Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: yXOEYRaOpTC3vfqQIw0np+q5wmupFzeHjiM/puKY2uw=
Subject key identifier: AA:78:57:9E:53:3A:0D:8B:C4:EE:55:F1:03:B4:64:BF:7D:64:DC:59
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 01A0DB3AF5804BD77007B0E52823CE7C6BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0E1D
Signing time: Sat 26 Sep 2026 01:01:09 +0000
Manifest this update: Sat 26 Sep 2026 01:01:09 +0000
Manifest next update: Sun 27 Sep 2026 01:01:09 +0000
Files and hashes: 1: 41uTXUE3-Tyf_FkkFMPgrkYthMo.roa (hash: 9Aolk2ywdWY79USk6tBgdgUvgIQSTS6ltMiW7geqE8M=)
2: R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa (hash: JOhc4+TJAT9y3euT9g0kxLqAA+8lYprveqxEcA29tPI=)
3: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
4: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: 2IdLBjf1WvQA/nXXxOByVwt04+35wGIBnt/0c2kxXFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:f5:80:4b:d7:70:07:b0:e5:28:23:ce:7c:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Sep 26 01:01:09 2026 GMT
Not After : Sep 27 01:01:09 2026 GMT
Subject: CN=aa78579e533a0d8bc4ee55f103b464bf7d64dc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:da:e5:b3:9b:f4:1c:9f:55:84:2f:fb:19:
ec:1a:f2:98:78:47:a0:fb:b4:f7:2d:1b:5b:66:28:
fa:76:81:9e:d7:b7:cc:5c:75:55:69:65:a0:8e:30:
b7:f2:47:c5:93:8a:63:3f:de:6c:50:fa:6c:5d:2e:
fd:8e:1d:25:3c:7c:19:7b:a2:93:55:40:73:d6:d7:
6b:21:3d:27:6b:34:57:bc:29:58:70:51:6f:f8:00:
5b:78:43:1f:77:7f:26:4f:30:fb:c3:6a:4a:89:11:
09:22:45:5e:ce:19:cc:3d:3c:dc:eb:ff:5e:d0:f0:
74:f1:7d:09:c5:04:d5:91:d0:21:a0:cc:48:98:5d:
d4:65:df:2f:43:e2:ca:7a:5a:5e:bf:a3:7a:0b:44:
44:25:09:36:5e:a2:f8:74:1d:6b:2c:31:5c:80:3c:
55:38:58:6c:8b:fe:52:35:c7:9f:ec:29:e2:24:43:
ce:6d:25:82:78:4d:93:a9:e8:c8:44:67:4e:f0:8c:
91:16:80:50:d2:43:6e:b0:b2:a4:25:7a:0d:ad:24:
dd:95:c2:4b:e5:d3:50:e9:dc:68:d1:32:e4:28:80:
04:e8:8d:6c:de:f4:8c:c2:6d:77:a3:df:38:23:64:
35:20:e1:48:22:44:bd:f0:a9:77:02:05:d9:51:21:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:57:9E:53:3A:0D:8B:C4:EE:55:F1:03:B4:64:BF:7D:64:DC:59
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:85:d2:15:36:3b:19:73:67:b5:8d:59:cf:10:75:96:08:
85:fc:65:ee:01:81:49:0d:fb:f6:6f:ca:8e:e7:03:7f:44:c3:
d9:ba:49:06:81:44:83:9d:5c:82:7d:cb:b4:8c:81:fa:61:9c:
d4:91:c9:bd:14:4e:08:67:03:54:43:71:7d:32:6e:d2:0b:06:
7d:41:f8:0a:1e:25:49:2b:b7:e9:49:51:f0:53:50:87:62:58:
d9:2e:90:16:ac:42:94:7d:08:cd:5f:34:53:13:12:58:9c:72:
5a:c2:19:07:a0:45:b3:d0:90:40:62:ee:b3:44:b5:83:13:c2:
54:8c:cb:35:bc:d6:39:13:0d:c8:82:b8:57:64:fd:71:61:93:
a0:e4:84:8a:85:df:25:4e:ed:23:f8:ea:a1:47:27:c0:be:08:
0f:ec:b0:ea:b6:8f:c9:6b:d9:50:ab:89:5b:c4:a5:6e:88:38:
f1:1d:1b:f9:b1:b4:c4:1b:3e:35:69:84:28:c0:18:2d:09:db:
f3:99:26:4a:44:77:c2:e1:53:cf:98:b0:eb:9c:68:4c:af:84:
43:3a:ed:2a:0d:9b:e4:29:a1:70:3a:cc:e8:98:79:31:83:71:
88:f6:f1:66:f2:6e:ab:3e:e3:1a:2e:e9:56:87:79:4c:c1:25:
83:31:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:16:21 2026 by rpki-client