78:
41:43:7f:20:c1:88:68:ee:d5:99:26:53:2b:78:1c:f5:1c:68:
57:37:e7:3d:1e:eb:8c:9d:c0:a1:ac:1c:89:b7:9e:89:86:53:
7e:73:03:7c:52:0d:1a:79:dd:7b:c4:dc:58:29:44:ff:fa:55:
ba:7a:4d:de:f5:c2:d7:c6:9f:43:dc:74:39:13:b3:72:53:c1:
f7:4f:83:23:e0:b5:f0:d1:27:6a:27:67:36:b4:f0:95:36:0b:
58:e1:ce:f7:76:85:ff:a7:63:d9:13:f6:b3:a7:89:ce:c7:22:
46:46:56:8a:58:53:5d:fe:2b:8e:0d:7b:c3:59:a7:a7:27:9c:
ae:77:bd:54:38:f9:69:dd:0f:63:ba:0a:61:6f:15:46:37:8d:
5c:31:7b:3d:94:74:f9:09:30:01:97:bc:e6:0f:13:18:11:55:
67:98:08:fb:c0:ef:10:40:a4:f3:d0:39:ef:16:98:7e:ce:1d:
f4:bd:90:e2:38:90:34:c6:a7:a3:f1:d9:61:50:ed:44:0d:84:
15:59:6b:47:05:41:5d:00:f9:d9:df:22:a6:5b:46:af:4c:c7:
f2:58:c0:b5:40:18:aa:5b:c9:8a:02:0d:44:60:49:71:f3:74:
36:73:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:27 2026 by rpki-client