Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: im/kZKFb2Xz+CX06vZLxiSROildXbWUp7fc2B+6MVwQ=
Subject key identifier: 1E:CA:94:03:98:FE:4A:B3:F3:71:53:3E:61:1D:E3:D5:33:4F:89:D0
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A0D5396120A78CDBE17859B6C5328AAEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 1A97
Signing time: Thu 24 Sep 2026 21:01:42 +0000
Manifest this update: Thu 24 Sep 2026 21:01:42 +0000
Manifest next update: Fri 25 Sep 2026 21:01:42 +0000
Files and hashes: 1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: /t7Zb6mLHufPtGFEgJSgnptYAHzsmoQkGG/bnX/iDzI=)
6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:61:20:a7:8c:db:e1:78:59:b6:c5:32:8a:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Sep 24 21:01:42 2026 GMT
Not After : Sep 25 21:01:42 2026 GMT
Subject: CN=1eca940398fe4ab3f371533e611de3d5334f89d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:04:81:69:36:c2:ea:14:34:3f:41:9b:8d:
83:f6:dc:9d:ff:7a:2f:c1:69:da:40:0d:a6:eb:55:
60:74:4f:cd:fd:cc:e0:8c:00:b4:1a:3e:f2:8e:45:
56:df:78:ca:fc:0e:7f:8b:66:6d:c7:ff:e5:db:22:
a2:0f:f2:2f:05:ef:b0:68:4c:cf:85:f4:be:75:dd:
8f:53:a9:c7:ab:47:ed:d3:20:7f:e5:5e:ee:52:ec:
46:24:32:5a:05:50:4e:d5:bb:de:df:d8:96:c1:1a:
04:fd:29:69:5a:4f:99:0c:1e:b9:45:51:36:16:e3:
0c:5e:28:08:f3:0d:84:c3:e3:0a:4a:6b:4e:7f:2a:
0f:5b:c9:ea:e3:9e:a1:9b:a8:f3:0e:0a:fc:08:cf:
c3:a2:d6:94:c7:f7:ce:10:9c:a7:25:93:2a:8e:bb:
52:f7:f1:f5:b0:30:66:65:6c:1c:eb:b2:0b:3a:b2:
bd:dd:e3:63:6e:cb:df:92:3c:dd:c4:9d:6e:01:10:
7f:66:5a:e8:f4:d3:41:9d:d1:01:0e:f3:12:93:ff:
27:d4:76:07:fd:0d:d8:af:bd:72:6f:7c:4b:c9:d1:
53:81:e6:62:06:ab:43:35:29:ef:50:18:39:0b:83:
99:3e:50:89:3f:cc:6f:8a:7d:cd:b1:41:95:45:99:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:94:03:98:FE:4A:B3:F3:71:53:3E:61:1D:E3:D5:33:4F:89:D0
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d8:c6:60:88:83:d4:52:d9:36:4b:af:93:11:21:bf:11:47:
2d:b1:43:98:fc:9d:8e:d6:a4:7d:14:12:9b:ee:99:0f:fd:91:
23:4e:36:80:e8:e3:a2:ff:d4:78:c6:2e:67:30:59:06:8e:f3:
02:be:39:95:bb:c3:e1:4e:3a:aa:2d:a4:13:77:73:3e:dd:7e:
00:c9:8f:16:6b:75:35:b2:f4:6f:08:23:2e:0b:ad:99:97:f9:
52:b4:8b:de:a0:e6:82:e5:ec:d0:39:dc:97:ab:ac:28:68:c3:
4b:a1:69:c9:33:32:00:1a:ec:76:5a:e7:63:6d:11:17:86:a1:
68:b4:a7:b7:01:37:a9:65:22:1a:fa:2d:b0:61:ed:e7:01:f5:
8f:8d:f1:6a:01:af:5c:80:7f:a3:ed:ce:03:35:ba:e7:37:31:
33:27:a8:cd:1d:77:cc:a9:ed:f0:87:c9:ce:1c:b5:c2:77:a3:
6e:36:72:a1:c2:e1:59:21:79:9c:24:ab:7d:97:bd:d1:8f:71:
5e:2c:3a:b4:bd:88:ec:00:f1:60:e9:b3:cb:50:65:13:64:a2:
e5:4e:6f:45:5c:3b:30:87:e5:3b:6f:91:3d:27:93:ef:9c:c7:
38:c4:6c:05:88:37:0e:c7:c3:f8:42:da:89:7c:4a:35:ff:19:
0d:59:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:09 2026 by rpki-client