Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: mFb+zP9wAScDuV1M/FDNVz/iTC66no2eXDDoV9hBSd4=
Subject key identifier: A6:6A:9F:BE:90:C3:80:11:B9:CC:86:AB:4D:24:91:60:A6:43:C9:EB
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 01A0E2507CEABBDE87DE636895ED42BE9800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 1260
Signing time: Sun 27 Sep 2026 10:02:00 +0000
Manifest this update: Sun 27 Sep 2026 10:02:00 +0000
Manifest next update: Mon 28 Sep 2026 10:02:00 +0000
Files and hashes: 1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: IzO/aZTIJ+PokbAFrVivB8vp87/Spsp5kExiNRQU5N4=)
3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:7c:ea:bb:de:87:de:63:68:95:ed:42:be:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Sep 27 10:02:00 2026 GMT
Not After : Sep 28 10:02:00 2026 GMT
Subject: CN=a66a9fbe90c38011b9cc86ab4d249160a643c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:21:32:e8:fe:23:22:dc:d4:5d:84:0d:f3:
6f:b0:f3:53:fd:97:1d:e3:4c:e2:5f:d6:0b:48:12:
46:56:fb:09:ff:69:a3:2c:bc:46:61:dd:e1:53:14:
f8:e8:c4:05:85:96:f4:cf:65:1d:de:fb:e7:ed:52:
09:18:aa:6f:27:ca:9a:0f:95:df:55:0d:f0:75:df:
4f:63:1d:c5:74:42:42:c0:f4:bc:27:d9:97:6e:40:
dc:d0:46:00:31:2c:b7:e0:28:db:27:64:d6:18:5b:
37:65:4b:d2:1b:c7:ef:35:16:b7:76:31:5b:c9:e8:
a1:12:9d:51:dc:63:3a:d7:62:17:a8:10:ec:9d:8d:
57:62:00:fa:70:fb:4b:56:9d:3e:1b:04:59:48:b5:
2d:38:92:ca:2d:1b:c2:f7:6b:37:ec:b4:9e:d9:6d:
0a:94:43:b2:ae:2e:9d:39:59:e9:15:c6:5e:26:59:
a9:28:20:f7:cd:04:db:60:b0:d7:5c:35:86:a9:37:
7e:fc:19:e6:bc:45:bf:6d:b8:f2:af:b9:0a:e0:d0:
7c:9e:1f:5f:b0:25:29:0b:c1:d3:43:9d:5e:32:c6:
c2:d2:bd:0d:6a:04:16:81:da:22:10:33:1d:a7:b6:
54:7a:ee:50:2e:16:d3:1f:24:cd:f1:f8:ef:09:3c:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:9F:BE:90:C3:80:11:B9:CC:86:AB:4D:24:91:60:A6:43:C9:EB
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:44:28:88:60:c4:a9:09:1a:86:db:d0:b6:69:2b:2e:c2:
ba:bd:1c:7f:55:74:61:2e:08:b8:fb:1a:68:c0:74:27:c2:a0:
7a:7b:98:fb:6a:fe:6e:32:7b:68:eb:6f:70:02:38:0a:93:fd:
43:b1:70:ba:85:68:9a:a2:20:99:45:8d:1a:07:8e:7a:51:c5:
4b:69:95:f2:11:41:a6:5b:c4:ab:80:63:db:78:15:42:47:4b:
53:a6:58:6d:99:b9:a7:02:58:ed:d6:f2:61:9b:d8:13:07:ac:
eb:e5:ed:d0:83:d1:e7:e6:b0:76:d2:ac:7e:37:b3:16:98:d7:
48:07:3f:8a:e2:9c:ed:41:61:27:22:86:56:9a:ca:6c:e0:41:
8c:f3:9f:82:31:b2:38:61:e8:2d:8a:e7:a6:f6:dd:d6:f1:b4:
9c:49:b0:e8:fd:cb:dc:a0:12:06:a2:a7:02:6d:90:de:de:2a:
4b:ac:e8:1b:43:46:44:5a:df:51:9b:06:95:0a:eb:7c:cd:08:
9c:18:b9:0d:ca:a7:e2:a3:dd:2c:fc:27:94:71:bc:12:de:f2:
79:ef:33:6e:d1:ee:81:e4:f5:d1:10:fc:99:eb:30:aa:90:31:
95:34:ed:f3:30:27:4b:75:99:0c:c5:92:f2:d7:63:bc:4c:63:
e8:7e:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:14:05 2026 by rpki-client