Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: bpxo4ZAnIQCAaHz0u3gTBZLZ5pjzqdRsd7w+tUsmsDw=
Subject key identifier: 23:63:8F:BE:FA:D3:8E:47:29:BF:62:A8:A1:EB:35:7C:0C:B9:F9:4E
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 01A08A1E7D75759697BBA48860C6A8E36BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 0817
Signing time: Thu 10 Sep 2026 07:00:48 +0000
Manifest this update: Thu 10 Sep 2026 07:00:48 +0000
Manifest next update: Fri 11 Sep 2026 07:00:48 +0000
Files and hashes: 1: _oQxFMzNlOznniUHUPZHi268kuQ.roa (hash: fDFJnV4r1JvMpZQX0gHhVdBTmacaoLVDqifzr7CLi/I=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: AlOAUxgDqdgz886G1LKBP/5lk+UNBtfeW3Fdr2jgc1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:7d:75:75:96:97:bb:a4:88:60:c6:a8:e3:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Sep 10 07:00:48 2026 GMT
Not After : Sep 11 07:00:48 2026 GMT
Subject: CN=23638fbefad38e4729bf62a8a1eb357c0cb9f94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:ba:6e:2f:fc:fb:16:e9:c5:fd:d7:7c:2c:
65:cf:47:7f:5e:0c:3c:76:be:d8:b0:ec:3b:42:32:
19:a5:01:8b:ab:c2:b2:64:cc:ed:c8:3a:6b:60:f1:
f4:93:9e:ee:ae:62:79:43:95:8f:b0:98:fd:f2:a3:
c7:37:cb:91:b9:46:ab:24:34:1c:9f:ba:af:7c:c2:
5c:1a:4c:85:50:d4:20:5b:d9:76:5b:8f:97:17:c8:
7f:a7:bf:e7:26:83:7c:e5:52:6c:51:73:c3:30:c1:
8e:ac:15:c9:9e:b9:be:28:51:b5:8b:be:08:99:e8:
70:74:25:7e:55:ba:c9:f4:1f:dc:16:7a:8e:c8:c2:
08:c5:5a:9f:de:26:49:1d:91:24:f5:de:44:95:0a:
d8:98:35:78:2d:7f:3e:20:34:ae:55:fb:2d:87:52:
9c:ba:15:78:07:43:fd:9a:23:73:b8:94:7e:b5:ce:
bd:5a:2f:8a:ff:0d:17:76:f3:6c:2d:2d:ff:1c:fc:
fe:a6:50:b4:1a:94:de:9e:67:2b:d9:0b:a0:39:04:
3a:2b:38:a1:0e:ca:43:bb:2a:e0:f5:5b:ba:1a:87:
d2:ec:39:42:a5:70:e4:ae:c3:68:2a:fb:c7:7e:b8:
8c:20:07:b8:74:2f:85:d8:78:17:e4:11:2c:9e:ae:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:8F:BE:FA:D3:8E:47:29:BF:62:A8:A1:EB:35:7C:0C:B9:F9:4E
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:31:a8:df:32:51:ff:c2:c0:27:0d:c9:18:dc:10:56:52:
af:b2:68:23:66:8f:bf:6e:58:cf:61:40:31:1d:32:e3:56:35:
e4:95:79:e8:cb:70:8b:01:c7:98:9c:8d:6c:8c:d5:b0:54:4f:
9b:4b:66:fd:5e:36:35:1c:9e:b2:ad:92:15:0a:e4:00:e4:03:
1d:fe:b3:ff:da:ac:d8:90:c9:99:2f:e2:72:8c:68:5c:00:4d:
bf:51:a1:04:d6:ab:ec:3d:0e:8c:4d:30:7a:ae:e2:34:b2:0f:
b7:e9:dc:4b:b2:d3:07:17:97:41:69:49:57:eb:4f:a6:8e:bc:
74:e2:7a:55:ee:ba:e5:3b:61:3b:05:c0:d9:38:be:93:2e:74:
40:e0:43:31:12:24:23:43:da:0d:c3:a6:69:2c:6d:96:2a:95:
68:5c:4c:fe:2c:66:81:72:5e:85:c0:c3:8c:43:11:99:c5:8e:
b3:1a:3b:42:50:b5:51:10:72:b8:95:42:7a:38:38:31:b0:a2:
fd:82:82:0b:10:33:cd:f7:91:eb:f3:fa:01:4f:97:e4:b7:35:
ee:c0:0f:9f:1c:8a:73:1f:68:f1:a1:36:cb:39:bd:32:0d:56:
46:bd:53:56:f1:3b:26:04:de:ab:1b:77:d2:6f:b4:a4:f0:cb:
87:d7:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:37 2026 by rpki-client