Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: 5Z3/h9LdB3GLerbC23z7yvVo6R6SteU7JUEE9nAzJtQ=
Subject key identifier: AF:E8:8D:48:6F:10:AE:F5:7A:87:D4:38:AC:E6:C0:54:D1:9C:9B:66
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 01A1238B58011AA894F9A0F5974A46696DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 1179
Signing time: Sat 10 Oct 2026 02:01:36 +0000
Manifest this update: Sat 10 Oct 2026 02:01:36 +0000
Manifest next update: Sun 11 Oct 2026 02:01:36 +0000
Files and hashes: 1: iikBT2QAMhI0pO1fQIqlbLTfu0Q.roa (hash: +EmJ11d4GwDSAWX/0XCakljAxmrpGGVNg4y/8FSEGCU=)
2: lnQ2qM12OcTN3Tl66lkxIuHBUCI.roa (hash: +iEMNwBTYNtnrtcaCkTfTG4LTW15CLlDWqlFL/QxTSM=)
3: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: YUyw8v6GIi1MXlzePjyKyGihooAcvI08VuKBZ9ZQesA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8b:58:01:1a:a8:94:f9:a0:f5:97:4a:46:69:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Oct 10 02:01:36 2026 GMT
Not After : Oct 11 02:01:36 2026 GMT
Subject: CN=afe88d486f10aef57a87d438ace6c054d19c9b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:48:f2:04:b9:14:b9:c0:0a:f1:91:de:d1:
14:6f:8e:51:a1:52:b1:71:8f:a6:20:ac:37:28:22:
ca:53:a9:83:2b:b9:da:1d:b3:07:09:3c:00:53:5c:
70:e5:ef:d2:f9:bc:0c:15:56:35:0d:9c:2a:04:4a:
47:b6:9a:9b:2d:9e:25:54:ba:07:c8:e7:4f:ea:bb:
05:c6:64:f9:8c:b9:ca:ce:f1:51:be:7b:3b:f2:e1:
f0:90:1b:cf:e1:48:8a:4e:bd:92:b5:dc:dd:27:c7:
98:a3:c5:42:9e:d2:84:0b:6f:72:49:b4:1d:73:e7:
7e:e2:1f:e4:00:2b:01:c7:6c:87:7a:3b:0b:2e:7e:
b5:2b:49:4c:d8:71:68:f4:b1:f0:cd:a3:3d:e3:58:
2a:68:15:90:49:3b:d6:2b:c0:d4:0d:eb:3a:81:db:
7f:96:d3:30:d3:2f:9b:0b:e8:85:06:f7:e8:e5:5f:
b3:7e:d0:d0:3d:20:eb:e2:d1:1d:6f:0a:4e:6a:0e:
5d:12:23:c5:17:11:e8:18:b5:91:67:06:e0:89:5a:
af:d6:2d:1c:e7:7f:09:3c:af:55:39:08:d1:4a:62:
55:fa:08:fc:bd:2f:29:fb:82:d1:81:8a:9c:7c:db:
63:7b:11:84:ef:26:d8:85:01:0b:dc:d0:d8:31:32:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:8D:48:6F:10:AE:F5:7A:87:D4:38:AC:E6:C0:54:D1:9C:9B:66
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f1:42:28:ac:24:7e:95:4f:e7:d3:f5:e2:99:76:7b:34:bc:
a8:88:dc:ae:e2:3e:9b:88:15:6a:0a:68:f3:92:62:93:cd:ae:
b0:80:7a:7a:a7:9d:29:e5:a2:77:e5:22:f3:c9:04:5a:fb:02:
89:27:67:b2:54:ac:ed:a2:2b:04:46:1d:db:8e:f8:bf:05:d1:
09:bc:74:9a:0b:4e:f0:23:4b:89:c5:17:b7:f3:3b:17:ee:1e:
25:b2:dc:e4:64:d5:b8:32:df:01:a3:27:9b:b5:62:48:f7:99:
5b:c9:96:c9:31:fb:af:27:96:4c:0b:c2:ed:af:4e:43:c8:87:
f0:9e:54:18:fc:cb:bc:aa:71:66:9e:5a:48:17:6b:12:43:87:
72:54:8c:51:fd:97:e1:1b:fa:84:14:f0:83:66:e5:1b:f3:51:
6d:26:42:96:c7:31:60:11:22:43:cf:50:08:87:ad:41:11:dd:
aa:e0:b3:c1:87:fc:fe:76:0a:60:dc:4d:8b:a7:3f:57:1d:9d:
23:cc:04:e8:50:cf:54:ba:7f:3a:7f:0d:71:6f:6a:e8:78:1f:
28:4d:83:d8:80:c3:f6:34:1b:dd:c1:67:39:c2:77:d3:bb:25:
e6:d9:eb:55:95:61:77:08:3e:bf:ef:bf:40:05:51:48:4e:66:
16:88:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:36:09 2026 by rpki-client