Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
File: PM6ikJsxCrIUek4InbjQLWM67aU.mft (raw, json)
Hash identifier: igMep46P0d+wZEmX7MPCn7Hzvh3JQhy0PCI5klvTCaA=
Subject key identifier: 09:D2:24:2A:11:13:43:1D:DD:99:6A:02:81:46:29:A1:D8:50:B2:B2
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 01A0BEB039D0C9FD4AC2CA3EF323B42C1135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:15 +0000
Manifest this update: Sun 20 Sep 2026 12:00:15 +0000
Manifest next update: Mon 21 Sep 2026 12:00:15 +0000
Files and hashes: 1: PM6ikJsxCrIUek4InbjQLWM67aU.crl (hash: 4Od3eXThni2P36eIlyMLcNkeRrUE4759wQT97AwlVEs=)
2: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (hash: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=)
3: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (hash: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:39:d0:c9:fd:4a:c2:ca:3e:f3:23:b4:2c:11:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Sep 20 12:00:15 2026 GMT
Not After : Sep 21 12:00:15 2026 GMT
Subject: CN=09d2242a1113431ddd996a02814629a1d850b2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:8d:8b:52:4e:80:9e:f5:65:64:ec:34:23:
cf:f9:6a:aa:83:5d:78:2a:43:f7:1f:a8:00:13:10:
31:f0:22:bf:46:f3:36:79:18:01:29:fb:ea:cf:6a:
3e:e7:ed:4d:3f:13:69:ce:b8:9c:4c:53:cc:67:41:
dc:e3:91:2d:3b:9c:61:cc:4a:49:c7:05:af:58:62:
69:3e:af:8b:77:cc:3d:f9:05:34:39:b1:25:db:d2:
2d:3e:90:f0:f6:97:e2:64:1a:c3:70:d6:5d:97:e1:
35:aa:df:49:55:86:bf:6c:cb:8f:72:2f:31:1c:78:
a7:6d:aa:90:ca:f0:8b:a8:57:04:d7:cd:be:3e:1b:
b9:e8:9d:8e:94:c4:41:7a:44:f3:a1:ae:b0:3b:d2:
04:67:94:45:63:78:6a:b3:7e:dc:3e:06:48:31:db:
fa:69:c2:43:46:9c:69:c2:ee:6b:95:1d:93:f7:9d:
21:f6:7e:00:d7:f6:4d:bf:65:c6:ff:64:30:75:8d:
d2:9d:f5:c0:e8:38:26:c3:f8:a0:55:21:c6:24:7f:
d6:96:5d:8f:9b:c3:0c:24:b3:5a:06:05:09:82:84:
ba:47:5d:7a:09:ba:f7:6e:6d:d9:a2:f5:5a:af:29:
2d:4f:5e:3a:7b:e6:1f:6e:76:d2:e6:6c:14:2d:18:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:24:2A:11:13:43:1D:DD:99:6A:02:81:46:29:A1:D8:50:B2:B2
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:12:7d:f3:d8:93:b0:17:ca:b0:d1:1d:8e:b6:b0:17:67:99:
2b:cc:b8:bf:78:1b:c3:a7:3a:ab:0d:b9:ea:cc:fa:08:52:8d:
18:1e:8a:f2:76:4a:fb:6f:86:52:0d:47:da:db:da:e6:c3:be:
41:4c:66:19:62:e3:67:31:5a:9d:dc:af:a5:2a:90:66:28:d3:
d0:a4:d3:72:3d:66:8f:a9:a0:16:a5:51:e0:66:da:14:ab:93:
87:99:36:47:bd:66:b4:b9:53:7e:f9:39:88:17:b0:46:25:7f:
f1:6f:10:e7:6b:a0:15:41:6c:9f:b4:67:17:3e:4c:bb:8e:6c:
a7:fa:1c:f8:35:03:15:46:fe:ae:73:fd:e6:f8:4b:99:a3:70:
4b:93:91:5f:f2:56:ab:fb:79:a8:8b:6b:68:ac:a9:0c:d5:fc:
0d:60:86:1d:a2:65:9c:6f:ae:6c:5b:f3:bc:3e:51:cc:ba:12:
c0:6e:77:81:00:cd:38:eb:d0:45:dd:8e:46:84:4a:0c:02:88:
53:98:c2:d2:b4:71:d8:ca:b1:ce:97:bd:9c:2b:46:86:3f:3c:
39:8d:12:49:2c:ad:d7:63:15:6d:5c:3f:a6:82:e8:19:58:d4:
af:23:53:d3:30:ca:24:c2:2b:6e:bb:06:f9:db:fb:d2:c3:57:
31:97:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:42 2026 by rpki-client