Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: rOoZ4fLWe6gahYrBwSevfQvvUx+1+9OaSRlXcYc25tc=
Subject key identifier: 3D:83:69:92:25:4E:74:E2:EF:C8:02:D2:B8:D4:6D:CE:3A:B6:AF:72
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 01A0CD4775BC30DEEE1C7DF716D5B19A1F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 08:00:07 +0000
Manifest this update: Wed 23 Sep 2026 08:00:07 +0000
Manifest next update: Thu 24 Sep 2026 08:00:07 +0000
Files and hashes: 1: 9_t5TVeIhW460bTs9V3TIpSlosE.asa (hash: NnKf3WDH/05W6UmMSXvkEUGlbKvRwlxrj788KWGZ/NM=)
2: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
3: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
4: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: CjVhMYS7OZBTe+2GdmrFWDDlYFUEdRUoxOQQE5XCm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:75:bc:30:de:ee:1c:7d:f7:16:d5:b1:9a:1f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Sep 23 08:00:07 2026 GMT
Not After : Sep 24 08:00:07 2026 GMT
Subject: CN=3d836992254e74e2efc802d2b8d46dce3ab6af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:12:a2:bb:41:cf:d0:f7:12:fc:63:4e:7c:
d8:a4:1e:ea:7d:5d:a6:8c:23:b3:14:b5:fa:43:d9:
63:60:9d:15:7c:fd:b5:7a:39:51:45:1f:66:68:44:
7d:76:41:a9:90:0b:08:60:ee:04:ee:18:97:4c:d0:
3e:d9:fb:eb:26:80:eb:ea:55:67:8a:39:16:b6:79:
13:6d:c3:d4:11:96:b8:41:fd:c1:e8:35:fb:43:ca:
7c:62:93:7d:32:eb:76:03:1e:e6:bf:e2:6f:32:ae:
00:0f:3f:65:4a:56:f7:e6:0d:f2:6e:27:a3:98:8d:
76:dd:c7:f2:b7:d6:7a:3f:e8:96:0d:36:ab:7e:d7:
99:2d:73:2c:b6:e0:22:f9:ab:89:22:43:8b:f0:e7:
6f:cf:04:3c:19:93:26:98:78:5b:93:fb:83:00:25:
db:bc:d7:e2:e8:25:bd:09:2d:db:e6:8a:b2:b6:7f:
18:80:63:31:90:60:ea:9e:60:43:23:80:98:67:25:
e7:1c:10:93:ec:c2:cd:6b:f3:93:14:da:2b:ad:66:
48:db:39:6d:39:12:13:f9:ee:21:ae:51:ab:8a:61:
9c:03:1b:39:e6:f2:8c:5b:71:20:f6:45:5e:51:9e:
11:d1:5d:ce:45:e2:21:9c:9f:22:bd:1a:a9:df:e2:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:69:92:25:4E:74:E2:EF:C8:02:D2:B8:D4:6D:CE:3A:B6:AF:72
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3d:52:8b:a6:8a:41:11:2a:b8:f7:da:1a:69:06:58:a6:c8:
33:d1:db:ea:8f:49:43:64:57:cb:fa:28:5b:41:d8:de:cb:35:
bc:e3:ef:1c:74:a5:41:84:7e:3b:0d:2e:2f:79:ed:f1:bc:0b:
e7:68:e5:98:1f:6a:44:8b:85:1f:62:f4:05:77:9e:6c:5b:13:
85:eb:75:1d:dc:28:8d:9c:73:17:ba:4b:ee:07:ee:01:66:b6:
02:91:1b:8c:b4:b3:a4:e5:56:6c:fc:d2:2d:68:91:05:11:89:
81:4d:45:6d:4c:18:4a:3a:a5:75:e4:e9:8f:17:33:8d:17:3e:
07:8d:81:62:33:54:98:32:aa:df:2f:0b:d4:88:11:1d:b2:e8:
d9:6e:97:54:b2:e3:1b:9b:11:ee:17:65:48:9f:5f:8a:53:2b:
b1:24:6a:79:10:d5:d8:e9:ec:67:dc:86:25:b4:56:ac:e1:3e:
5d:c6:1f:74:fa:10:9a:c9:be:43:f7:27:f4:76:f7:b5:67:de:
fc:92:7f:69:c0:5b:c2:e3:14:94:76:01:15:66:2b:d7:6b:07:
61:b9:80:eb:49:ac:b0:ab:ba:3d:0c:da:b3:e2:48:34:00:41:
21:7e:4b:64:bf:e2:c3:56:b0:66:a4:91:e8:3b:36:dd:a5:d5:
27:fc:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:11 2026 by rpki-client