Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
File: dQaZF0ZNHAuKSU6-9c46XW7epmk.mft (raw, json)
Hash identifier: W7Tz39sc2MzeLEfdMsBZPwfFhYGlTiJQl3A/43CaZ2k=
Subject key identifier: 17:C6:B3:5B:AE:99:1F:FA:E4:78:4B:CF:0E:21:30:E0:39:34:A1:F8
Authority key identifier: 75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69
Certificate issuer: /CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
Certificate serial: 01A1174F66D08A78748844025F1AFAD95620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
Manifest number: 17
Signing time: Wed 07 Oct 2026 17:00:41 +0000
Manifest this update: Wed 07 Oct 2026 17:00:41 +0000
Manifest next update: Thu 08 Oct 2026 17:00:41 +0000
Files and hashes: 1: dQaZF0ZNHAuKSU6-9c46XW7epmk.crl (hash: jQUrj2QVlMOupTAmJHiJbFqpOeG+jVKUVXgekE5bktg=)
2: geG4SlpQPLvMgA3uDyLTmIWmxGM.roa (hash: E3yg6GvX7SKVYNC0tw1auLyQDADDfhOFkHhX32lzfek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:66:d0:8a:78:74:88:44:02:5f:1a:fa:d9:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
Validity
Not Before: Oct 7 17:00:41 2026 GMT
Not After : Oct 8 17:00:41 2026 GMT
Subject: CN=17c6b35bae991ffae4784bcf0e2130e03934a1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:f1:2f:08:7b:95:9e:d5:79:5b:81:ca:47:
59:c0:42:a0:96:e1:68:fa:32:23:5b:80:c5:f4:45:
bd:5b:95:5d:ae:51:76:24:23:37:5f:1e:67:b4:10:
a8:f6:1b:c6:69:3a:c0:0e:87:5e:54:32:e0:e4:46:
f0:98:9f:e6:ad:fa:1a:34:7f:22:6c:e2:4b:86:fc:
8a:2c:fb:1f:04:e6:ce:76:1d:f8:6e:d5:94:3a:9b:
a7:ca:92:65:52:69:53:c6:21:79:ed:f6:49:81:ba:
3c:53:ba:d3:97:47:89:d1:34:09:98:c7:5d:37:3b:
0a:60:20:f5:77:21:e5:0f:ae:15:91:8c:7a:1e:f2:
be:ff:0b:60:c5:27:44:7e:f9:a2:0b:b5:1b:d5:e8:
d4:70:95:d7:28:f6:c0:e5:bc:2a:ca:a0:6c:94:0a:
13:86:99:91:9e:09:d6:7b:03:ac:d6:38:ee:31:d4:
b4:b4:7c:00:6a:3a:8a:82:22:e1:a5:3e:79:26:14:
b3:62:87:b1:a7:f4:85:64:8c:b3:55:52:45:82:46:
47:d4:7a:ac:29:fe:11:3a:03:2e:63:46:59:c0:9c:
73:f8:f5:f4:37:c3:43:c0:10:2c:0d:e1:98:fc:b0:
ee:1d:59:e3:16:74:ba:3a:2c:c0:59:45:31:41:bd:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:B3:5B:AE:99:1F:FA:E4:78:4B:CF:0E:21:30:E0:39:34:A1:F8
X509v3 Authority Key Identifier:
keyid:75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:61:0e:a3:5d:de:37:63:ed:32:d9:d1:af:0a:3d:aa:c8:
b0:a1:c9:4d:b8:ef:a2:44:85:c6:72:fb:e3:92:23:a9:14:4a:
61:1e:59:3a:b9:87:a2:51:6a:1c:ad:d9:eb:c2:22:71:3f:06:
4e:80:50:37:99:5a:55:8a:34:22:c4:a8:bb:51:29:82:e7:7e:
26:38:a3:98:e5:c6:e1:3f:00:9e:d4:ae:18:5c:07:00:c1:9b:
ac:0b:7a:1a:7f:33:34:50:57:95:8e:8f:73:11:29:d9:96:65:
d7:ef:6e:44:c8:67:a0:35:ec:f1:9d:fb:b1:ce:97:04:d1:03:
e2:99:1a:86:1a:65:5b:5a:ef:af:86:32:10:16:0f:69:23:99:
e8:77:98:3c:7d:6a:75:30:fb:61:b2:d3:e6:78:08:5b:15:0f:
8e:22:a9:ce:bb:40:48:5d:c1:a2:83:27:ee:63:ec:38:4b:c1:
4a:15:e9:a6:86:c8:2f:ba:e4:47:25:0a:99:6b:1c:e4:56:58:
54:a9:ca:c1:ba:b1:c0:c0:5f:82:1f:b7:a2:d6:1d:cb:17:f3:
17:b8:ad:8f:08:04:e2:22:b3:5d:4e:cc:68:8b:ef:2c:6f:01:
2e:f4:16:39:5f:80:29:9b:29:b9:3d:6e:54:54:00:f7:ab:24:
8f:5a:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:13:01 2026 by rpki-client