Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: MezDIHIvT6Mq3ErFPDWLD+aO3WgCs4UQb6D4s8meUIA=
Subject key identifier: C9:67:71:7F:13:1D:51:90:0A:49:81:4A:A3:68:3A:3E:96:60:1B:2E
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01A11B2BED8319A56A41A09D9C8D37886B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 11:00:25 +0000
Manifest this update: Thu 08 Oct 2026 11:00:25 +0000
Manifest next update: Fri 09 Oct 2026 11:00:25 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: bYGcDlhqhxzqwwl0CmeKopcao1OY2XByIZblUs7UYEQ=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2b:ed:83:19:a5:6a:41:a0:9d:9c:8d:37:88:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Oct 8 11:00:25 2026 GMT
Not After : Oct 9 11:00:25 2026 GMT
Subject: CN=c967717f131d51900a49814aa3683a3e96601b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:5b:b1:1c:08:39:06:8a:00:1c:63:79:6d:
1a:18:1f:b8:00:4c:d6:3c:0c:e9:9b:9d:1f:74:93:
44:44:47:32:2f:f9:53:40:46:f8:a2:9e:a7:75:b2:
b5:f2:fb:d2:e2:27:8d:f4:06:e4:c0:8d:b0:9e:12:
4d:41:1f:ce:58:88:94:19:48:25:b4:07:3d:38:34:
d7:53:ba:68:95:cb:0f:39:44:04:4a:d5:be:f6:96:
de:15:f7:bc:c8:d9:fe:92:3b:f2:2e:ab:ae:6a:2c:
58:79:68:cb:e7:c2:4e:29:3c:65:df:6e:d3:bc:3e:
7a:56:96:3f:07:1f:84:93:05:91:df:ba:a7:b1:07:
a5:c8:c0:31:45:e4:ab:94:76:c8:6a:26:e7:81:73:
3f:64:6a:25:74:bd:ce:45:1b:a8:fc:a7:4b:83:b8:
b6:c8:37:ef:0a:8b:f3:47:82:61:53:b4:e5:a9:8f:
29:99:37:43:a3:88:c3:81:cb:8e:3f:63:57:8f:68:
84:78:d3:68:05:2f:49:ac:e4:35:39:87:0b:0b:92:
44:e4:f3:c4:4b:23:8d:19:98:79:1c:b3:aa:ad:4e:
11:d7:1e:13:4a:58:15:06:c5:b0:7d:24:c8:ec:f4:
ef:14:26:bb:23:e4:8b:37:c5:a5:6a:74:aa:ee:9c:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:67:71:7F:13:1D:51:90:0A:49:81:4A:A3:68:3A:3E:96:60:1B:2E
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d8:af:14:04:bc:c0:66:13:26:cf:19:89:97:c8:bd:64:a0:
fa:32:04:ec:5e:de:79:8c:22:9a:f3:e1:f1:58:eb:5b:ff:59:
32:cc:9e:60:6c:be:3a:26:ca:92:5a:a1:38:c4:8d:79:23:e9:
b5:0d:aa:ed:18:28:a5:94:70:2b:a5:aa:74:24:6b:b2:38:f2:
a6:db:d7:26:f4:81:cb:79:64:d4:ae:e1:2e:a1:a0:f1:c8:d4:
c9:3a:0b:76:29:56:c3:53:0f:27:64:93:13:1e:53:df:47:6c:
ae:02:5c:df:a0:2f:4d:23:a2:3a:c4:cd:59:cf:ce:37:f1:84:
59:46:27:b8:0e:12:0b:90:f1:3c:6e:d0:e0:3a:d5:bd:c4:df:
f2:01:b1:e9:38:ae:c6:c0:5a:9d:4d:62:c9:28:1c:38:dd:28:
53:a3:ea:48:cd:4c:f2:df:5e:08:2e:d2:8c:5e:a0:4a:68:02:
ee:51:66:c4:90:46:d2:2f:ee:bc:e6:64:6f:97:bd:db:3e:bf:
fa:e3:88:f4:b7:62:d0:9a:c6:ec:d7:8d:f4:5d:e2:2f:a7:0b:
15:59:8a:4f:71:09:5a:e6:76:3a:22:04:12:cb:ae:b2:86:94:
3c:21:1e:ee:92:f3:b0:88:9d:9c:8e:1e:ef:cb:5b:97:7a:4d:
c6:7c:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:49:51 2026 by rpki-client