Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: wgk8xTKLZM6oG1DUbEDCaUKke71rC+yYZHQOXBltHLI=
Subject key identifier: FE:84:5A:3D:19:8C:11:88:DA:AB:D8:C2:B1:1C:4F:64:E8:59:47:9A
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 01A0D9BAAE9FB6BB9DB4C864EA03763611CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0FE6
Signing time: Fri 25 Sep 2026 18:01:25 +0000
Manifest this update: Fri 25 Sep 2026 18:01:25 +0000
Manifest next update: Sat 26 Sep 2026 18:01:25 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: rmkPG/zB05JGwDnB6K0peHtoFcuIhkfbxnQke5RNP/M=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:ae:9f:b6:bb:9d:b4:c8:64:ea:03:76:36:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Sep 25 18:01:25 2026 GMT
Not After : Sep 26 18:01:25 2026 GMT
Subject: CN=fe845a3d198c1188daabd8c2b11c4f64e859479a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:ae:66:ac:39:44:ce:87:37:1b:d9:19:aa:
47:6b:ec:fa:fc:80:62:32:62:a3:0d:d1:51:d5:83:
fa:e7:7a:35:8a:a6:82:66:0f:58:6f:58:df:0b:2f:
51:1d:fa:08:b8:1c:a2:37:7f:4d:78:56:36:97:69:
bc:e0:41:ba:3d:b3:23:81:9d:fc:a9:bb:ba:18:c3:
c2:2e:99:ad:ca:a3:1a:9f:46:67:2c:3e:e6:83:48:
cc:66:3e:b4:f9:bb:70:96:1d:5d:0c:ed:fa:ed:ec:
ab:a7:1c:c0:dc:c0:49:3d:be:93:16:c2:c3:5d:d7:
26:78:ff:45:f4:dc:5a:ea:72:af:2c:c6:17:83:d6:
10:2c:48:3f:dc:e0:08:7d:79:6c:d3:1b:90:50:5a:
2c:71:b8:c4:f7:26:ba:09:5c:ee:f1:86:dc:e5:1d:
64:02:7f:6e:eb:52:c4:d0:cd:5f:04:4b:3f:e1:f8:
e0:0b:1a:65:7d:a2:b4:56:9d:42:b8:a5:c5:69:11:
bc:52:b8:e7:7c:22:a6:8d:ac:02:44:90:9c:9e:3b:
69:dd:db:37:f8:3c:36:2a:cf:25:cb:02:3f:33:31:
82:77:a2:57:0e:27:40:e4:60:74:f3:0d:39:c3:0c:
35:8b:2c:07:d8:38:67:35:c5:92:2d:37:da:f8:97:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:5A:3D:19:8C:11:88:DA:AB:D8:C2:B1:1C:4F:64:E8:59:47:9A
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:b4:23:c3:ef:63:15:a4:d9:40:56:25:f8:97:de:f1:6b:
6a:91:e4:f3:12:ba:bb:63:09:d3:49:b0:02:32:2d:a0:a7:01:
fd:84:6c:60:c1:d5:f2:47:bf:84:d5:00:fa:3d:6f:bc:cf:25:
ae:6f:df:ef:97:f6:0c:f3:cf:6e:c0:9d:66:97:e8:56:e8:fd:
92:07:00:75:62:fa:fa:b9:32:c6:e3:8d:c2:9c:f5:c5:1d:87:
27:66:7e:b2:c2:ae:2e:b7:8a:9b:71:9f:f5:9c:42:d2:95:69:
e0:11:a6:d3:80:28:76:13:a7:ac:1e:99:2f:21:df:c5:62:48:
f4:93:84:2a:9c:e3:7a:b2:d7:b6:06:16:13:5f:69:f6:17:1e:
4b:99:84:a1:82:c4:67:9c:d9:21:7a:4f:82:7f:c8:59:19:ce:
bb:9a:5e:6f:ee:2d:a2:ee:52:a5:9f:aa:73:e9:bc:e8:80:aa:
31:dc:e7:81:ec:c5:71:25:a3:b9:01:1c:e6:ab:c0:83:52:07:
03:d3:97:ce:5b:4f:7c:a4:5e:ff:0d:56:a7:aa:7d:18:90:30:
7d:3a:9c:e7:19:37:83:b2:c9:74:fd:1a:d7:34:85:8f:9f:96:
4d:98:0f:8d:c6:3b:28:8d:bf:c7:eb:61:c9:d6:29:04:1d:d5:
77:14:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:11:14 2026 by rpki-client