Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: 2AU69EQjctyNEn/P2flVvdYDSO7JA/grCu2IjfA8vRQ=
Subject key identifier: 11:B2:AB:5C:6F:18:F2:FF:B9:73:56:56:A8:80:F1:A0:E0:C0:BB:92
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01A0D4CB02A1C73FBC4F8F4669D898EABEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 1730
Signing time: Thu 24 Sep 2026 19:01:09 +0000
Manifest this update: Thu 24 Sep 2026 19:01:09 +0000
Manifest next update: Fri 25 Sep 2026 19:01:09 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: WRlEt37Vpc9ddvfx5x76O4CstO4JwBsv+YG+hH1ZLcQ=)
2: q2-IGhwQSLSx5V9fY6kSeD39pbA.roa (hash: DfOwmBNWH7uAhJlIMJxO08FzHN1+2RmMZDRpAI6F/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:02:a1:c7:3f:bc:4f:8f:46:69:d8:98:ea:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Sep 24 19:01:09 2026 GMT
Not After : Sep 25 19:01:09 2026 GMT
Subject: CN=11b2ab5c6f18f2ffb9735656a880f1a0e0c0bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:ca:7f:7f:18:39:7c:66:87:27:3c:c5:a4:
36:0a:75:02:3b:02:10:72:97:ea:c8:2b:30:6a:9f:
a8:52:65:05:2c:d3:83:5a:7e:46:4f:11:79:bd:90:
cf:b5:25:30:1f:f5:62:d8:49:f7:3a:ee:55:c7:be:
f5:61:f3:b5:7d:9c:f9:87:5c:f8:54:63:15:9c:46:
28:56:de:a1:3b:02:b5:e7:76:f1:48:05:a2:1a:e7:
5e:01:dd:6c:c7:db:75:bd:5c:c5:f2:c5:87:75:bf:
15:d7:51:a1:7e:55:7b:f1:d5:27:e9:21:e7:71:e2:
d2:4d:a8:99:00:bf:d0:7a:e8:7e:c7:56:41:53:49:
fc:6e:75:f8:b8:6e:40:e0:f2:f4:8b:53:6a:a4:80:
fd:f0:60:9b:66:44:d6:cc:2f:fc:19:e8:6c:ea:58:
87:a6:4c:1f:90:5c:31:f9:67:7a:97:af:61:6b:a8:
f8:40:83:fe:cb:16:91:4a:2d:61:0d:58:ed:f5:62:
bb:be:00:10:41:11:ef:c3:b5:00:02:94:df:7d:a4:
62:22:a4:82:78:99:ea:9f:ca:8c:7b:ab:5b:c5:61:
93:a5:63:4d:02:99:2a:95:c2:ae:e9:d0:14:34:e4:
e7:22:c5:6c:0f:c7:a1:67:21:03:61:2a:2b:45:81:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:AB:5C:6F:18:F2:FF:B9:73:56:56:A8:80:F1:A0:E0:C0:BB:92
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:43:06:96:d9:42:4f:d9:22:a0:1b:7e:82:af:65:35:ee:
1f:a4:53:b6:20:10:93:85:e5:2a:5d:cb:6b:67:13:48:03:d5:
69:6f:e0:50:22:a5:4e:45:16:ef:95:1e:22:0b:a9:95:03:68:
f2:de:b3:9e:52:46:ce:a2:e9:22:94:c4:55:41:fa:07:9d:67:
1a:3f:1e:91:4d:16:95:14:95:16:e1:d6:fd:d8:f7:64:41:33:
78:27:88:3d:66:87:91:7f:80:ec:c4:11:b5:2a:a4:b6:13:f5:
66:bd:b0:88:0e:56:78:99:ad:74:60:d6:cc:3e:f8:67:74:54:
45:56:c4:fd:25:2f:f6:ef:c8:4e:59:42:54:cb:20:3c:92:eb:
42:96:76:80:ec:fb:6b:16:8a:42:42:05:3c:43:10:d5:83:f3:
66:4c:4a:93:ae:26:d1:37:fa:ee:f6:c7:5b:cc:38:88:fb:93:
91:f4:d0:18:8a:65:d5:5a:5c:1b:dc:e0:9f:84:5f:41:c4:67:
7f:b8:11:15:6d:69:a0:b2:f9:d3:7b:d5:c9:bb:55:84:d4:7a:
f9:77:b3:47:17:b0:ce:1c:b8:4c:c5:06:40:42:ad:64:f0:f1:
5a:47:b2:4b:94:29:e2:53:c4:80:68:18:f3:4c:81:89:92:04:
f3:5a:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:48:36 2026 by rpki-client