Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: fNvj7JkEToqtQfBF2oDp2ODWpnVbDQmoJQyqRa8w7VQ=
Subject key identifier: 64:5F:C7:76:22:B7:23:AF:F1:13:67:6A:39:7D:3F:0F:74:3D:DB:9F
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 01A0BAD414AC4CE5B68E6185DB239B6D1FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 11D7
Signing time: Sat 19 Sep 2026 18:00:56 +0000
Manifest this update: Sat 19 Sep 2026 18:00:56 +0000
Manifest next update: Sun 20 Sep 2026 18:00:56 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: 5PCEztLwy5KY6fdtL8odxI60qcIl3oIHd9IfmLfGAew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d4:14:ac:4c:e5:b6:8e:61:85:db:23:9b:6d:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Sep 19 18:00:56 2026 GMT
Not After : Sep 20 18:00:56 2026 GMT
Subject: CN=645fc77622b723aff113676a397d3f0f743ddb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:a9:7f:86:8e:c9:44:dc:7f:02:e7:ff:87:
7f:af:8a:c2:80:39:a1:4b:2c:99:6a:0b:4d:50:59:
7b:ff:03:7d:e9:82:31:68:56:e3:34:a9:b6:dc:89:
44:3f:7a:01:ef:bf:fd:ce:c3:d6:61:06:71:a7:dc:
7a:0e:b4:cc:3f:82:44:72:4c:0c:7c:8f:9c:1b:1f:
24:02:14:7b:ab:a4:f0:9c:06:c6:60:8e:6e:1c:2f:
90:61:ec:88:e3:74:d2:fc:e3:ea:37:6c:42:41:c6:
4b:bc:53:4a:dd:54:a9:3d:e2:8b:25:88:25:5e:79:
06:a7:2a:d9:7a:d9:56:a4:3e:4a:c5:ff:c4:33:94:
4b:6d:13:92:05:ae:fc:9b:cc:a4:11:56:45:06:13:
e1:d9:bc:89:16:d7:0d:8a:4e:08:99:a9:af:3a:c2:
ce:cd:2b:a0:f8:b4:6f:6c:8b:ce:a9:f3:a7:44:9e:
e6:39:9e:79:93:29:43:b6:83:d1:40:cc:8a:54:c2:
20:55:d6:b9:b6:ed:07:79:93:a9:79:bb:ee:10:81:
b8:40:b4:25:5e:6e:c5:a9:fa:a8:87:fb:7e:a1:57:
8f:b5:df:9f:a0:2f:a2:9a:ab:86:18:68:41:42:dd:
55:f5:09:41:bf:a2:80:71:00:9f:70:4c:80:c8:91:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:C7:76:22:B7:23:AF:F1:13:67:6A:39:7D:3F:0F:74:3D:DB:9F
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:f4:83:2b:a5:60:e5:91:b8:62:ab:dc:01:7e:e5:69:8f:
04:91:b3:28:d5:24:6b:a0:13:97:5c:b9:8f:5a:f9:ae:ab:0a:
b8:08:5d:9b:e8:bb:51:06:86:18:f2:c1:9e:3a:97:d3:e3:4b:
49:92:01:64:42:20:9e:b7:4e:07:42:a0:24:7f:65:1c:49:21:
23:98:4f:9e:3d:e8:2e:a1:97:b9:4a:fb:a7:a4:a8:e3:95:d9:
09:11:cc:0a:7a:31:1a:26:ef:85:40:b2:59:8a:5d:4f:18:57:
01:f9:85:5f:bd:9f:e3:d1:b5:51:f2:94:9e:5b:00:b0:05:cf:
55:62:2e:e9:0d:bb:3b:ca:05:47:5a:3c:8e:0e:19:1d:5c:d0:
3a:17:11:a6:9f:19:76:f9:09:05:6c:3d:cb:a5:01:ec:4c:31:
2d:b1:c6:55:72:7b:84:71:d4:29:3b:c7:ab:32:c4:1d:f4:e0:
2b:26:a2:93:04:3a:1c:ef:07:0f:b6:fb:d7:88:05:25:f1:46:
f8:e8:0b:5d:90:ed:4a:b5:d8:a5:57:a9:1a:4b:38:cf:dd:de:
73:49:c2:69:c1:72:e1:0a:3e:41:97:bf:c4:52:65:04:57:3c:
a9:c5:19:70:9f:af:ce:2a:3d:64:bc:6e:ce:73:c6:bf:70:e6:
a2:4e:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:31 2026 by rpki-client