Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: 2Qs6eNQ3QekRNMgyXACu5+jazcD7brpf2mTvf/v99jw=
Subject key identifier: 0D:A1:72:04:B6:9E:E2:AF:EE:73:1A:7B:CF:0E:B6:6B:14:9C:9A:FE
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 01A0D983F41BF78F7266464DB6B39A752B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 17:01:38 +0000
Manifest this update: Fri 25 Sep 2026 17:01:38 +0000
Manifest next update: Sat 26 Sep 2026 17:01:38 +0000
Files and hashes: 1: O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa (hash: mRjHVDH2yxnkGdxPRkyTQ4ZPW9vJVfEatCU81GhzSgo=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: pz7zx1721yg/tDpT8vdvgl7aJWj6uNhhgcWkweo0CUg=)
3: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:f4:1b:f7:8f:72:66:46:4d:b6:b3:9a:75:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Sep 25 17:01:38 2026 GMT
Not After : Sep 26 17:01:38 2026 GMT
Subject: CN=0da17204b69ee2afee731a7bcf0eb66b149c9afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:8e:a5:25:2c:22:3b:ab:66:3d:75:09:b2:
85:3a:16:33:15:f4:0f:14:85:c3:a2:4e:a2:40:20:
da:42:23:75:69:71:94:b1:92:25:15:5f:82:6f:7a:
20:5a:11:73:6c:c4:37:0e:3e:c3:aa:40:2d:35:77:
6d:62:0f:b7:1a:1e:64:84:c7:5e:df:a5:1a:ee:f4:
c7:bb:f0:10:a9:bc:89:af:f1:9d:57:92:10:f1:0f:
9b:66:25:92:b8:34:20:ba:d3:19:2a:bf:0b:8f:43:
d2:c4:3c:26:ff:ce:3f:69:e9:af:ea:08:46:9a:ad:
66:27:11:c6:6e:15:a6:d1:3e:04:ec:4e:b0:b2:4d:
7f:93:0b:d8:b9:ae:2e:db:38:97:c0:e2:75:2c:03:
14:84:ab:6a:37:cf:2e:eb:4a:d9:0f:d8:66:54:61:
32:62:42:ee:7a:c7:0e:1c:4d:a1:2c:8a:fc:06:97:
8e:4c:f6:b5:4e:33:04:ec:16:73:c3:f1:05:1a:69:
9a:25:c7:d7:27:f7:cb:65:e8:f3:0c:78:f5:44:11:
eb:de:c5:c9:b6:e1:cc:cd:61:5a:b8:ca:d4:a9:a9:
df:ab:ac:7c:31:74:27:f0:f5:17:e1:87:06:85:69:
9c:90:b3:d3:1b:24:50:d9:a2:ed:48:76:83:60:86:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:72:04:B6:9E:E2:AF:EE:73:1A:7B:CF:0E:B6:6B:14:9C:9A:FE
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ee:fd:ec:ba:5f:0f:ca:3b:05:48:9b:6e:81:5e:7e:0c:af:
9e:1b:0e:f8:73:a3:6d:79:e9:08:45:db:0f:fa:31:76:dd:58:
51:61:43:00:a2:ae:17:d6:04:64:b9:e7:9a:c0:d6:5d:c9:09:
aa:39:40:b2:c3:bb:de:de:27:b4:e6:d5:cd:7b:8c:35:7b:bb:
14:9c:af:25:cc:16:04:9f:9b:ac:a2:b5:e1:0d:9b:8e:6e:9c:
e2:30:dc:07:4a:8f:7e:37:69:15:96:8f:28:dd:58:46:dc:f1:
a3:e6:9f:82:ee:de:1a:d9:18:7c:38:05:ef:1d:52:31:1d:17:
a6:82:c2:4e:a4:40:ea:3a:68:c8:c1:de:28:64:c8:11:e9:7a:
8a:3b:21:84:16:ce:ba:89:f5:eb:6e:c3:5a:9c:6c:f3:0b:ba:
73:ea:0c:87:55:e6:cf:6f:6c:47:ca:8a:c8:8e:c5:2b:b0:a9:
aa:0f:c0:f0:08:30:85:1d:2a:d6:80:dc:28:75:b1:93:41:cc:
d1:63:e1:ff:ca:b0:7e:10:4e:70:10:6e:fc:20:e1:54:9b:7b:
da:eb:33:74:87:00:85:7d:b4:5c:ec:cf:8f:a7:5d:77:a8:d1:
4e:ab:d0:83:2a:a7:3b:e6:57:54:45:e7:16:8a:e5:eb:46:f8:
08:d9:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:11:31 2026 by rpki-client