Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: 2oTYZiY4e3OsGZDf/t+GO9Zh9OxFFtYvqJ+i6nNmkq0=
Subject key identifier: 6C:E9:69:49:6A:59:C4:95:6E:FD:D3:DD:64:F2:75:34:E5:3A:93:FA
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A0DB71C1B25CE235B093254583327E53B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 02:01:00 +0000
Manifest this update: Sat 26 Sep 2026 02:01:00 +0000
Manifest next update: Sun 27 Sep 2026 02:01:00 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: A37Qg/7fq/VnmDPLrXwIpJzTSlDixPAOxgrlzLXePMQ=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:c1:b2:5c:e2:35:b0:93:25:45:83:32:7e:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Sep 26 02:01:00 2026 GMT
Not After : Sep 27 02:01:00 2026 GMT
Subject: CN=6ce969496a59c4956efdd3dd64f27534e53a93fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:16:cb:3e:f0:b4:7c:f9:79:3b:d9:ac:0c:
cb:49:a2:86:13:8f:e2:75:8c:57:a8:a4:80:d5:3f:
dd:26:5a:7c:11:fd:53:94:c3:3c:44:68:c9:d3:9e:
83:eb:f9:d1:bc:d5:9b:2d:d8:d0:87:71:e5:ea:d0:
74:64:46:2a:18:ac:7f:d9:b8:61:c2:60:59:92:bb:
69:c4:5c:74:8a:4b:2b:fe:34:62:dd:78:b3:76:a7:
73:d7:9f:31:d0:ae:a7:89:6b:30:59:86:68:b5:be:
1c:f8:6a:13:bb:09:92:14:f4:90:8d:7e:70:cd:58:
91:7d:12:02:38:cf:1d:a4:ba:1b:e7:04:14:52:6a:
8c:36:31:7d:44:70:2d:c9:27:f0:2f:9a:b6:f9:8a:
1c:34:b2:9f:26:46:17:ec:a6:d2:48:2f:12:e1:9f:
15:21:8d:c3:99:e5:1a:96:9b:62:7a:9a:cf:ce:09:
0d:d4:66:8d:38:c7:30:22:81:e8:a0:7d:30:e1:78:
d9:6c:e4:72:16:ad:4b:09:06:80:1f:c2:1e:d4:f4:
a3:38:38:57:24:00:69:ca:a5:36:fb:56:28:59:69:
45:15:cf:9a:ed:cd:7f:d4:52:7e:04:bf:a1:de:af:
fa:07:bc:49:58:9d:96:0f:8a:a3:aa:32:11:15:2e:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:69:49:6A:59:C4:95:6E:FD:D3:DD:64:F2:75:34:E5:3A:93:FA
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:23:55:f2:59:f0:d3:24:ab:ce:89:2e:19:7b:60:b5:d2:
ce:fc:d9:f2:c6:96:c2:84:c5:f2:aa:2e:65:bf:65:1d:18:75:
21:c1:6a:fe:7c:0b:c1:99:0f:83:18:0e:3c:62:52:74:70:68:
0e:6a:89:4b:53:75:24:a2:8e:c2:5d:f3:80:13:e0:03:05:cf:
bb:60:22:e2:0e:0b:b0:2a:62:fc:08:ce:ad:ed:49:8d:c7:de:
67:3f:c2:2b:c7:c0:70:43:ea:36:05:a3:97:b2:1f:f9:98:31:
81:03:c6:d4:5e:34:41:b2:d2:07:e6:75:1d:13:ab:17:78:10:
54:d1:23:e0:97:09:b2:2a:23:65:2c:42:a9:3b:43:3b:07:81:
c1:42:d9:d0:5e:be:33:fa:54:a3:68:66:19:f4:d2:95:a8:12:
b4:ac:b2:88:a2:83:db:70:e6:4e:e1:22:53:43:27:8c:45:26:
c3:84:94:b1:b6:ea:5d:4d:54:dc:d3:e0:9c:20:d0:c1:df:5d:
41:6c:2f:7f:4d:28:59:0f:14:4b:c5:37:e5:b1:46:11:d0:5f:
f1:b5:04:c9:ea:0b:4c:77:b2:d4:c7:d6:30:5a:4a:6c:c9:4b:
5f:96:d9:7c:47:5c:bf:72:a8:06:10:1f:66:eb:bb:a7:63:c8:
0e:24:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:27:19 2026 by rpki-client