Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: srrfBMFJgzvvGuyPe7YYS7fsrjUAaFfdzrHIZLd3DW8=
Subject key identifier: 2A:C7:49:C4:A8:FC:54:AA:74:82:95:1D:9A:B8:36:A3:1A:A2:3E:68
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01A0C96B6F0D6C42F31B1A1662EA84150942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 14:00:56 +0000
Manifest this update: Tue 22 Sep 2026 14:00:56 +0000
Manifest next update: Wed 23 Sep 2026 14:00:56 +0000
Files and hashes: 1: OTWhYyuLQkjCKbz9jUHCD19EFpo.roa (hash: vWGmjIJCSNv5fdFMpQ8zZyjmVzro4Z5X4Sdye++7cOU=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: y4sEGa69q8KnYa2+u0DkyylwkgvskJInmODMlZECrRk=)
3: podK66tMt3lZvNdvpbXgIxZ0Kgo.asa (hash: 7bkRGWpwII4FGKdhAF8hQRW0M96LDy/oByw+whJAwFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:6f:0d:6c:42:f3:1b:1a:16:62:ea:84:15:09:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Sep 22 14:00:56 2026 GMT
Not After : Sep 23 14:00:56 2026 GMT
Subject: CN=2ac749c4a8fc54aa7482951d9ab836a31aa23e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:88:9b:19:71:70:c9:70:54:f5:fe:fd:73:
4a:fc:9a:d8:db:41:54:d5:ab:e7:5a:94:c8:07:81:
7c:62:5f:08:85:ee:88:c8:67:29:9b:4b:4a:b9:d0:
43:3c:c4:13:e6:b8:4f:ca:cb:26:d3:e5:5e:a8:28:
4f:bf:a5:2f:93:c5:83:aa:36:f1:3d:27:96:5b:45:
45:35:cd:96:85:98:08:02:ec:e0:ba:04:6a:c3:4e:
17:cc:30:a3:c4:a0:e1:ca:cb:93:b7:03:25:c7:bb:
d6:68:74:1e:93:b2:55:6b:15:c7:3c:58:9c:a3:2b:
ac:57:a4:87:1c:de:f2:60:97:15:3c:14:aa:1c:c4:
fb:0d:aa:98:16:5c:b0:d7:05:69:4b:17:5f:46:36:
2c:3e:48:70:11:77:10:52:fe:8d:2a:73:da:d6:2a:
4e:2c:6f:b0:bd:76:14:c4:48:f6:a7:0d:c1:2e:32:
b2:3d:28:d8:7c:97:97:a3:fd:ce:42:10:db:bb:81:
20:0f:84:b4:f0:4b:70:f3:bc:00:b1:80:be:8f:ae:
3f:4c:9e:a3:97:1d:82:75:01:27:b0:77:22:a5:dd:
ba:b3:4d:43:48:20:a2:72:94:c0:22:08:74:6c:44:
3f:1c:f0:ab:ab:70:58:76:8b:1c:ea:1b:00:ff:17:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:49:C4:A8:FC:54:AA:74:82:95:1D:9A:B8:36:A3:1A:A2:3E:68
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:09:43:fa:d2:c7:e3:cd:c2:71:5d:9c:90:7c:1b:3a:e1:42:
ab:e1:0d:8a:ff:26:ad:20:84:82:b1:dd:05:3a:86:41:1e:ee:
82:0b:b9:57:ec:99:a4:f9:79:0f:27:e2:31:7c:82:1e:e0:fa:
32:bf:aa:f7:53:4f:b4:bb:d0:92:61:29:db:a3:a2:66:47:2d:
ef:f4:29:eb:29:eb:63:76:4c:1a:21:30:1b:57:79:b4:aa:46:
9d:cc:fd:97:49:70:4c:51:87:b3:d8:46:bb:ad:be:26:cc:90:
42:d4:66:8e:6d:25:f7:d8:43:45:a8:32:1e:58:89:8b:8f:41:
9b:be:bc:9c:48:1f:70:83:f1:5b:62:71:44:f2:90:89:f5:d5:
29:fe:d1:46:04:66:27:70:a5:91:79:fa:b0:4f:9c:da:67:3d:
00:9b:b7:1c:f8:a0:1e:bd:46:47:33:49:15:9e:e6:86:63:a5:
62:5f:06:8e:31:90:13:01:bb:2b:92:30:27:2a:23:36:9a:c1:
54:98:88:71:90:47:82:8b:d1:9a:b0:29:07:e7:58:f3:ef:f3:
06:f2:7e:c6:16:7e:1b:00:00:66:c4:66:10:ce:06:83:43:45:
3c:a0:4b:25:a1:b8:08:cb:8a:f5:5f:ab:a1:9e:26:ae:2f:5b:
cd:a6:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:26 2026 by rpki-client