Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: 9CLwrDUch0/k+MKPBfNiwKqWbcx0k4bbvmCmywyajnY=
Subject key identifier: C9:C3:7D:BA:89:ED:59:09:09:F6:36:34:8D:5B:5D:D6:E5:81:88:DE
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 01A0DCBBF7978BAE3F25E4EFB3986D85BCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 0718
Signing time: Sat 26 Sep 2026 08:01:41 +0000
Manifest this update: Sat 26 Sep 2026 08:01:41 +0000
Manifest next update: Sun 27 Sep 2026 08:01:41 +0000
Files and hashes: 1: aSIDX5WLR1A1a-e0CCn8Rm1sYHc.asa (hash: A2WMcHk2uY0A/akcC7UBsiivFyfzZonC6SeSkOH6b8Q=)
2: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: hodomqqd4QQy7D55rJ/v3MeYHvwFIuzpi8eEoYQ6u+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:f7:97:8b:ae:3f:25:e4:ef:b3:98:6d:85:bc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Sep 26 08:01:41 2026 GMT
Not After : Sep 27 08:01:41 2026 GMT
Subject: CN=c9c37dba89ed590909f636348d5b5dd6e58188de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:e5:a5:19:d0:b9:25:78:ed:6a:6f:d6:e5:
b0:c4:64:8a:dd:99:54:6f:90:7e:0f:aa:e4:82:32:
46:9e:f3:28:ca:0f:08:d9:78:53:fa:86:a0:81:c4:
7b:7e:86:8e:bb:10:3b:bb:93:2c:c1:c7:15:e2:ab:
51:f3:ca:d1:ae:ea:7c:15:11:82:6d:9e:0e:f5:c3:
62:9b:a2:0f:b2:ed:c2:30:e2:8f:57:68:48:0f:d3:
52:12:11:54:86:70:17:a3:fb:39:45:8b:81:3f:1b:
e9:81:2d:5b:16:8a:9f:6a:0c:16:a1:13:17:c9:5f:
24:18:6f:cd:2b:0b:cf:ac:a2:cd:f1:40:0a:a3:c6:
8d:b5:c1:5f:bb:2c:16:07:b9:53:31:f4:bc:95:b8:
e1:2b:37:d8:1a:63:9f:f2:a3:27:b6:4a:6f:18:fc:
5e:bb:b3:a8:64:ad:a4:93:0c:a8:4a:7d:6c:86:57:
fe:e1:88:9c:f7:ad:72:a5:df:26:69:bc:fb:7d:3a:
e1:be:62:22:f1:15:f6:d4:bc:04:cb:74:2d:e5:2e:
c1:1d:ab:ff:93:05:21:d7:1a:c5:14:bc:bb:3d:cc:
d2:56:5b:d5:2a:3a:d6:37:d3:75:a6:ef:cc:1a:83:
4b:c2:53:11:ff:0f:e4:8e:38:54:1f:93:3a:26:96:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:7D:BA:89:ED:59:09:09:F6:36:34:8D:5B:5D:D6:E5:81:88:DE
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:99:30:94:6b:13:4d:99:e5:f9:fe:7e:e5:54:28:72:8a:d5:
d1:f3:2e:51:c9:45:90:08:86:64:0b:d4:04:54:15:f5:7e:1e:
ad:43:25:b6:1f:95:d0:ef:03:56:c9:12:7d:37:87:2b:3a:a2:
be:86:d5:a0:0f:2e:f9:9b:a8:89:8b:22:20:9f:39:c6:31:39:
a8:f7:2d:ef:f2:53:e5:de:22:4d:bb:b6:65:5d:c8:39:e6:82:
10:c6:c4:67:4f:df:1d:6d:e4:db:39:07:08:49:ef:3a:03:f3:
5d:23:04:b4:ca:1a:ee:5a:50:0f:27:be:ee:96:b5:7e:c6:ca:
59:66:82:cb:41:a3:22:be:8f:65:3b:43:58:b2:de:d9:98:76:
d6:d8:45:78:36:9a:7a:ca:44:a6:c3:cc:ff:57:08:3e:47:52:
98:f1:58:a9:5e:f7:4d:d8:87:ec:45:60:75:5d:9f:fa:1a:f5:
3e:b6:a3:77:7b:d7:06:3e:56:02:33:74:86:62:e9:5c:86:8d:
9b:9c:a0:2b:ff:0b:9a:63:22:b9:4a:c2:8c:95:ea:a8:c3:8f:
13:99:0c:ed:cc:e1:3c:4c:3e:00:aa:75:5f:f0:a8:37:ca:7e:
65:52:fa:46:e3:9c:65:1d:bf:1c:ea:ab:2f:f0:f8:f7:65:d8:
b3:99:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:31:56 2026 by rpki-client