Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: aLKihOVcsrQymmEazevASXW+4HaKSg+zUwvdMMQU8fc=
Subject key identifier: 9B:D4:C9:47:95:66:9F:D4:34:C8:7D:F8:8C:66:CF:6A:1D:A7:FA:59
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 01A0B50934A0F3FBF13E09875DAE245F3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: D7
Signing time: Fri 18 Sep 2026 15:01:14 +0000
Manifest this update: Fri 18 Sep 2026 15:01:14 +0000
Manifest next update: Sat 19 Sep 2026 15:01:14 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: 4AF0ZaWE7ukB9JLQXHHkqfAGEEGX9DHEO2BCvyE7Z8I=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:34:a0:f3:fb:f1:3e:09:87:5d:ae:24:5f:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Sep 18 15:01:14 2026 GMT
Not After : Sep 19 15:01:14 2026 GMT
Subject: CN=9bd4c94795669fd434c87df88c66cf6a1da7fa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:6c:97:d1:f6:13:9d:33:e5:8e:bc:f5:6a:
9a:31:38:bb:90:f9:8a:97:91:f1:19:b7:1a:31:d0:
6b:02:42:05:e2:16:91:02:61:af:b0:1b:ad:65:f9:
df:70:07:32:26:2e:9a:fc:88:e0:c5:f7:35:0c:bd:
d0:b8:eb:ea:ec:75:95:8a:20:b8:7e:d6:3e:20:81:
c5:62:99:f3:e6:58:c0:2e:5f:1c:2a:a9:d5:1d:f1:
9a:d6:7b:e8:56:18:38:82:36:2d:cd:64:e5:1d:10:
51:4d:6a:74:17:ca:a7:a7:e6:b7:71:bc:ff:ef:3a:
4f:a9:fd:81:fd:f0:e6:57:f2:83:c6:72:25:c5:1a:
e6:90:d0:a1:8f:da:41:9f:0b:33:73:88:dd:48:01:
f8:97:25:b1:1f:65:d8:7a:e4:02:b4:21:da:8a:7b:
be:64:cc:59:73:22:83:e1:2d:49:76:12:5f:61:dc:
3f:eb:48:76:a4:00:fa:00:fd:23:b1:70:2d:3b:57:
92:16:5e:8b:6f:a2:3b:8e:75:b2:f4:94:86:e5:dd:
bb:45:9b:e9:61:2e:54:bb:f8:cd:62:b8:8e:cb:c1:
25:40:c2:2c:19:1c:ad:8b:b9:92:c4:5c:f2:23:d4:
e2:dc:33:b1:b8:ff:f7:12:8f:2e:6b:8b:37:1d:8e:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:C9:47:95:66:9F:D4:34:C8:7D:F8:8C:66:CF:6A:1D:A7:FA:59
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:f4:4d:f4:a6:4a:6d:cf:22:d9:be:1a:d9:1c:78:ed:f9:
88:c2:54:e7:f4:78:c5:27:74:9f:95:a8:5d:73:32:2c:6a:5a:
2f:91:09:c7:5f:61:03:34:2f:ce:e3:7c:89:aa:7a:5d:23:5f:
9f:0a:9e:a1:0c:01:ba:f0:33:4b:d2:0b:ab:ba:06:7e:a3:68:
d8:28:80:4e:40:b7:03:8a:fd:d2:8f:20:fb:9d:72:96:c4:29:
c2:1b:20:25:c0:fe:fd:b2:b1:be:39:47:ac:b7:9a:aa:e4:6d:
13:08:3d:b7:5a:96:18:ff:be:a7:32:0e:87:53:2a:50:32:02:
ac:46:7f:13:e6:9e:e2:1b:e0:2e:86:50:ba:74:56:56:26:7d:
70:78:40:aa:51:a7:e9:e3:f6:c1:a0:70:d3:91:b4:dd:9e:c4:
61:7d:46:db:f1:8d:8c:71:d0:44:95:05:c3:c7:38:04:fd:86:
8a:bf:2e:65:5e:0d:e1:86:a9:c2:5d:50:81:30:24:87:67:15:
10:cd:1d:84:65:e8:4b:74:a6:7f:86:f9:79:52:10:8a:be:dc:
18:70:39:48:c9:48:7e:20:ac:28:a9:79:e7:87:1f:ee:3f:5b:
bb:b3:c6:01:09:30:a3:ff:9f:6c:ee:32:91:f9:05:73:b8:bb:
ff:c0:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:33:25 2026 by rpki-client