Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: L+Pd0StcWr3MzDxX2EFRHk2uifsYiBGB511BaPdQCTw=
Subject key identifier: 98:90:32:9B:E9:23:63:B8:72:F4:A9:3A:92:07:84:DD:09:44:33:63
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 01A0016F42D92A5E6EB4235A5F52AA290FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0831
Signing time: Fri 14 Aug 2026 18:01:03 +0000
Manifest this update: Fri 14 Aug 2026 18:01:03 +0000
Manifest next update: Sat 15 Aug 2026 18:01:03 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: rCZrFYUvrKgZWDDH6c4HBwYBZvpc96ED9ZRacnMpoXI=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:42:d9:2a:5e:6e:b4:23:5a:5f:52:aa:29:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Aug 14 18:01:03 2026 GMT
Not After : Aug 15 18:01:03 2026 GMT
Subject: CN=9890329be92363b872f4a93a920784dd09443363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:25:1e:79:ee:fd:b4:3b:c6:fb:d0:31:7e:
0e:f3:19:62:28:8d:69:68:d5:97:ee:21:83:62:67:
58:d5:72:52:6b:90:82:3c:b8:cc:62:42:36:44:2d:
6b:bc:c0:dd:97:85:13:5e:3a:55:dd:f8:05:08:14:
d2:50:9f:53:b3:33:d5:e6:89:1c:f7:32:d0:ef:53:
61:f6:e9:0b:f3:cb:bc:01:e3:61:15:36:45:1b:ef:
f0:0f:d2:12:2a:11:df:24:97:bd:8e:d3:75:71:01:
78:f2:82:ea:5d:c3:c1:71:ef:ac:51:95:0f:9b:fb:
02:1f:c7:13:ab:95:39:dd:2f:f4:98:59:c0:91:52:
d7:5c:28:04:dd:b4:50:ac:a3:88:29:fb:38:26:31:
01:6c:ed:76:4c:a8:1a:30:c4:12:2d:ea:4a:05:fd:
31:2d:3b:a2:7e:ef:cf:38:e8:53:28:ae:67:d3:e0:
c6:74:45:63:5d:d6:c9:5a:0e:3d:5c:c2:bb:1c:6a:
17:bd:1d:cd:f4:e8:98:25:11:1d:98:50:12:f4:cf:
8f:57:3e:d6:13:e1:5a:d4:71:91:26:bf:dd:5b:97:
06:af:a0:76:88:b1:5d:ae:f6:02:0d:fb:ae:57:f5:
b1:57:3d:37:10:60:28:59:18:86:de:ad:b2:96:10:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:32:9B:E9:23:63:B8:72:F4:A9:3A:92:07:84:DD:09:44:33:63
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:46:9e:fa:3f:b8:e3:58:8b:8d:54:e9:89:11:ef:7f:0f:f0:
06:0b:14:0f:ca:b6:6f:62:7d:eb:c7:32:7f:2b:53:77:0b:9e:
15:dc:b6:00:0d:03:4d:05:29:5f:4a:68:fa:82:f6:9e:ff:58:
a4:e1:c2:c5:b5:a5:8d:63:e0:fb:49:88:8d:7b:a4:68:3c:2b:
92:ad:89:94:14:ff:b5:d6:75:a9:a2:1c:f7:ad:64:62:d7:ea:
46:f3:5e:77:ef:33:3c:e2:ed:15:ac:13:2d:48:c5:bc:ad:59:
a5:c0:f4:69:b5:38:a5:01:f9:df:18:f2:2a:e4:d8:ea:4e:80:
1c:27:ea:75:60:2d:48:0e:6d:0b:52:32:56:10:92:f5:e6:9c:
9e:59:3e:1f:29:1c:69:56:e0:88:a8:2d:c2:09:67:83:32:94:
90:07:dc:f1:49:ca:08:ee:e3:d7:7d:cf:96:4c:9b:21:0a:16:
da:6b:6d:49:8a:30:a9:bd:4f:d3:7d:54:50:5b:7b:9d:ec:87:
81:dc:30:05:c8:47:2e:cd:11:d3:ce:1d:49:bc:2e:96:c5:cd:
a6:7e:6e:ca:88:91:ac:e6:5e:b1:f4:02:30:25:07:ef:8a:d4:
9f:3f:39:d5:01:a3:61:27:64:15:c2:63:9a:7b:30:28:23:a9:
88:4e:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:24 2026 by rpki-client