Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: BpyQpss1Exyvb9WSV5KeNOwx45bjM8aHe0Jm36EJTtI=
Subject key identifier: F1:77:F2:54:DE:02:9D:28:B2:84:99:C7:53:0B:6C:1C:EF:C5:38:09
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 01A0D26E9912C43F3F7DC2285B9708EF238B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 08:00:58 +0000
Manifest this update: Thu 24 Sep 2026 08:00:58 +0000
Manifest next update: Fri 25 Sep 2026 08:00:58 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: ycCYZHMyIM3Pxf3SxB3Hlm/YVgOHSFIcqTxGqRiE/Yw=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:99:12:c4:3f:3f:7d:c2:28:5b:97:08:ef:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Sep 24 08:00:58 2026 GMT
Not After : Sep 25 08:00:58 2026 GMT
Subject: CN=f177f254de029d28b28499c7530b6c1cefc53809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:69:45:99:88:18:c1:ca:1c:4e:47:7c:66:
b9:05:73:2f:46:13:fc:46:c4:13:1e:97:ec:2b:10:
01:40:bc:c7:68:70:19:bb:d8:20:15:ac:60:59:38:
fa:68:f8:2e:6d:eb:6f:58:4d:c5:fd:fc:84:05:c5:
45:ae:36:58:3b:97:f5:34:5a:42:1f:b2:09:25:d5:
7d:78:27:37:6d:71:c9:3e:dd:09:09:87:10:7c:17:
92:2b:aa:f3:68:d4:ee:88:13:a7:78:44:c3:20:eb:
c4:2c:d0:b1:e5:89:f4:3b:28:7e:21:59:88:af:1c:
58:b6:84:53:5e:a4:60:e6:9c:e7:a5:74:a1:17:f9:
6c:6f:d1:17:8a:84:47:eb:7c:b4:61:3f:90:5c:50:
6f:e3:f0:34:e1:50:82:af:b5:a9:14:23:cb:4b:96:
e9:2e:46:a2:13:c1:08:4f:a7:ef:79:28:53:96:aa:
a6:f6:94:58:73:ed:02:52:b9:72:68:28:5d:10:b0:
71:9d:89:99:0f:a2:44:7a:9e:da:ab:bc:41:c7:2d:
79:27:a7:f3:5a:3f:58:09:3a:4f:1c:1a:ec:df:b4:
57:15:1d:4a:35:35:ea:f2:91:c5:ef:f2:5a:29:62:
47:b4:a2:6c:2e:7a:95:19:ec:59:0f:3c:41:7b:00:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:F2:54:DE:02:9D:28:B2:84:99:C7:53:0B:6C:1C:EF:C5:38:09
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3e:55:d4:b6:78:9e:ce:05:f4:b6:67:91:a2:fc:38:c5:2c:
1e:14:ac:50:db:05:51:47:14:f3:4b:43:80:de:57:db:a9:17:
0e:02:4d:06:ad:0a:eb:b7:d7:16:e1:62:f9:7a:6e:56:15:07:
e1:b5:a8:c5:25:6e:73:56:3d:24:d8:ae:0c:1b:ac:63:e3:20:
93:00:69:90:b5:90:b8:18:47:c6:89:85:bc:47:1b:98:59:1b:
78:33:e9:69:ad:3d:77:9f:20:74:dc:ad:d9:06:36:e3:61:be:
35:16:44:16:95:81:33:57:2b:b7:06:b0:13:62:0e:e4:2f:0e:
7c:d3:5a:2f:8a:c2:6b:e0:ce:99:16:4d:77:69:ff:28:12:aa:
b6:dc:ec:0b:47:0d:d4:01:df:03:3a:f7:18:26:c3:42:e3:b0:
0c:ed:db:f9:86:b5:f5:c2:b5:f6:4b:0a:b8:8a:9e:77:97:f7:
e9:4e:10:78:75:58:1c:76:9d:82:01:0f:cb:7c:3d:2c:bd:35:
fd:a7:37:5e:2c:18:08:59:79:6f:3f:f6:16:fb:7d:eb:cb:6a:
e4:32:40:1a:0b:14:91:5c:d1:ba:88:f3:38:c3:1c:63:c9:79:
3b:62:2d:4a:24:46:a1:5a:96:c8:2e:42:85:35:0c:80:eb:6e:
1e:e3:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:11 2026 by rpki-client