Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: aZPBCTpl9SRmCTwylKtJ+mfK4n9T1EsWvYeXzYgn8Pw=
Subject key identifier: 08:69:5B:31:3B:88:C7:48:31:CE:AE:7A:09:C0:2A:C4:DA:87:0D:E2
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 01A0D3F07D6F0F662E008D7409403BF9DD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 089E
Signing time: Thu 24 Sep 2026 15:02:28 +0000
Manifest this update: Thu 24 Sep 2026 15:02:28 +0000
Manifest next update: Fri 25 Sep 2026 15:02:28 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: FCFXNLaaESAE0Ha9xu2xqfJamu3Hfk9tpAClquBj0OU=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:7d:6f:0f:66:2e:00:8d:74:09:40:3b:f9:dd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Sep 24 15:02:28 2026 GMT
Not After : Sep 25 15:02:28 2026 GMT
Subject: CN=08695b313b88c74831ceae7a09c02ac4da870de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:b2:17:38:97:32:05:a0:7f:96:2d:3c:be:
14:27:4d:4e:62:74:83:3d:0d:ad:24:3f:20:24:d0:
64:ad:42:b4:2e:c7:6e:50:52:27:25:fc:7f:a1:f9:
49:79:82:c9:f3:8c:2d:2e:16:17:e8:c1:7d:30:95:
2b:45:61:31:2f:65:ec:e5:69:d9:30:41:86:ee:a4:
c4:ab:37:81:bd:42:ba:05:c2:d3:ff:23:c0:f0:f4:
8c:dc:02:3c:f4:b3:e4:79:3c:18:c2:1f:10:fa:e0:
7f:a2:84:77:fb:5b:ae:00:42:ef:0b:13:3d:0a:6e:
7b:f7:69:c1:25:59:f3:b1:79:a6:e5:51:23:f8:73:
f6:ce:9f:47:50:23:5a:f4:3e:c1:78:4d:ed:02:37:
61:55:ac:1a:d1:40:c5:a8:11:c3:36:b0:10:9c:7b:
1f:ad:bb:c7:50:62:0d:12:2a:d2:b8:af:04:89:2e:
eb:c7:a6:b4:1d:87:c3:ed:42:82:e1:74:81:ff:be:
59:d7:f9:3d:9a:bf:27:66:b9:c1:fc:a9:55:67:9e:
fd:33:aa:ed:ac:55:8a:5b:f7:3b:1b:e2:81:11:f3:
d5:de:0d:c9:0d:4c:13:8a:fa:86:5b:3c:e9:59:0b:
c0:a6:89:f5:97:54:b6:82:22:41:1f:69:1b:ca:a6:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:5B:31:3B:88:C7:48:31:CE:AE:7A:09:C0:2A:C4:DA:87:0D:E2
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:31:80:2c:b8:a1:81:3b:6e:6a:50:fb:b8:24:f4:a7:4d:09:
96:8b:7b:ed:e6:e4:7a:ea:c0:75:4e:a9:f1:50:d0:ef:ad:56:
09:78:ff:87:41:ca:70:97:e5:1a:b9:dd:dc:a4:79:a9:5a:0f:
d5:44:28:23:0f:f2:9c:d1:ca:7d:3e:0d:62:40:79:30:b9:3d:
ce:01:5e:4e:e0:98:70:78:0f:8e:fb:a6:bb:16:3b:99:51:aa:
04:f1:a7:1e:8d:45:f3:71:88:2f:da:64:28:e4:a9:b5:8b:80:
d1:0a:7c:f8:48:ee:23:f4:18:12:ca:42:24:bc:c1:4c:d3:d8:
06:e1:70:66:05:cf:7c:df:ff:9b:69:9d:4e:37:9b:b8:d4:54:
6f:76:81:31:df:77:77:97:9d:ee:21:d5:62:0b:9c:ef:45:48:
40:62:af:8b:cc:a0:33:a5:b7:7d:61:fe:73:2a:b1:5a:0e:80:
45:ac:1a:42:18:e9:9f:57:b9:0d:c7:e2:fa:52:03:43:35:43:
06:f7:b1:00:7d:d4:e9:69:f0:fa:11:ca:52:19:f2:a3:b9:6d:
bd:54:da:8a:89:4c:b5:d2:f5:a4:76:f6:fc:5e:6d:ef:fd:80:
0c:cb:43:ea:0d:dc:44:b1:5b:87:4f:98:a1:78:f3:d5:9f:7a:
b9:07:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:36:02 2026 by rpki-client