Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: rx7Q08cNI3uUqU6CxyYrlUwa5Zr7V9ij0T7N3FQh1fY=
Subject key identifier: B1:91:48:B7:EB:39:BF:01:A7:82:4C:08:F1:19:C1:D5:C5:8D:9D:30
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01A0D8DF0A7851657998AB9443871FA35372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 14:01:30 +0000
Manifest this update: Fri 25 Sep 2026 14:01:30 +0000
Manifest next update: Sat 26 Sep 2026 14:01:30 +0000
Files and hashes: 1: MXLkQWE8zIuxoHGVlcaZd96SrB4.roa (hash: lcHwvDQ+XAk7f98SiZArIPBioHZSyx+sbvKWQ8sRywc=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: +OTn7UI1xxefUcFLfy9zb56yAiHBLPVUqrQG0i+zuQQ=)
3: b7LcPCYeRdGQpVkSfGMCFgIwuO4.roa (hash: lPhW8NF2JY3/TPz1EoWCp4Oh98xvqgHXs5Du14mhgFI=)
4: eHoZqC-FpsIsxyikfNBXh7vaNt4.roa (hash: eOtby622k5yT30g4kvp2rfd8ASydD6AuBYl0+5TdLJ8=)
5: pbrI3o0EUVWtlq_mK6hu8_p9zmk.roa (hash: xcCiXTCw2zSWf2zlwuDfj20h2YVd0n/AYbF0ue9XUxE=)
6: xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa (hash: yBlZ/tOG9gPmYH/MDRBLS8io2Qd573sTgUCpq0O1dzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:0a:78:51:65:79:98:ab:94:43:87:1f:a3:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Sep 25 14:01:30 2026 GMT
Not After : Sep 26 14:01:30 2026 GMT
Subject: CN=b19148b7eb39bf01a7824c08f119c1d5c58d9d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:28:76:50:82:bf:4c:35:e3:8b:f2:95:2f:
bb:ec:c8:6a:05:44:24:d4:b6:f2:27:f9:69:c4:18:
69:ad:f0:a1:4c:77:f2:cf:f7:76:07:b8:1a:4e:06:
af:53:d9:db:47:b8:b4:00:9b:79:06:1c:39:90:c6:
56:43:a4:34:89:c9:2d:d6:11:c6:75:4c:4d:d7:f0:
74:6f:03:c6:d0:9b:6c:26:9e:08:65:97:3d:6a:a2:
e0:10:8d:3a:b0:fc:b6:64:cc:f9:4b:17:55:75:b2:
a0:d3:63:91:58:40:52:a9:cf:e0:6f:7c:b2:17:82:
d3:96:61:ab:04:73:4a:17:9f:45:97:8b:a3:d5:2a:
ff:00:dd:53:d3:96:ab:00:1c:12:92:c1:e1:df:57:
7b:8b:b1:bf:d7:93:d7:df:95:98:17:a9:60:32:88:
0d:30:fb:2c:62:bc:aa:62:ff:75:ed:48:86:9e:34:
d9:e7:97:06:d3:16:25:aa:b8:8a:fe:14:0f:a5:11:
63:b5:32:ff:da:27:88:5c:e9:21:35:b7:81:57:74:
14:e2:a3:a5:31:69:5b:08:36:2d:46:ee:61:6d:58:
fd:b9:05:83:28:2c:8b:69:66:14:a9:b2:05:c1:a9:
87:66:18:de:41:43:96:e3:4a:42:a6:32:e3:5d:91:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:48:B7:EB:39:BF:01:A7:82:4C:08:F1:19:C1:D5:C5:8D:9D:30
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:63:fc:d4:03:59:a3:64:d7:60:8d:94:e4:49:7c:34:f8:c8:
02:0f:b8:15:4f:ce:9f:34:a0:97:ac:7e:72:ca:a3:f5:a0:d7:
00:d1:5d:5e:32:3b:35:f8:5c:60:f1:5b:ae:79:0a:fc:52:c2:
9c:7c:5b:b0:da:bc:ce:f9:9c:13:b1:1e:42:17:7a:a7:f3:fb:
8b:3b:95:3f:5b:87:88:11:cc:31:55:4f:51:93:fe:ff:f8:c0:
d2:ac:d0:51:fc:e8:cf:d8:50:4f:9d:da:6d:f3:af:3b:cf:0c:
55:c9:2a:94:18:d8:e3:ff:60:5b:6e:e4:6e:57:9b:b9:46:ba:
67:e2:e9:17:60:b2:dc:d6:fc:70:35:10:36:1c:a8:99:67:92:
6e:d4:8d:18:d7:22:29:a0:33:7e:9c:d5:1b:40:5f:6e:0b:03:
88:ad:91:d4:95:93:d2:ec:66:cb:44:f3:3f:e9:b6:69:c0:44:
42:25:7b:8c:8e:f0:01:23:e6:f4:92:ad:4a:51:c6:14:96:9f:
d7:22:6a:39:58:d8:82:d7:97:2f:25:00:c3:80:64:0f:99:3c:
5f:21:d6:e6:7d:68:6f:cf:da:f0:e6:27:f9:d7:06:8c:4d:92:
02:40:e3:d1:ca:43:90:1e:8b:1d:41:2e:e2:24:d7:21:c4:93:
f4:81:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:28 2026 by rpki-client