Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: AbJ539vAgP3h+sBcKT1ZmBXrka5638XyxTNG6Mas/YY=
Subject key identifier: 74:9F:6A:0B:F8:D6:8B:1B:D5:8E:4E:24:31:4A:DE:3E:76:FE:CD:A8
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019E1F10E17206B0F5BB030AA9B1CB94867A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0FE9
Signing time: Wed 13 May 2026 02:01:00 +0000
Manifest this update: Wed 13 May 2026 02:01:00 +0000
Manifest next update: Thu 14 May 2026 02:01:00 +0000
Files and hashes: 1: iikBT2QAMhI0pO1fQIqlbLTfu0Q.roa (hash: +EmJ11d4GwDSAWX/0XCakljAxmrpGGVNg4y/8FSEGCU=)
2: lnQ2qM12OcTN3Tl66lkxIuHBUCI.roa (hash: +iEMNwBTYNtnrtcaCkTfTG4LTW15CLlDWqlFL/QxTSM=)
3: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: 2GwmgjCL4SqS8RM8LgVWuBvjQL9PMH8Po1rbRVYwGVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e1:72:06:b0:f5:bb:03:0a:a9:b1:cb:94:86:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: May 13 02:01:00 2026 GMT
Not After : May 14 02:01:00 2026 GMT
Subject: CN=749f6a0bf8d68b1bd58e4e24314ade3e76fecda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:ff:c1:ec:62:84:de:60:63:8d:ea:59:5c:
4d:85:f2:0c:36:ad:6e:73:3c:c5:87:4b:a1:be:3d:
31:3a:c2:0d:5b:55:f9:ed:bb:f4:28:22:97:3a:f4:
32:52:0b:3a:39:f2:be:79:aa:28:df:ee:6f:5a:b2:
c8:e1:49:1d:3d:16:db:77:ae:19:9e:79:77:b9:25:
fd:37:0c:7f:4e:49:06:05:7f:aa:84:ad:b3:81:5d:
78:92:d0:0a:8a:2e:cd:7b:4f:75:af:ca:68:34:12:
80:6e:7f:cf:23:3d:96:f1:8c:48:d9:15:6a:bb:f1:
85:41:ee:0e:2d:2a:aa:c3:1d:9e:23:39:f5:5f:d3:
77:a9:d9:13:b9:e6:60:d3:96:af:9a:41:e9:02:38:
23:67:c1:96:44:74:3a:8a:48:1e:64:ba:75:e3:e6:
c5:3d:a0:79:7a:e4:a8:30:71:34:63:c4:e7:19:50:
7c:82:fe:60:14:3e:bb:04:e4:9a:f0:15:61:f4:55:
65:70:14:a5:d7:22:43:21:a4:a1:f4:bc:5b:3d:ad:
99:b9:35:35:1d:de:e9:f2:f2:5a:ae:2e:d1:86:a6:
ff:65:a4:17:95:75:3a:7d:42:5f:8a:17:8e:10:db:
ec:09:ff:ae:99:f4:7c:ce:98:fc:b8:69:aa:08:d1:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:6A:0B:F8:D6:8B:1B:D5:8E:4E:24:31:4A:DE:3E:76:FE:CD:A8
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:df:7f:ec:88:0c:e5:08:af:38:15:b5:ec:e4:5a:48:e2:
8c:11:dd:09:e5:b3:2a:1e:f9:7d:7b:c9:8b:a5:15:b1:81:25:
a5:33:26:45:41:77:7f:b0:d3:74:49:3b:74:55:df:5d:00:5c:
eb:fd:48:5c:e8:f1:1f:80:78:2f:85:e7:2a:68:f6:9b:df:17:
26:91:9d:39:9a:ee:f6:d1:c5:96:2b:13:44:f9:51:7d:5e:ff:
9c:0a:7a:28:31:50:8f:96:73:bd:b4:7a:5c:23:a5:de:c8:08:
51:19:63:4f:97:d9:d5:f2:53:ac:f5:0a:a0:b4:91:3d:98:38:
54:3c:af:4c:8d:48:96:38:f2:5e:05:3a:6e:9a:89:7b:ed:da:
88:3a:1c:f6:9a:fe:10:56:76:0a:fd:1d:7c:9f:2f:17:e8:5e:
c0:0a:70:36:69:95:fc:44:ea:21:d3:e4:ef:d7:64:36:3a:ad:
63:84:16:d2:2d:36:d9:34:46:a7:b8:e3:94:01:57:02:e5:de:
11:34:fe:fb:8a:d6:dd:2d:44:d8:46:69:78:6b:32:6e:bc:ef:
ff:c3:b4:61:b1:8b:f7:30:32:6d:ca:84:cb:4c:8e:77:f9:f2:
6d:28:62:2c:8d:31:8e:ef:16:86:78:f9:d5:67:44:9d:d1:e3:
c0:80:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:07 2026 by rpki-client