Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: KOea1egTBqXgKrB18FIDvKQFnsfDxMG+3KdKRcdxV+w=
Subject key identifier: 2D:A8:E7:DB:69:4A:CA:8E:3E:2B:DA:15:B3:43:DE:6B:BD:CE:F0:04
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 01A13D818550CB57B9F358324CE6D4EC0F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 17E2
Signing time: Thu 15 Oct 2026 03:01:00 +0000
Manifest this update: Thu 15 Oct 2026 03:01:00 +0000
Manifest next update: Fri 16 Oct 2026 03:01:00 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: GY2rx2mdpV7jEZznnpOXHmbkG91Rn2GXhpKtm42Neu8=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:85:50:cb:57:b9:f3:58:32:4c:e6:d4:ec:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Oct 15 03:01:00 2026 GMT
Not After : Oct 16 03:01:00 2026 GMT
Subject: CN=2da8e7db694aca8e3e2bda15b343de6bbdcef004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:30:40:89:82:32:24:6b:cb:a6:05:e7:6f:
ab:a4:f4:00:a8:1f:ea:18:ea:88:b7:80:84:b0:37:
87:4e:93:fa:e7:ce:fa:fd:a9:19:8f:d6:37:d5:ff:
a2:ea:bb:f5:dd:8a:65:1e:d6:9a:dc:63:a1:11:cd:
c0:3c:3e:cb:ef:74:46:28:14:94:79:c4:63:78:b7:
bd:1e:e2:b8:c8:a5:d7:bb:d6:d2:7e:dc:12:41:a3:
3f:62:65:db:93:f6:56:e0:2d:ab:3f:62:5e:9d:33:
30:6d:b5:83:54:bc:e2:66:b4:36:f8:cf:8b:d6:35:
bf:82:66:ac:0a:ee:bd:43:14:e3:de:76:65:84:77:
e4:3b:97:71:a4:3d:86:7d:2d:cf:35:a9:ce:0c:22:
b8:46:4c:32:c4:29:fa:62:da:f0:78:41:63:60:db:
48:8c:c4:1f:1d:3a:19:79:72:bb:5d:b2:20:a6:3f:
71:06:37:5e:4d:7f:a5:80:c8:f3:0f:83:64:27:17:
d9:c1:60:4d:a9:0c:c2:d2:70:30:ee:39:28:ea:1a:
9a:65:29:0f:0d:4c:a0:f7:b2:9a:eb:68:47:20:d8:
99:6a:f0:4e:df:37:de:8e:a2:fa:04:c8:55:2a:bc:
20:97:67:06:8c:f9:49:bb:eb:33:67:2c:dd:e8:d9:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:E7:DB:69:4A:CA:8E:3E:2B:DA:15:B3:43:DE:6B:BD:CE:F0:04
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ed:fe:05:ac:20:c2:cf:70:31:54:a4:20:86:33:d2:25:c6:
c6:88:50:0e:31:42:53:ee:72:9a:66:06:99:a4:3d:7e:aa:83:
ea:de:49:6b:6c:77:10:63:39:f4:cd:f4:58:88:bf:6e:a6:16:
c5:12:e3:36:a2:36:9f:5c:b5:03:7a:c0:f2:c0:7d:be:72:e3:
59:9b:6a:ab:37:21:c6:b8:44:e9:1e:89:ae:05:b9:9c:35:40:
0b:49:24:ca:ee:31:87:a1:23:31:8b:f4:4d:3b:e9:e4:e5:33:
66:c2:16:56:77:cb:78:73:c7:4c:fa:62:73:47:8e:49:62:37:
33:1f:9b:21:cb:d5:52:b0:9e:8d:36:70:83:39:c2:da:56:84:
2a:b3:03:cf:7c:05:07:79:83:91:73:c7:f2:c5:8b:26:4e:3d:
53:35:31:2c:8c:a8:09:90:6e:e3:20:86:6b:16:05:4d:9c:47:
f1:fe:22:14:9b:75:af:9d:b3:f4:4b:26:2e:95:d2:c5:80:b9:
8a:fb:17:2e:b4:24:60:86:7c:8c:00:1e:04:bd:e3:34:5b:98:
77:4c:b7:86:7b:0f:43:e0:81:6f:37:1d:c0:7f:cd:1d:a9:83:
fb:d3:9d:b7:83:bc:f5:ab:61:64:83:f6:bb:20:96:69:1f:2a:
83:db:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:57 2026 by rpki-client