Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: Q+AXG6g0HZPlnIXr5CAWLF65ZeXzpiTWSt4NasAGPhQ=
Subject key identifier: A9:EE:0D:13:FA:8A:C3:A2:41:27:A2:AE:11:79:41:C4:4F:70:B5:EB
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019E1FECE829871BC673B6A0C01D0154DC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 06:01:20 +0000
Manifest this update: Wed 13 May 2026 06:01:20 +0000
Manifest next update: Thu 14 May 2026 06:01:20 +0000
Files and hashes: 1: VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa (hash: MN3OM8Px4rr+GRLiVct7muu1ZFs7Cc/Qcnx5KlMSz48=)
2: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: g8RgKgFNQlpXxX5mPbp06PJ4tXpOw5g59PAhtiYSsNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:e8:29:87:1b:c6:73:b6:a0:c0:1d:01:54:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: May 13 06:01:20 2026 GMT
Not After : May 14 06:01:20 2026 GMT
Subject: CN=a9ee0d13fa8ac3a24127a2ae117941c44f70b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:77:d1:0c:c8:d6:0c:45:91:d9:35:47:97:
1a:c0:40:4f:de:59:06:7d:0d:c7:98:86:a8:e6:34:
06:19:c6:fd:49:ee:89:d1:79:31:9c:47:a7:a8:2c:
91:d3:f8:69:ec:e3:7a:e3:e0:74:52:3a:ef:7c:f8:
aa:ae:48:95:d6:6d:58:90:b8:44:dd:da:e4:79:f0:
fa:69:3d:e0:dc:ef:04:5b:d2:cb:ab:2a:cf:99:1b:
61:27:f6:e2:6c:d6:c6:ad:01:d5:b8:08:72:dc:6a:
cd:87:a4:61:90:99:de:f5:50:c5:c8:95:a2:42:ad:
05:49:55:e7:4e:db:f2:26:27:fd:66:e3:a5:6a:fb:
eb:c2:14:b1:bc:26:fb:6b:19:00:e4:ca:3f:e6:7c:
bb:b1:87:bd:56:81:a1:5c:07:99:d2:17:0e:d8:ec:
8c:32:ea:0a:7e:82:c6:80:f3:2b:b7:e7:2a:52:74:
e8:9c:7b:00:e4:08:32:c0:13:93:3d:08:70:0e:20:
02:ec:66:ea:9c:88:f8:07:66:f5:ea:f9:2b:6c:f3:
be:eb:a6:2e:32:9c:07:b0:74:54:be:d0:a9:da:04:
a9:dd:54:34:06:8f:29:74:54:86:e9:17:52:8c:ce:
84:c2:d3:75:7a:f3:42:31:20:e1:e9:0c:91:50:b2:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:0D:13:FA:8A:C3:A2:41:27:A2:AE:11:79:41:C4:4F:70:B5:EB
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:35:20:a8:a6:e0:b8:71:46:10:f3:0a:83:6f:db:40:cc:
fb:1f:8b:89:e7:4e:f2:9a:dd:de:8e:a8:40:8c:12:9c:6d:2a:
ea:6e:93:22:52:37:ac:57:a6:ee:f1:eb:70:7f:92:ef:61:ab:
ff:a7:fc:55:b3:e1:50:76:8f:f8:4f:c7:81:56:51:49:06:be:
14:90:dd:8e:18:6c:8c:50:bb:b6:45:28:fe:2e:f8:ed:9f:9a:
27:59:24:22:56:74:63:5d:8d:f7:47:9c:34:70:29:88:7f:79:
df:bc:df:05:50:f4:e2:a8:60:a8:fe:62:43:7c:2f:f4:a1:60:
c3:0b:6d:3c:fd:6e:3c:1c:02:48:55:f7:8f:62:58:fd:a3:cd:
54:fb:28:01:94:06:26:c1:c0:e5:01:33:0f:99:43:cd:ec:9f:
c1:9d:79:0b:29:5b:df:19:58:d6:f5:b2:63:93:c2:ff:23:35:
a0:df:79:2a:ca:44:f9:3a:f6:1f:dd:1c:2c:ca:9e:61:fd:7a:
f7:57:63:ed:12:95:76:56:98:f3:d7:4a:ca:b2:7e:26:28:e3:
1e:6f:be:70:14:fc:9e:66:41:5e:e8:2b:f6:53:5a:56:b0:b4:
b3:a7:df:c7:86:ae:44:02:60:4e:05:e2:da:5a:0d:6a:a7:ce:
cc:4f:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:34 2026 by rpki-client