Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: hMizUhyueMzxAQANMCms4bcqjcaxQTUjZIYn0xvIDQU=
Subject key identifier: 7A:82:24:54:37:2B:62:08:CB:1E:84:07:09:83:B5:43:11:A2:49:3C
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019D26CD50626DF734C1039FAE06A6041CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 15C4
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: DG5FlQwEDA8SSMryFm4Id0OhbWpgCkBJQOx0OWgTM8A=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:50:62:6d:f7:34:c1:03:9f:ae:06:a6:04:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=7a822454372b6208cb1e84070983b54311a2493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:03:21:30:a6:10:ea:db:77:95:c4:b2:ef:
11:00:23:ca:e8:32:75:dd:85:7f:87:bc:9f:9d:ef:
64:2f:33:d3:23:72:5c:69:52:e1:1a:ad:4f:5c:37:
89:86:e4:80:1d:55:31:e5:52:16:65:6c:c6:5a:ea:
aa:fd:6a:51:13:8d:4f:1a:e6:8a:9c:8f:0e:d8:7c:
5c:03:9f:e8:ae:92:3a:bd:ce:00:32:02:73:6b:cd:
1f:e7:af:1b:80:28:90:70:9d:63:2b:a3:9a:89:02:
7d:88:28:b4:63:89:e6:ae:97:9b:38:28:3f:99:ea:
c9:83:86:83:7e:63:72:e6:6f:97:8a:83:39:b9:5f:
ed:4b:81:f2:78:f9:f6:7e:b7:db:12:53:b8:f8:0e:
e6:09:be:2a:a5:b0:a8:a0:01:cf:2a:fa:1a:f6:9b:
78:c3:10:c5:00:32:ea:78:46:38:92:76:9c:0e:2a:
c7:e0:7f:69:2e:af:ea:1d:44:f1:21:60:3d:18:16:
9d:f3:6e:1f:3a:95:64:41:e6:32:49:93:79:9c:40:
ab:9b:bf:78:66:c1:73:b8:0e:21:4a:23:52:ac:61:
d6:a0:d6:ec:f4:60:69:59:e4:9d:f7:f2:f9:01:04:
23:a8:17:cc:ee:f7:3a:83:34:a2:35:26:b8:6c:68:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:24:54:37:2B:62:08:CB:1E:84:07:09:83:B5:43:11:A2:49:3C
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:0c:0d:8d:88:bd:95:5f:51:9d:42:ef:5c:c6:9b:c0:2b:
c4:02:fb:3c:84:6e:38:b9:23:7c:04:64:a3:0d:61:60:d3:6b:
d1:44:0f:17:c0:5b:3a:61:6c:93:f7:0c:53:4b:b5:eb:cc:34:
aa:c0:81:76:fc:ae:39:12:4c:19:34:c2:55:9f:30:ba:e1:ac:
00:0b:6a:12:cd:00:8c:df:fb:3d:93:62:aa:c1:f3:95:12:8e:
14:f1:50:a6:54:16:5c:f8:d2:73:82:48:27:81:11:40:71:60:
9f:be:12:4c:bc:72:6a:56:06:a4:d1:d5:ab:60:38:40:c2:8e:
18:09:57:2f:16:bc:cc:c0:6c:27:5e:b4:d4:df:b6:b8:04:63:
9e:28:34:84:65:eb:46:cb:6b:6f:08:46:cf:c0:5f:31:41:f5:
79:a5:8f:7b:48:5b:cb:e2:05:78:3f:1b:cc:4f:80:d2:6a:1d:
a3:f6:34:30:e7:e2:4a:65:12:9f:5c:8f:1d:a9:2e:b9:69:0d:
7a:d4:50:c4:e5:ad:aa:06:a1:3a:23:bc:94:26:fc:1d:4c:be:
3f:15:e8:d1:2c:77:52:37:1a:b7:c8:bf:63:49:a1:41:aa:cc:
23:2f:51:d5:a9:7e:0c:7e:de:84:c5:ce:39:87:2f:65:90:f8:
80:69:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:48 2026 by rpki-client