
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
File: c9VcG36S5oU5lP21dg9o3N_aay4.mft (raw, json)
Hash identifier: Lqd8x3R1ngSbAUsonPys3aiK0067fT0yMrSxdrTWdiQ=
Subject key identifier: 51:E9:AE:A6:5A:56:D8:4F:BD:A3:AB:23:4F:BB:B3:1E:8A:DA:71:D7
Authority key identifier: 73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
Certificate issuer: /CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Certificate serial: 01A159D46AFAEBB5498D71EC02CFBDD53982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
Manifest number: 74
Signing time: Tue 20 Oct 2026 15:00:55 +0000
Manifest this update: Tue 20 Oct 2026 15:00:55 +0000
Manifest next update: Wed 21 Oct 2026 15:00:55 +0000
Files and hashes: 1: 2dWzKyzngiwkIBcxPosHIQsoQPc.roa (hash: he07KV6503D/jJKaEYJd8E8I45wHOxTelHt08w/1sd0=)
2: 416iDZRsufO_Y0_MjxS9lic2Hus.roa (hash: UzxERjn77n9uWQWW+xi7g71p8RwsOjMY8Gu8SqM0ixk=)
3: c9VcG36S5oU5lP21dg9o3N_aay4.crl (hash: eHozO2hLurNsuasd2mbnamihjTKWIxp9iQ2hCWNDsNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:6a:fa:eb:b5:49:8d:71:ec:02:cf:bd:d5:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Validity
Not Before: Oct 20 15:00:55 2026 GMT
Not After : Oct 21 15:00:55 2026 GMT
Subject: CN=51e9aea65a56d84fbda3ab234fbbb31e8ada71d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:88:98:da:0e:9a:2a:ba:f9:4e:9c:22:bd:
5c:f0:08:59:70:45:03:06:30:60:94:50:b4:9d:db:
05:71:b0:92:bf:af:c0:e6:01:9e:0b:b3:75:a0:d2:
24:6f:6d:4b:8b:d5:9d:79:8f:fb:c1:0b:40:17:a7:
17:46:6e:09:3d:85:be:a4:69:3b:38:c6:8b:be:f4:
a4:81:99:de:21:56:b6:68:07:f1:ca:80:06:bb:b0:
54:0d:61:ed:bd:27:1f:0e:3f:d1:48:5f:9a:37:85:
9d:26:d8:16:de:05:34:00:01:89:46:3a:9f:fd:86:
42:62:da:78:18:30:e2:7f:96:91:d9:a6:f5:e7:4a:
21:8b:6d:65:82:36:9a:ac:04:32:e1:b7:86:c3:cf:
f6:bc:a0:5f:11:22:67:0a:23:34:a6:83:f8:82:76:
02:da:17:92:7b:eb:88:87:23:2e:77:e3:c6:23:b1:
ef:32:c6:70:9c:03:59:e1:4a:ba:74:ef:95:15:fe:
bd:2b:df:62:67:09:83:5b:f9:66:44:52:7b:c2:78:
60:db:a8:9c:f1:c8:84:1f:6d:96:b5:9f:0b:e0:41:
b5:49:dc:b5:7d:0d:ed:ed:f7:6e:0b:c2:95:de:c9:
d3:38:41:f7:19:49:b3:69:de:9b:44:56:8d:b4:bb:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:AE:A6:5A:56:D8:4F:BD:A3:AB:23:4F:BB:B3:1E:8A:DA:71:D7
X509v3 Authority Key Identifier:
keyid:73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f7:2a:98:02:cd:b4:3c:73:3b:0b:1f:d1:ee:75:b0:4d:38:
8e:79:dd:b9:f4:86:c3:61:b2:99:12:17:58:8c:56:c5:fb:16:
18:5c:bc:85:0e:12:af:0b:b0:a7:ff:29:b7:af:21:a4:db:66:
59:62:aa:04:7c:d8:88:38:2d:9f:d6:52:4b:d7:cb:2f:8e:91:
5c:2a:58:2f:08:52:6e:dd:ed:55:50:cc:2c:13:6f:d3:dc:c9:
0e:cd:04:e9:00:94:16:5a:0b:2e:6b:30:e7:1a:36:04:96:b7:
d7:ad:a0:e9:71:a7:b2:35:37:cd:ca:40:3d:8e:e7:b9:53:9b:
8d:b4:45:9d:68:a7:52:34:7e:3d:d5:48:ba:87:2e:91:d3:7f:
1d:40:7f:2f:de:5b:39:96:1b:5b:6c:f4:20:93:46:a6:15:e9:
de:3b:8c:20:1b:5a:12:b3:cd:fe:26:40:16:ac:8f:ad:d2:40:
e8:67:55:3c:e5:4b:50:d3:f9:02:92:8c:8f:c9:dd:f5:3c:ea:
13:09:0f:ac:8a:b0:d6:dd:fa:b8:13:ec:7c:4a:95:ba:b1:7f:
8b:a9:cb:c7:09:61:c1:51:a6:c3:9a:c9:22:5d:93:e8:ed:bc:
2a:86:af:f6:9c:07:ae:5c:e9:66:f3:8b:c7:96:09:b7:a6:16:
b3:36:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:35 2026 by rpki-client