Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: 63LsOXQFOB6DF5ASa1RLXHyjaYcxtrfSbo1GJXVBK2U=
Subject key identifier: 13:D9:17:39:AF:B4:28:F3:D8:6A:EC:EE:D2:D2:CC:8B:EE:6E:D5:49
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019D382E6ACD233683638474AE282FC34161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 15CD
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: waCn3lb48yPh0bsq3oblyaGsuaoGsPe1EvreQUvxoic=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6a:cd:23:36:83:63:84:74:ae:28:2f:c3:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=13d91739afb428f3d86aeceed2d2cc8bee6ed549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:f8:31:9a:ea:13:ee:ab:0e:c0:37:a4:88:
e0:3d:5f:67:b2:8e:ee:e7:ac:44:ee:e2:9d:9e:53:
98:30:c5:df:b2:6a:37:ee:5b:5f:2b:38:ca:8e:a0:
5d:1b:90:79:c8:ed:b6:6e:47:93:2c:67:80:18:73:
e7:98:db:0e:df:0b:3e:94:1b:0f:04:68:c5:0c:f1:
0e:bf:9b:80:68:7b:1d:50:70:c8:6d:3c:fb:1a:7f:
63:a8:7e:22:4c:66:ab:4f:c6:e7:ff:da:f3:25:ad:
6c:34:1f:bb:cd:40:2c:7c:0a:b6:e9:ac:b5:04:5b:
43:97:11:b4:63:c2:f1:97:fc:6f:cc:e8:51:0b:48:
53:4b:15:f0:39:5f:9f:bd:fd:8e:f3:4d:e0:49:07:
a0:ca:5d:17:ed:b3:54:47:ad:e6:63:04:ca:69:e5:
57:d1:53:ea:74:bd:fd:ae:4e:78:05:29:0e:17:28:
65:e4:63:61:a8:a6:7f:1c:4d:d2:c0:f5:8d:c6:8f:
da:f9:ed:37:fe:57:1c:68:3c:a1:a8:07:4e:7f:25:
b0:65:a8:4b:4b:b4:28:39:12:e1:72:68:a5:91:ff:
4b:a3:24:94:3a:4b:00:c7:3d:ad:ea:a6:ed:c9:a1:
69:8a:3f:62:33:a5:8b:8a:2c:f4:1e:cf:80:0d:74:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:17:39:AF:B4:28:F3:D8:6A:EC:EE:D2:D2:CC:8B:EE:6E:D5:49
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:59:9b:f3:ca:a8:93:39:7f:e4:79:a5:30:06:8c:3e:56:
d1:02:4a:84:6e:56:21:1c:bf:c0:7c:50:72:03:a9:87:7c:22:
c1:8a:ef:4c:56:f0:2c:8f:ba:91:8d:7d:e5:3b:c9:39:40:7d:
0c:ca:be:60:30:c2:80:6f:52:a6:be:7b:c5:db:7b:ba:8f:3e:
c6:6f:50:8b:ef:6e:4a:eb:7e:b4:5b:44:dd:45:e2:42:4b:65:
9d:50:1d:bb:04:44:5c:03:31:28:0a:0a:81:7b:40:c9:7e:2b:
de:8b:7d:46:06:e4:bb:d4:c0:51:de:13:4c:61:be:49:ed:49:
c7:0f:7b:14:fc:b8:b3:a1:0b:a9:22:ac:22:1c:c0:ac:89:5f:
f3:c8:6f:b3:fe:e2:0b:95:68:03:ca:00:c8:6d:69:55:5b:e0:
c3:33:7d:72:8f:b6:55:96:88:7a:ef:f7:ae:19:01:07:cd:f3:
97:61:87:49:37:24:d1:17:3c:68:a5:8f:42:01:1b:13:97:f7:
b8:7d:9c:41:fd:92:80:22:e5:58:62:ef:ad:96:52:a1:f5:e2:
0c:30:48:42:87:35:a0:c0:cf:5d:45:0f:4a:81:95:68:d6:fe:
b1:f7:1a:bc:af:04:77:bf:7a:57:74:5b:3e:f7:26:e3:d3:bb:
2a:66:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:18 2026 by rpki-client