Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: i+CfINxpfPsecsDq2sSV/sxjc418+Vuw4S1BC0t+whk=
Subject key identifier: 1A:A1:F2:B0:76:A4:B7:A6:49:25:B4:2B:C6:3C:87:F1:4A:45:09:AB
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 01A0CF6D5A8C16127CC8B4845DC8B3F6A493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 17A9
Signing time: Wed 23 Sep 2026 18:00:45 +0000
Manifest this update: Wed 23 Sep 2026 18:00:45 +0000
Manifest next update: Thu 24 Sep 2026 18:00:45 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: w51tl9CFTgXEsAe+i/jKwEsoBI8Bkek+R6zhN6r95yM=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:5a:8c:16:12:7c:c8:b4:84:5d:c8:b3:f6:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Sep 23 18:00:45 2026 GMT
Not After : Sep 24 18:00:45 2026 GMT
Subject: CN=1aa1f2b076a4b7a64925b42bc63c87f14a4509ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:f3:4c:cb:8b:18:91:7d:4d:e9:d0:d4:b6:
e2:5e:dd:b1:e2:d6:bf:15:08:2f:3f:57:d8:42:b9:
13:8a:a5:8f:d8:d2:0f:be:ae:c7:fc:12:e0:73:86:
c7:57:b1:f1:82:52:00:54:50:91:6c:28:94:47:58:
b6:74:f2:88:56:29:49:e2:08:cb:8a:86:c1:3b:77:
52:38:fa:29:0f:07:9f:35:11:0e:0b:e6:69:bc:ec:
4e:ad:ba:f0:de:e0:17:ae:6e:47:39:5a:db:08:40:
d4:05:51:d6:b3:c8:c0:e2:53:8b:a5:e7:b3:ea:da:
34:cb:22:6c:f2:ca:61:50:2b:91:c3:e1:e5:9b:88:
92:c6:07:23:46:fa:8a:b7:c6:1a:50:fa:1e:fd:34:
c8:c2:f9:f9:a2:6e:1e:3a:23:df:e1:7e:a1:98:b0:
11:1d:a4:f4:c9:a0:9b:e1:22:2f:0a:34:5f:a1:1a:
48:84:26:fe:20:b8:51:8e:fc:ce:9a:fe:c2:e6:e1:
6b:4e:58:c1:5b:7e:28:bb:60:fe:68:dd:60:5e:ac:
41:fb:d0:a3:bf:55:a3:09:e0:18:e0:2a:3f:46:f1:
0a:c5:c0:5a:d9:21:c0:48:05:45:c3:e3:b0:12:39:
f0:a9:98:82:fc:e9:00:15:42:76:d2:8f:bd:ad:61:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:F2:B0:76:A4:B7:A6:49:25:B4:2B:C6:3C:87:F1:4A:45:09:AB
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:46:05:ec:ba:0f:53:7a:55:d2:f0:a4:2f:57:52:37:45:26:
56:73:2f:ad:0f:f0:c5:79:d7:17:d4:f8:e2:69:88:07:0e:e0:
43:1b:06:41:cd:f3:54:02:39:d0:b8:cc:f4:f0:52:13:22:cc:
7d:02:ce:62:88:4b:8a:ee:8f:c2:d5:43:02:eb:87:87:fd:61:
42:b1:3f:8a:af:b7:8e:c0:44:48:33:64:a8:84:de:04:e8:0e:
bd:b6:7f:85:b2:c3:2b:e7:e9:d3:20:58:20:12:d2:c3:d4:47:
19:8d:54:57:cb:a4:e2:67:fd:12:a0:b2:1d:65:2b:95:b7:93:
85:68:f4:9c:8d:a7:c8:d5:f4:3e:e3:3e:10:23:cb:68:ae:be:
a9:61:36:09:a9:eb:fc:d1:92:73:34:76:45:98:af:8e:bd:67:
c3:ff:f5:89:f3:ac:2c:05:5a:ae:48:d5:f7:f8:2b:bc:d6:5b:
53:d2:c4:44:53:90:7e:83:5b:d9:45:fe:44:f0:06:30:f9:2b:
58:db:78:c2:91:c8:14:2b:e6:36:7f:9a:9a:3f:b8:a1:5e:8e:
f1:bb:78:ec:f2:d3:02:32:32:cd:06:07:ad:b4:33:a2:88:b7:
44:6f:18:70:1b:7d:b4:6f:ca:50:6e:ec:98:ea:b2:7f:3b:16:
10:e2:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:58:32 2026 by rpki-client