Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: k6SUU6GddPrk4/s7xXqOk/4uAlMHvl+e49r8L8zXcG4=
Subject key identifier: 59:A9:92:F6:57:7C:90:6B:34:38:C5:50:E8:28:DE:FC:9D:BE:22:C7
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 01A08AFAD849FBAE9B880430C7E28542FC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 11:01:30 +0000
Manifest this update: Thu 10 Sep 2026 11:01:30 +0000
Manifest next update: Fri 11 Sep 2026 11:01:30 +0000
Files and hashes: 1: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
2: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: pHhBHiONuQvYvbYXJyDIVnEa46BR3fBohJoa+H+E+/g=)
3: scZvkun21Is5PRqjjJOokr7vv3k.roa (hash: nZkf46asWgI7bQf2kDqMzJ8K9GjokdXc1dqOvremZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:d8:49:fb:ae:9b:88:04:30:c7:e2:85:42:fc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Sep 10 11:01:30 2026 GMT
Not After : Sep 11 11:01:30 2026 GMT
Subject: CN=59a992f6577c906b3438c550e828defc9dbe22c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:07:23:4e:e0:98:f6:31:71:f9:b6:7b:66:
82:fb:b8:44:25:aa:cb:2a:7d:db:78:9a:f9:cf:dc:
59:77:0b:63:7f:1b:20:cc:bd:bc:d2:be:74:54:2d:
96:91:16:87:c3:f1:9d:fb:2e:e1:12:90:ea:a6:b2:
8e:e1:c1:8e:09:89:4d:6c:1f:0f:a7:d7:36:7a:5d:
0f:e0:1a:d8:e6:28:b5:db:7a:30:d6:62:98:29:76:
7e:8c:c5:7c:c4:f9:1c:0c:5b:a8:1d:88:3e:2a:d3:
47:e8:67:3a:21:da:4b:c8:ac:9f:6e:5b:05:a6:ff:
4b:06:52:f0:cd:80:1d:e9:7b:8b:19:c5:26:fe:41:
b3:2b:bf:eb:30:d2:0e:d4:31:97:bc:3e:80:41:5e:
d0:c1:33:78:a7:56:fc:94:ec:55:0d:59:2f:af:3b:
f6:ea:75:3b:6a:b1:90:c3:83:a5:6b:bb:c0:3a:03:
44:e2:f5:db:fe:ea:fc:2a:ed:8f:91:85:17:71:12:
81:5a:21:7e:ab:1b:ea:45:81:34:6a:ca:2f:da:9f:
3f:32:12:9e:a4:a1:28:93:89:23:22:b0:ac:09:93:
90:4f:c0:da:34:fe:24:02:3f:78:31:44:cf:83:7c:
2e:b2:4b:fb:ff:98:bc:2f:6f:3c:17:14:56:87:a2:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:92:F6:57:7C:90:6B:34:38:C5:50:E8:28:DE:FC:9D:BE:22:C7
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:f3:9b:ab:87:46:98:4d:ce:04:e2:1d:4a:98:84:ab:21:
f2:18:d9:17:10:65:c6:10:41:2f:e4:72:44:93:11:5b:d5:92:
f3:13:76:ca:d6:1d:b6:52:e8:86:a7:55:52:99:29:ae:85:aa:
15:d8:23:f1:5a:78:20:70:b1:37:e0:21:05:94:ef:79:a2:70:
71:69:36:df:0f:44:25:9b:03:25:28:d0:0e:82:f5:4f:32:94:
f7:60:07:1b:af:bd:6e:cc:6c:d9:f8:8f:34:7c:7c:5a:ac:11:
a6:0f:96:47:22:58:b0:dd:b3:36:46:d2:f2:07:c6:a9:c3:25:
f9:b6:4a:4d:9e:1a:1d:c9:d0:c5:75:cf:0f:a4:87:62:e5:43:
45:ff:c9:77:67:42:0f:6f:d4:da:17:8f:a0:0e:09:fa:5e:24:
83:74:e6:46:63:33:53:dd:c4:1d:27:2c:34:17:72:7f:2b:46:
08:a5:96:0f:b4:1e:51:6d:bf:a9:83:be:b7:45:d1:a1:b0:52:
39:76:47:3f:e4:21:7e:08:11:bb:3c:04:74:44:4c:71:02:d8:
4a:c0:2e:f4:71:7f:ea:c7:f9:fb:21:ba:f9:b9:05:10:de:49:
35:dc:51:54:b8:00:3e:ec:9b:a6:2a:12:d8:0b:e6:fa:00:9b:
96:54:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:30 2026 by rpki-client