Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: gDl6ZgpHIiIQnkIzT/nfGJgAodmaoMCa6PPDDQHWHF8=
Subject key identifier: 7C:BC:F5:ED:15:BB:A3:FB:67:BF:84:FE:E9:91:2E:FA:44:BE:16:A4
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01A0D3F0216A6C02AC39CB71E0D8D98B6C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 17B5
Signing time: Thu 24 Sep 2026 15:02:04 +0000
Manifest this update: Thu 24 Sep 2026 15:02:04 +0000
Manifest next update: Fri 25 Sep 2026 15:02:04 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: b+JhZoj+FAFdC0d7MX1MhQHQ4sNHgUVHmJxjtzcIHcg=)
2: DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa (hash: yhb5vBNekieAt8tCcz4pxh0ekvD8nMPbWHt3jJMgJRs=)
3: iwqmKLXUuOArXvbBkZW7y-ChZt0.roa (hash: YnoIi/iHGRKLb9cTSBFYYYySVFtx+jH8kBK+SYHWRvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:21:6a:6c:02:ac:39:cb:71:e0:d8:d9:8b:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Sep 24 15:02:04 2026 GMT
Not After : Sep 25 15:02:04 2026 GMT
Subject: CN=7cbcf5ed15bba3fb67bf84fee9912efa44be16a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:81:5a:98:16:5e:e2:b9:c1:6c:84:5f:a6:
9a:da:2f:dc:62:c7:47:1b:ac:c1:52:3e:4d:16:97:
96:92:b1:08:a8:46:fa:7f:34:4e:3a:b4:2d:a1:60:
1a:3a:70:be:70:73:6a:01:3d:3c:28:ac:b4:ee:cf:
19:e7:e1:8d:a2:b2:f1:e9:28:6c:77:b2:55:a5:2e:
ca:5c:c3:ec:18:1a:75:11:4f:ae:97:7f:32:2b:ca:
1e:68:fc:02:4e:57:9a:5b:15:97:7e:8c:af:e9:42:
a9:a3:1e:d7:66:80:90:09:61:4a:db:61:66:bc:c4:
1d:29:a2:50:1c:89:6e:c9:f7:d7:e8:dc:b1:27:ba:
ac:0f:56:bf:06:8f:6f:f0:f5:0a:7d:d9:fb:2e:7d:
e7:a1:12:f1:f8:5d:0e:5c:29:22:2f:22:2d:e1:48:
30:df:19:13:8a:b7:56:cd:03:a1:a9:31:4f:80:1d:
00:38:b5:35:14:2c:a9:f1:6d:45:ab:79:39:73:64:
25:c6:61:5d:7f:01:70:03:f8:01:cb:2a:c5:08:29:
c9:b0:74:dd:23:86:72:eb:c7:4c:31:23:fa:b9:35:
3e:4e:18:f0:83:92:51:83:97:ec:3e:28:c4:56:8b:
35:2e:d0:a5:bb:a0:02:80:79:bb:96:9d:36:3d:9b:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:F5:ED:15:BB:A3:FB:67:BF:84:FE:E9:91:2E:FA:44:BE:16:A4
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:e2:01:a8:6f:bc:32:da:91:54:b6:3a:f7:1d:66:c4:58:
6f:44:6c:71:0f:4e:1b:6e:1c:45:2f:7a:f1:05:e7:32:86:c8:
31:40:28:0a:1a:8b:9b:e1:16:b5:53:d7:8e:9e:83:49:1a:46:
b4:ec:9d:b8:83:5b:1d:7b:7e:61:1c:d5:dc:c8:94:cf:fc:c4:
54:bf:c8:a9:80:c7:cc:8f:36:01:13:fe:28:fb:b3:d2:0c:04:
fa:e5:28:c9:4d:df:89:e5:c9:14:58:e7:39:73:61:7b:70:7c:
e7:af:90:7b:21:a9:41:24:17:2d:ec:ad:35:03:fd:7e:e7:24:
9b:5f:0d:41:42:d1:7b:17:c3:3f:55:eb:c8:19:64:40:63:29:
51:02:59:cc:9c:71:62:30:ca:dd:80:09:4f:1f:45:3d:7e:d3:
12:e4:7f:8e:f0:cc:25:69:72:8a:81:86:25:19:a3:0b:8f:f6:
ad:37:17:e3:83:c6:f2:db:52:79:0f:7f:c8:fe:5d:3d:f5:20:
8c:80:e5:2a:5b:33:d0:e8:1b:2d:b0:2c:70:27:1b:28:1e:74:
d8:b8:ec:e1:1a:f9:31:3b:88:da:11:ba:a6:67:99:df:ed:a9:
ba:dc:78:2a:f2:51:c4:58:0c:3e:81:47:58:59:f0:71:e5:fb:
5e:e8:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:17:12 2026 by rpki-client