Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 9mPl0Qcipv4R30ESOrpkNNvh8sWpnYyRq9SPvWWM0/E=
Subject key identifier: 32:AF:17:A6:C5:DE:78:45:08:8A:6B:46:E6:C5:C0:E9:B5:14:7F:29
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01A0D538B8CD0CF1BAD4DECCD16A941A1205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 21:00:59 +0000
Manifest this update: Thu 24 Sep 2026 21:00:59 +0000
Manifest next update: Fri 25 Sep 2026 21:00:59 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: F9OHrV7LDSNiRX//CznRAlrjZ1oRlGSt0lPMEYYxy44=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:b8:cd:0c:f1:ba:d4:de:cc:d1:6a:94:1a:12:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Sep 24 21:00:59 2026 GMT
Not After : Sep 25 21:00:59 2026 GMT
Subject: CN=32af17a6c5de7845088a6b46e6c5c0e9b5147f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:f7:77:9f:07:54:80:ce:79:e3:74:04:3d:
29:8c:ff:d5:c0:52:1d:60:99:3d:c4:de:16:d7:47:
d8:f8:b2:4d:7d:14:96:03:2a:d4:4b:ec:41:e7:d1:
db:75:82:a5:b8:8b:43:b3:25:41:89:fc:de:31:ad:
f0:be:17:07:5f:06:34:cd:2b:e3:a0:cc:98:7f:ff:
41:3b:2c:d9:cd:a1:6a:4b:fc:3f:7d:1a:28:31:d3:
85:79:65:a5:f4:86:96:04:eb:02:0a:fe:8b:5c:3c:
43:5d:a8:73:f7:45:55:4a:d9:4f:41:0e:53:d6:e8:
5c:4a:e2:85:d6:c9:bb:e7:cd:47:33:d1:31:3d:c2:
4e:4b:fb:e4:3d:18:0f:03:04:16:44:ac:7d:55:d1:
77:bd:ca:cf:33:64:5b:bd:ea:3c:1e:d4:c1:72:cd:
36:b1:dc:dd:cd:27:46:7e:e8:c2:ab:4e:cb:84:50:
c4:9d:32:59:83:18:72:d4:ce:bc:c3:54:3c:4a:ad:
25:29:ae:e6:ba:82:a4:de:78:0e:37:44:40:dc:91:
af:0c:4b:96:c8:83:87:ab:34:1e:21:c9:27:f9:92:
c9:f0:8d:74:2a:b9:08:08:a7:60:3b:24:6d:d1:6f:
60:3b:f8:ba:90:3f:1e:da:8d:e8:49:3c:a1:d8:d2:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:17:A6:C5:DE:78:45:08:8A:6B:46:E6:C5:C0:E9:B5:14:7F:29
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:00:72:53:b7:b8:53:f5:c2:ce:d4:48:98:ea:39:88:f9:
5b:3e:26:3a:03:41:ea:30:18:28:7c:d3:b2:3d:a2:de:2f:41:
4b:1f:e4:3c:67:da:db:ea:0b:df:89:bd:d1:ff:a1:1c:9b:76:
cf:a2:08:f6:f4:bf:b3:26:a0:09:a8:8c:69:a5:b5:67:ff:f3:
1b:d1:4b:56:36:e6:ad:80:03:5a:45:18:bb:9f:19:55:85:04:
c7:96:43:a6:7e:4e:ac:d2:18:bb:13:d5:b5:a2:5b:21:37:7b:
3a:aa:f9:22:40:21:29:80:34:e2:5c:b6:e2:13:c0:30:95:72:
00:bd:d9:70:a3:42:28:9f:7e:20:20:15:0c:db:22:4c:b8:a7:
04:8f:0c:64:4d:82:da:f4:3c:71:fa:0a:f4:54:2f:cd:60:87:
12:48:be:75:b2:c6:9e:fe:fe:9a:52:ab:b2:37:d9:a3:25:db:
3b:39:c6:6b:8e:ad:df:20:62:c0:28:cb:51:ab:8d:74:8f:86:
75:ce:7d:88:4c:05:8c:a2:90:c0:7d:49:3d:e0:83:b4:5b:ed:
65:ad:04:89:f5:17:29:a6:0a:23:b4:93:1e:5b:f7:5a:14:30:
10:3d:28:f9:a5:22:83:a8:3e:7a:11:b9:4e:5a:6d:40:0f:ab:
cb:a6:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:10 2026 by rpki-client