Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: J/hQuTGMWz9jMTCcVqNYkEAmJ35Nrs1v18IWmBWQzK8=
Subject key identifier: 65:25:7D:42:A9:E3:61:C6:7F:6A:CE:8F:EA:EF:C1:DF:CB:FD:21:2F
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 01A0D45D679164DAA3338BD45C209B679832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 1150
Signing time: Thu 24 Sep 2026 17:01:26 +0000
Manifest this update: Thu 24 Sep 2026 17:01:26 +0000
Manifest next update: Fri 25 Sep 2026 17:01:26 +0000
Files and hashes: 1: iikBT2QAMhI0pO1fQIqlbLTfu0Q.roa (hash: +EmJ11d4GwDSAWX/0XCakljAxmrpGGVNg4y/8FSEGCU=)
2: lnQ2qM12OcTN3Tl66lkxIuHBUCI.roa (hash: +iEMNwBTYNtnrtcaCkTfTG4LTW15CLlDWqlFL/QxTSM=)
3: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: qWCckGR0NB+uwddoumjFZU2TcD6dDoknRrGyxkO5UAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:67:91:64:da:a3:33:8b:d4:5c:20:9b:67:98:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Sep 24 17:01:26 2026 GMT
Not After : Sep 25 17:01:26 2026 GMT
Subject: CN=65257d42a9e361c67f6ace8feaefc1dfcbfd212f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:48:76:54:ea:a2:07:41:91:bd:b4:7f:e4:
40:d0:9d:e2:ad:52:9e:bf:07:a4:06:94:c6:07:26:
24:94:b9:dc:96:cc:91:8f:37:90:ff:21:b4:89:ad:
8f:c7:dd:16:af:07:dd:c4:7b:7c:a0:82:6c:f3:e9:
ce:78:ef:47:4d:b3:f3:0f:d9:37:e2:a1:e4:58:2a:
66:ed:5e:33:14:e9:0f:83:68:71:47:b5:82:cc:30:
3a:2e:b7:dd:18:fd:9a:0e:8b:a1:6d:f6:a6:64:4f:
c3:32:0e:79:c5:a8:35:5b:00:46:80:a4:57:6a:53:
16:32:d2:c4:0c:fd:54:42:bc:f6:83:98:01:4d:57:
18:1a:09:88:30:81:00:7c:22:d5:84:e6:20:ca:43:
1a:96:ef:d5:d6:d7:fe:19:b3:6d:d2:0f:f5:f8:1d:
6b:4e:52:c6:dd:14:fa:27:a2:d0:5d:e7:e1:4f:e1:
ea:41:6d:dd:0f:e5:a1:7b:e2:06:bb:90:9e:0b:ae:
ef:82:f0:13:88:ef:65:c1:8d:11:01:0b:2c:5e:50:
82:7e:96:62:a5:91:8f:8f:57:6a:0a:5a:ba:24:7d:
dc:90:7d:2f:88:dc:2f:04:67:62:92:95:b3:38:84:
55:c6:15:0d:59:d4:0b:b7:a8:67:28:cc:0b:f6:92:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:7D:42:A9:E3:61:C6:7F:6A:CE:8F:EA:EF:C1:DF:CB:FD:21:2F
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:75:28:c2:8b:d3:2d:6b:9a:2e:94:de:f9:cf:13:c4:6e:
c8:98:86:e9:0b:c7:55:7e:e2:aa:87:1a:ff:8b:45:80:be:61:
88:28:05:be:a8:28:0f:c5:3c:69:94:0f:ed:77:27:76:7d:e8:
da:68:f1:19:2f:5a:ee:e1:cd:e5:5f:71:43:61:23:93:71:12:
3f:b2:0f:9a:e2:9a:dd:01:ba:9f:43:eb:57:7a:ef:d5:0c:88:
0b:48:9e:81:8b:b5:d4:64:dd:20:26:03:93:90:fd:df:26:f0:
43:cc:4a:c5:ab:00:a2:83:4f:b1:02:9d:98:cf:d6:31:78:84:
95:f5:4a:9f:be:f6:c8:81:fb:0d:84:ea:6a:6e:ac:81:8c:e0:
7a:1b:f6:a7:c0:da:6c:b5:51:09:77:93:4b:4e:07:07:32:f7:
b0:f1:40:85:3b:c7:ee:4a:67:9d:74:89:bf:cd:08:09:9c:5c:
7c:fc:10:e8:eb:6a:36:10:4b:89:86:55:1e:47:91:09:2c:c8:
6e:31:da:e5:d7:54:c5:b1:7b:c7:bb:f0:e4:db:50:c5:8b:ba:
93:c8:c4:11:55:4a:48:bd:1e:93:74:cc:02:81:51:b9:34:11:
67:49:f2:0f:5a:db:2d:37:d7:ea:de:57:18:ef:73:7b:27:28:
84:6d:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:51:52 2026 by rpki-client