Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: gNqA+GzRzt5Eh5FAsdn4ke3f6hgknni8fa4O14FTn4A=
Subject key identifier: E4:CC:B5:93:59:CB:C5:A0:EB:F9:19:3E:33:72:21:0C:CF:4C:1F:F1
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A0EC65BCF5A8697532221B99E015B04A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 1AA3
Signing time: Tue 29 Sep 2026 09:01:25 +0000
Manifest this update: Tue 29 Sep 2026 09:01:25 +0000
Manifest next update: Wed 30 Sep 2026 09:01:25 +0000
Files and hashes: 1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: cwDrh9VXctYIIQ60nJrcq54/wblHSz2xOSMCkdUhq2k=)
6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:bc:f5:a8:69:75:32:22:1b:99:e0:15:b0:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Sep 29 09:01:25 2026 GMT
Not After : Sep 30 09:01:25 2026 GMT
Subject: CN=e4ccb59359cbc5a0ebf9193e3372210ccf4c1ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:19:0a:05:35:d8:9c:03:be:89:75:b4:7d:
3d:88:f5:4c:78:cc:cb:86:be:62:76:35:7b:0f:25:
cf:7b:fe:3b:e1:f8:8a:8e:a0:dd:0d:37:3c:b6:0b:
23:11:9d:08:35:c1:42:df:c7:c1:fd:76:2f:a1:ae:
f4:83:b3:10:da:e0:40:b9:74:1d:75:f8:9d:1c:02:
e5:ce:6c:cc:fd:e3:b5:eb:2e:f2:35:a6:fe:3a:ad:
c8:c3:4e:96:22:9e:78:33:41:b3:77:18:98:4c:d9:
11:8e:dc:0a:b6:35:ec:53:e1:b3:c1:dd:3c:30:ab:
e8:4f:ff:c5:04:2a:74:a5:0b:33:d4:d7:9c:a9:07:
63:f6:49:8d:f3:09:fb:ff:aa:38:8c:6b:9b:c5:00:
60:d7:bf:e1:fd:1b:76:9f:13:9c:72:fc:c9:03:07:
34:c1:5a:ce:0c:4c:ea:c9:43:50:35:0f:c2:1d:4e:
9b:83:91:ed:e8:06:dc:71:82:e4:06:72:f8:1b:b2:
01:eb:65:18:b4:fe:c1:41:e7:9b:08:9a:25:0e:36:
a0:df:b4:e8:9d:58:38:fa:9e:ad:36:0b:8b:30:5f:
04:c6:69:67:d5:37:0a:cb:c0:c4:0c:fa:d2:8a:76:
f2:0c:0d:c0:16:b2:ab:60:d3:bc:d1:ba:cc:c3:dd:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:B5:93:59:CB:C5:A0:EB:F9:19:3E:33:72:21:0C:CF:4C:1F:F1
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:0e:1f:d4:df:4d:9a:ce:b6:84:28:62:63:f0:71:64:0b:
e5:46:ef:d8:da:b9:de:a1:67:d3:41:8b:2e:80:0e:92:38:1e:
18:4a:ad:ef:15:0f:08:0a:b2:56:1e:ad:c8:25:a4:f9:7a:04:
5a:92:1e:1c:e8:8c:1d:d7:1b:10:b3:b3:29:6d:8d:2f:85:9b:
b3:2a:f1:47:cc:5f:26:b3:81:0c:4f:d7:d3:4c:20:09:fd:37:
02:fa:53:9c:67:bc:00:72:83:80:f2:75:45:65:75:3b:83:15:
f6:28:61:28:57:02:2a:62:3b:a0:8c:72:7c:87:11:40:2e:79:
61:30:46:dc:11:f0:7b:d6:78:44:87:2c:8d:3d:b9:b7:e4:34:
c7:72:f3:87:5f:2d:30:2c:2f:46:c1:ef:a3:5a:54:db:51:54:
d2:42:0b:c0:0c:e5:ee:7b:44:f6:06:2d:1b:28:5c:2a:1c:0d:
d3:ba:d6:d6:a6:69:55:54:14:11:44:18:7b:73:a4:a5:9f:ca:
74:0f:3c:72:58:ba:55:ca:e7:a8:0d:8b:91:14:e8:f7:29:4f:
ed:48:42:ab:73:8c:4f:89:b7:e6:5c:19:2e:63:87:ba:85:1e:
45:1d:76:b8:c5:cf:ef:69:4d:71:55:6c:a9:f9:16:56:01:d2:
db:65:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:26:05 2026 by rpki-client