Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: 4hPkXzKsxrDsLmrqq+5muU29xelOUrL8hFlknRmWuWs=
Subject key identifier: 73:54:9D:34:8C:D1:1D:41:5F:19:4C:98:78:8C:A4:E3:52:42:2A:39
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01A03E5FA42426BA2AA533390A1C5438DC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1A21
Signing time: Wed 26 Aug 2026 14:00:50 +0000
Manifest this update: Wed 26 Aug 2026 14:00:50 +0000
Manifest next update: Thu 27 Aug 2026 14:00:50 +0000
Files and hashes: 1: OTWhYyuLQkjCKbz9jUHCD19EFpo.roa (hash: vWGmjIJCSNv5fdFMpQ8zZyjmVzro4Z5X4Sdye++7cOU=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: fqlMn3rE56aRUSehGKtVxYzWdvO+jpXyOkmp70itPI8=)
3: podK66tMt3lZvNdvpbXgIxZ0Kgo.asa (hash: 7bkRGWpwII4FGKdhAF8hQRW0M96LDy/oByw+whJAwFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:a4:24:26:ba:2a:a5:33:39:0a:1c:54:38:dc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Aug 26 14:00:50 2026 GMT
Not After : Aug 27 14:00:50 2026 GMT
Subject: CN=73549d348cd11d415f194c98788ca4e352422a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:2c:01:00:fc:ff:f2:06:1a:6e:21:0f:d4:
4c:23:b3:af:56:5a:f6:c6:b7:e9:0d:22:1e:7c:1e:
45:53:db:75:43:55:5c:59:1e:d3:8d:f0:5d:38:57:
9b:4a:e7:52:6d:30:66:4f:6c:a6:bf:db:3b:52:84:
cc:cd:3e:0c:8d:ca:8a:d9:45:9c:1b:d2:12:ec:82:
37:66:78:46:d0:49:87:d9:6a:5a:65:af:01:2d:df:
57:2b:65:e9:7a:39:45:5b:83:ba:19:44:18:06:12:
1e:87:ae:db:a4:eb:c2:d0:89:bf:a8:35:f7:5c:96:
76:5c:d9:0c:3b:ef:25:17:bf:c6:71:7d:f3:35:2d:
e7:e6:9e:03:77:ef:0f:21:fa:30:63:81:46:a7:0f:
ee:66:c3:f1:13:f3:96:6a:2c:da:27:10:1e:53:83:
38:df:1d:3f:3a:9b:41:4e:f9:78:c5:56:48:21:a4:
52:51:0f:c2:e1:97:92:9c:a6:d4:f6:04:7b:be:37:
09:67:84:c5:59:c4:b1:1e:9f:61:9f:6f:7c:a9:63:
74:a5:5d:f8:25:5f:7e:e9:28:79:81:26:5e:20:53:
77:75:48:47:77:22:21:ca:4d:90:fe:92:3c:18:e0:
f6:d3:51:48:1f:aa:ad:a3:e9:14:76:f7:b2:a9:a6:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:9D:34:8C:D1:1D:41:5F:19:4C:98:78:8C:A4:E3:52:42:2A:39
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:9f:ce:49:f6:63:2c:9f:cb:3d:2f:d7:f6:2a:e3:82:9d:
d5:ea:29:8f:2b:bf:dd:48:8d:75:ad:ea:16:61:9d:18:b3:7b:
9f:e2:3a:53:0e:3d:bf:33:94:71:1d:3d:41:41:72:5b:1f:ee:
6a:a0:b3:43:06:b4:e6:65:fb:87:b5:44:30:f5:6c:50:f4:7c:
f0:e8:c8:df:78:95:b6:75:bd:bd:7f:81:9b:17:3d:62:cf:cd:
0d:4c:9a:f3:b1:7d:eb:93:7b:2e:3b:b0:77:79:5f:d5:14:2d:
d8:12:38:3c:08:75:15:27:7a:e9:c4:dc:7d:64:1c:30:55:89:
49:a6:72:bd:21:ef:ba:cb:d6:4c:31:6a:35:de:c7:51:d3:8c:
cf:e8:0e:55:ce:2a:7c:57:fd:c7:d0:fc:9d:45:ea:48:bc:16:
02:66:fd:61:a3:52:5f:45:eb:49:93:81:30:b6:61:00:b4:7b:
e9:b5:77:4f:c0:7a:88:4d:8c:86:ce:05:bd:1c:85:00:f0:9c:
78:9a:f4:dd:6b:41:d0:82:18:c6:e2:25:4e:a9:a5:c2:32:37:
60:9a:44:73:6f:45:50:8a:58:ba:b2:fd:06:eb:88:ed:71:88:
77:c2:39:3c:ec:82:da:1d:44:07:ae:05:29:2d:a3:21:10:10:
33:e3:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:00:35 2026 by rpki-client