Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: R34UhITFemQcLu8yeAPQ+I1zBS5FBeBqFTD01Evop6o=
Subject key identifier: F7:3A:BE:EA:87:6A:F5:63:EF:3B:1B:0E:A1:EA:D5:62:A7:34:92:1D
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 01A0E8F6A97BDD8B1C7E1BC2C2D012A6A622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0F09
Signing time: Mon 28 Sep 2026 17:01:14 +0000
Manifest this update: Mon 28 Sep 2026 17:01:14 +0000
Manifest next update: Tue 29 Sep 2026 17:01:14 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: oZvFSohOP7LpSvZi21+GBeP3ZvJo/taJb5xtxZ3sXcI=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:a9:7b:dd:8b:1c:7e:1b:c2:c2:d0:12:a6:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Sep 28 17:01:14 2026 GMT
Not After : Sep 29 17:01:14 2026 GMT
Subject: CN=f73abeea876af563ef3b1b0ea1ead562a734921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:17:b8:14:b6:da:0e:c0:33:61:51:87:f8:
69:95:4b:51:eb:1d:93:8a:a8:ef:83:f0:e4:86:25:
82:33:ca:1b:10:55:4f:28:4a:5a:89:dc:a7:b6:29:
56:57:90:cf:b2:83:31:76:6f:7b:4d:6d:e7:be:fe:
c4:3c:5c:d9:93:5c:5a:9a:9f:76:28:bb:4f:1e:60:
4c:c0:ad:10:7b:8a:ca:b1:24:27:68:a2:39:7d:30:
b7:04:1f:b3:ef:71:de:69:99:1b:82:fd:82:74:7b:
8b:65:7d:74:64:8a:22:1f:cc:63:23:4f:5a:5d:6f:
d8:57:1d:02:2a:70:0f:62:e1:e3:d4:a9:fb:44:24:
0b:b0:d8:aa:ab:21:a6:a4:e8:67:6f:7c:9c:28:75:
83:54:17:82:81:50:28:f5:ec:0b:49:a4:e6:37:49:
61:9d:24:a0:dd:eb:96:01:dd:13:53:f8:70:a0:00:
ba:e5:ee:3f:e8:5b:6b:81:a8:2c:1c:1e:94:26:bf:
d9:2b:77:cd:3b:9f:8b:5b:e9:c4:14:51:e5:8f:7e:
a4:b0:99:d1:7e:f5:87:13:a4:5e:d0:ca:b9:a8:eb:
48:75:8e:24:dc:f5:d4:35:74:d8:93:93:e6:90:66:
27:55:b6:24:8c:87:dc:6a:30:2f:ad:d3:b1:49:a6:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:BE:EA:87:6A:F5:63:EF:3B:1B:0E:A1:EA:D5:62:A7:34:92:1D
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:27:24:73:c9:b7:63:47:9e:00:7c:ee:e5:e5:98:6d:59:
9d:e2:e7:c1:21:11:d8:f4:bb:2f:c1:fa:99:0b:df:1c:2a:92:
24:d4:a7:6e:55:30:be:4e:d3:df:26:23:76:2d:73:93:db:8c:
b0:e7:75:c7:c9:75:23:66:5f:f2:7f:c6:9e:c2:54:03:61:2d:
ea:e0:74:87:72:63:ae:f2:e9:0f:1c:93:80:1f:44:7f:39:33:
48:eb:dc:4a:e7:0f:b4:4a:bb:28:82:e9:1b:85:2b:16:bc:10:
ca:58:52:6f:e5:d0:53:ec:dd:eb:e5:8d:25:00:d5:83:68:30:
21:fd:24:a3:66:4f:a8:35:0c:25:f9:97:79:cf:27:96:31:7e:
49:c9:91:5f:e8:9e:3d:d1:31:b3:ff:e5:eb:07:7a:ae:90:55:
08:39:36:fb:35:33:93:70:94:ed:1e:75:5a:a5:a1:30:ac:a5:
f2:30:9a:30:53:40:52:00:68:cb:69:ed:2d:3d:cb:34:75:3f:
5b:a0:d8:a6:27:19:27:1a:da:ae:44:f6:8f:18:56:6c:f8:cf:
48:52:3d:f2:61:32:6e:a3:d6:da:fd:e9:c7:2f:8b:ec:51:6b:
3f:55:a1:25:d6:08:ac:7f:84:50:47:61:45:cf:56:e9:82:01:
7f:e4:cf:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDo9ql73YscfhvCwtASpqYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjYwOTI4MTcwMTE0WhcNMjYwOTI5MTcwMTE0WjAzMTEwLwYDVQQD
EyhmNzNhYmVlYTg3NmFmNTYzZWYzYjFiMGVhMWVhZDU2MmE3MzQ5MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39EXuBS22g7AM2FRh/hplUtR6x2T
iqjvg/DkhiWCM8obEFVPKEpaidyntilWV5DPsoMxdm97TW3nvv7EPFzZk1xamp92
KLtPHmBMwK0Qe4rKsSQnaKI5fTC3BB+z73HeaZkbgv2CdHuLZX10ZIoiH8xjI09a
XW/YVx0CKnAPYuHj1Kn7RCQLsNiqqyGmpOhnb3ycKHWDVBeCgVAo9ewLSaTmN0lh
nSSg3euWAd0TU/hwoAC65e4/6FtrgagsHB6UJr/ZK3fNO5+LW+nEFFHlj36ksJnR
fvWHE6Re0Mq5qOtIdY4k3PXUNXTYk5PmkGYnVbYkjIfcajAvrdOxSabX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc6vuqHavVj7zsbDqHq1WKnNJIdMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYUnJHPJ
t2NHngB87uXlmG1ZneLnwSER2PS7L8H6mQvfHCqSJNSnblUwvk7T3yYjdi1zk9uM
sOd1x8l1I2Zf8n/GnsJUA2Et6uB0h3JjrvLpDxyTgB9EfzkzSOvcSucPtEq7KILp
G4UrFrwQylhSb+XQU+zd6+WNJQDVg2gwIf0ko2ZPqDUMJfmXec8nljF+ScmRX+ie
PdExs//l6wd6rpBVCDk2+zUzk3CU7R51WqWhMKyl8jCaMFNAUgBoy2ntLT3LNHU/
W6DYpicZJxrarkT2jxhWbPjPSFI98mEybqPW2v3pxy+L7FFrP1WhJdYIrH+EUEdh
Rc9W6YIBf+TPXA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:15:13 2026 by rpki-client