Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: SpVyA1FeP0Rqqlaf+a3HdckAMe4UjoVVkHSk0tKiMXw=
Subject key identifier: 3A:4D:F8:79:BC:C6:36:AE:B4:2B:4B:B5:A6:CE:35:41:58:B4:8D:E0
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01A0CE91BA165135F20B4417BBD254B80869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 14:00:51 +0000
Manifest this update: Wed 23 Sep 2026 14:00:51 +0000
Manifest next update: Thu 24 Sep 2026 14:00:51 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: 0bHgtT6A02na992oWlSKt2XtAeWL6qHC5RKS07LoFhg=)
2: jkf9uYsYVRJJo7-7ziQQDEzWpm8.roa (hash: KJPWOCNh5BY9Xr2oC9jvPyLkj0+8kyflAtM1BYsxhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:ba:16:51:35:f2:0b:44:17:bb:d2:54:b8:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Sep 23 14:00:51 2026 GMT
Not After : Sep 24 14:00:51 2026 GMT
Subject: CN=3a4df879bcc636aeb42b4bb5a6ce354158b48de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:ee:56:5b:79:3f:e5:ff:9e:a7:be:2f:0c:
02:32:42:70:56:71:5e:49:e1:ad:09:61:c8:4a:6c:
78:9e:3d:2f:37:21:db:2c:27:fd:40:0e:98:24:2d:
27:37:48:cd:ba:b5:bb:30:c4:91:f5:45:cc:77:e6:
37:d4:ea:88:1b:a0:79:ad:45:20:7f:5b:f8:0c:36:
81:d9:ef:a0:50:cc:d6:be:0d:65:a9:8a:eb:ef:47:
bb:8a:50:ce:15:ab:9d:65:4c:69:0d:15:77:3a:e0:
c1:03:99:77:db:8e:cb:bc:81:50:af:d8:c3:75:f8:
b5:ee:9f:b4:86:86:7f:33:67:59:0a:92:68:b6:e4:
88:99:df:9a:bd:7c:9c:ea:21:9a:54:14:8b:af:ba:
18:5d:97:a3:50:21:10:a4:b6:54:69:f9:05:91:01:
52:7d:1a:84:c0:0a:a5:30:5c:b0:53:99:09:d0:f5:
2c:90:06:b6:a9:3b:95:87:5f:5a:69:e1:11:55:07:
9c:d4:be:04:f8:6c:aa:85:e4:8c:04:cb:9c:04:e7:
05:c2:d7:61:6c:f5:9c:c2:66:49:89:4e:26:b3:aa:
f8:94:6e:14:ab:99:d0:66:46:8c:3a:de:ea:73:ff:
af:9c:89:e1:4d:8a:52:7d:d1:3f:4d:7a:16:f9:57:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:F8:79:BC:C6:36:AE:B4:2B:4B:B5:A6:CE:35:41:58:B4:8D:E0
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:91:47:68:a6:33:f5:f4:8c:20:e3:c1:ae:34:5d:ec:0e:
b7:3f:07:05:ab:d5:24:27:30:0a:e4:6d:f5:72:ad:02:9c:16:
9a:32:9d:1f:2d:f6:fa:4a:c1:12:5f:b6:a2:05:66:7a:8b:18:
e2:4c:ef:f0:d5:b3:9e:3f:a6:6a:ad:31:23:5a:2b:9f:88:4e:
fd:38:28:40:fd:c6:5c:40:5d:01:a2:93:40:86:8c:93:68:13:
79:6a:39:c1:73:dc:9a:fe:4f:c9:c1:03:2b:07:ae:58:cd:c2:
1d:11:85:60:6b:29:ca:a5:63:c1:37:5e:84:4d:fe:ed:34:da:
de:83:66:57:bc:04:fb:e5:53:cd:42:45:96:7c:38:40:36:84:
00:ea:09:df:37:cc:67:5c:4f:47:be:0d:a1:02:f0:1c:86:f5:
7a:21:ff:16:bb:63:1a:c0:92:bf:b9:59:61:85:0a:7f:d0:2e:
c4:ea:bc:3e:74:ea:5a:6d:39:d9:df:12:ed:12:29:5f:f5:b8:
df:2e:9e:fc:65:f4:30:b3:84:88:92:78:1c:db:e7:03:26:87:
4c:61:93:3e:9c:b4:cf:a1:27:57:e2:26:be:ae:d0:25:8b:89:
10:bd:99:f1:a0:16:3e:cf:ed:0d:1d:aa:38:8d:81:9d:df:29:
90:e8:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:38:55 2026 by rpki-client