Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: WNFgv2Kc2wq5qdWLTU4nhbHLEyqM41uJV21N6eKkdvs=
Subject key identifier: F2:FE:0F:21:43:04:E6:23:B3:49:C7:01:21:31:59:CA:CB:E7:52:22
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 01A0016FD3157E02C83BDE6790E8D81558B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 173C
Signing time: Fri 14 Aug 2026 18:01:40 +0000
Manifest this update: Fri 14 Aug 2026 18:01:40 +0000
Manifest next update: Sat 15 Aug 2026 18:01:40 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: 8E3w1RbI4wb0Tv9ip7PYFPgCFfwaCSNZVykfugQw+zw=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:d3:15:7e:02:c8:3b:de:67:90:e8:d8:15:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Aug 14 18:01:40 2026 GMT
Not After : Aug 15 18:01:40 2026 GMT
Subject: CN=f2fe0f214304e623b349c701213159cacbe75222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:11:00:46:57:9a:f8:a2:e4:54:cc:68:96:
66:29:f9:8f:b0:3e:dc:b2:bf:34:62:78:5e:9c:b5:
4c:0c:b3:60:61:a8:43:d6:c5:79:05:86:ef:eb:4d:
64:a5:a2:e4:28:eb:5b:74:29:2d:47:c4:94:c9:c0:
88:54:c3:4b:65:a9:cb:b4:c2:7e:c8:26:40:a4:f3:
51:9d:d9:ae:5d:42:3f:1f:dc:79:d7:84:7d:c1:c6:
39:7e:28:a9:07:c3:d8:8d:fb:a3:36:65:a9:a4:bc:
8b:3f:4c:ff:f4:52:aa:f5:83:e3:5c:0c:04:e8:33:
1f:e8:78:b8:1a:5a:0a:f1:58:68:2d:13:97:12:20:
a0:25:7f:64:2c:47:95:dc:55:db:61:34:8c:4c:80:
f2:91:eb:bf:ed:a4:3a:d5:04:bc:03:16:03:bb:c4:
de:cc:b8:33:eb:6e:b1:cf:54:42:2e:27:82:e6:ab:
3c:9a:54:1f:9a:04:4c:2a:f5:6d:4e:d1:c9:03:f3:
7f:9e:82:ed:2b:22:b5:7e:19:60:01:0a:c8:c2:dc:
0f:55:1a:6a:56:91:84:2a:8f:48:bf:58:98:f2:1f:
38:03:e1:5e:e0:6c:90:20:71:8a:20:99:df:d4:22:
b4:9a:cd:8f:23:df:8f:18:72:23:37:15:5c:30:b7:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:0F:21:43:04:E6:23:B3:49:C7:01:21:31:59:CA:CB:E7:52:22
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6e:42:26:7e:5d:f3:36:03:5d:ac:79:d1:98:39:c9:2b:b3:
93:d1:81:25:79:e7:45:af:5b:5f:f2:05:4c:01:53:86:44:a5:
bf:c2:94:2b:e6:55:f2:b2:26:ba:e4:84:6c:ff:9d:f5:c3:53:
df:2a:d9:76:1d:6d:7b:eb:a5:6a:bd:28:13:a5:dd:66:1c:3d:
ad:6a:e6:6c:5c:2c:8d:48:8b:04:9c:db:eb:38:b8:c3:c9:d1:
c4:d3:3d:fb:9f:67:0a:da:ed:ae:5e:83:d4:ef:e6:31:a1:fe:
95:00:87:1a:5e:54:e9:d3:bf:be:96:e8:30:7a:76:33:a6:44:
fc:67:f0:97:71:48:bf:27:67:3c:0e:2c:4e:fb:2e:85:11:85:
7c:57:2c:ad:66:9a:5e:b5:14:36:57:4f:f9:c0:f3:c5:2c:cd:
8c:34:23:bc:1f:62:28:f6:eb:5d:31:cf:b3:f4:b0:1f:a7:80:
4e:2d:c7:49:3b:e1:d1:95:90:07:61:b1:b6:b5:19:74:dc:d2:
2d:62:6f:5c:38:79:ad:dd:03:a0:60:ee:ce:74:56:fa:36:13:
ad:47:82:25:e4:9e:ee:ea:49:6d:39:1d:d4:82:e5:84:75:76:
ce:43:c5:11:00:af:da:c6:12:8b:5b:46:6e:f6:91:92:a5:29:
a2:a5:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:57 2026 by rpki-client