Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: xQkigsfvA0kuRkPDy49WbH7uo4pn3VOHQwvHVHQ27SY=
Subject key identifier: 5D:00:AE:28:50:4C:11:24:AD:BA:66:8A:2C:4F:64:C5:5E:D6:12:68
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 01A0D917A94A3B8261C9B9BB2C45B1161F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 15:03:21 +0000
Manifest this update: Fri 25 Sep 2026 15:03:21 +0000
Manifest next update: Sat 26 Sep 2026 15:03:21 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: PvVvTn8Anxqen5O4IE2zMD/QIgo4EOqNVc1gjAM12wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:a9:4a:3b:82:61:c9:b9:bb:2c:45:b1:16:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Sep 25 15:03:21 2026 GMT
Not After : Sep 26 15:03:21 2026 GMT
Subject: CN=5d00ae28504c1124adba668a2c4f64c55ed61268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:dc:cb:08:f6:9f:86:f9:09:3a:78:91:67:
c4:14:ae:23:c4:ad:68:40:23:cf:b0:00:27:2e:2b:
3b:c6:f8:77:e1:0d:eb:d3:70:43:25:76:f0:41:eb:
59:06:fe:75:32:29:e1:ae:d6:3c:4c:00:ae:48:92:
4f:41:73:b5:c0:de:b9:63:02:54:34:35:32:67:a8:
50:b7:dc:3d:aa:fd:23:f5:d5:ac:9d:25:72:3e:e1:
f7:36:a9:9d:ce:a6:79:5d:e2:05:b4:38:d9:53:b3:
6d:f7:42:64:97:56:89:98:02:1d:50:97:36:1a:c2:
64:46:14:42:4a:b2:6e:5f:2d:1e:1f:cb:92:ce:fb:
01:d5:23:78:1a:48:cf:c4:9c:27:3f:77:45:f4:74:
7c:f8:4e:72:34:c6:90:3f:b4:fd:2c:cb:4c:e9:9f:
7e:5e:fd:06:c0:40:c3:ea:bc:94:7f:44:41:d3:83:
1e:69:c0:88:57:05:85:79:4e:15:d8:ad:74:0e:f2:
de:df:cc:1e:8f:34:33:ce:0f:43:d8:87:2f:1d:96:
77:68:ab:c0:c1:dc:00:21:b2:b0:d3:60:ee:94:a1:
5f:88:0f:0b:84:ff:f8:a7:79:7a:e7:2a:46:b8:64:
fe:cb:71:03:98:ae:c3:76:26:1b:0b:65:b3:2a:f5:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:AE:28:50:4C:11:24:AD:BA:66:8A:2C:4F:64:C5:5E:D6:12:68
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b1:4e:8d:37:ee:f9:e3:a1:b6:fd:5d:fa:d0:0e:4e:e9:19:
dd:53:e0:19:52:04:35:2b:bf:64:8f:2a:41:3f:9e:87:c4:6b:
c2:78:e0:89:9f:6b:f1:9c:b2:30:b0:2d:8e:80:a4:57:2f:60:
85:7c:01:a9:a1:17:f3:f4:dd:50:5e:43:46:19:b6:fb:1e:98:
b8:94:94:c6:c7:17:02:82:c1:86:06:98:53:38:39:9f:8e:5b:
6a:53:33:e5:da:f1:f8:47:3d:a1:d6:16:c9:6d:41:b1:d9:67:
78:e1:73:22:4d:e5:9e:50:86:ac:4c:54:66:9c:0f:5f:1d:34:
f8:55:2a:11:f0:68:7a:54:8f:1b:bf:84:84:c3:a9:f1:ba:b1:
4e:55:2d:7a:62:3c:7f:6c:c3:1c:a7:4b:88:9a:6d:e8:6c:7f:
e4:a4:d1:28:3d:95:ca:cf:0e:e0:ba:a7:3f:76:72:d3:b5:b1:
8e:ff:7f:14:91:09:79:a6:29:c0:1e:62:b4:40:2a:f0:d0:dd:
1a:7a:9e:9d:a2:2f:53:17:80:b6:32:3c:c9:22:1a:ba:6b:69:
1e:d4:97:40:b9:60:15:0c:1e:56:b1:e7:ef:9f:3b:71:d0:38:
a2:ea:d0:c5:f2:90:cc:e6:e0:c8:d1:42:9c:32:f2:40:c5:e7:
c5:a0:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:56 2026 by rpki-client