Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: pQ/p2EXxbGC5sDt6ERr7zAcy87k3dIQVDR1aFn9F8xM=
Subject key identifier: 3D:7A:D6:B0:83:3C:66:F7:60:2E:C2:D8:C3:B5:A3:80:6F:21:37:C3
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01A0EBF9B9F1F468AE0EE3A618FACE9ED8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0D73
Signing time: Tue 29 Sep 2026 07:03:26 +0000
Manifest this update: Tue 29 Sep 2026 07:03:26 +0000
Manifest next update: Wed 30 Sep 2026 07:03:26 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: 8+oDSF06D2/RcZIldE38FzMnuo8O+Fb9GtyIF0tArt0=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:b9:f1:f4:68:ae:0e:e3:a6:18:fa:ce:9e:d8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Sep 29 07:03:26 2026 GMT
Not After : Sep 30 07:03:26 2026 GMT
Subject: CN=3d7ad6b0833c66f7602ec2d8c3b5a3806f2137c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:38:51:96:32:d3:b4:a1:b5:65:3b:a4:a8:
ee:02:a0:e0:85:cd:3d:8a:3c:37:19:e3:71:26:c0:
36:d9:d0:a4:13:9d:2c:1e:39:c2:fe:4e:ed:0a:dc:
c7:1c:11:0b:02:31:07:0a:79:02:8b:9a:5a:d0:13:
ad:d8:48:29:be:15:d9:9f:35:95:fd:da:74:00:0a:
33:7a:ed:c8:cf:23:73:db:f2:e9:0d:c1:20:04:dd:
a6:9a:5b:e4:52:c2:1e:d8:a7:f2:b1:45:a6:a4:5c:
2d:42:31:bb:7b:ea:9e:75:cb:fa:ea:2f:29:5e:60:
ef:9d:97:11:82:81:05:63:19:4f:86:41:4d:16:6e:
d1:2d:af:6f:be:18:df:7c:74:dc:e6:0b:8d:e2:ec:
41:0e:d5:94:27:e1:01:25:7c:db:91:ab:e5:22:8f:
71:e8:b2:ac:fc:1e:a7:e7:0a:2f:e2:e7:ce:9f:2a:
c5:70:a0:3a:f9:79:84:44:e9:05:61:1b:ae:a6:bd:
a8:59:e7:65:0f:d6:4b:70:8b:9e:7b:fb:f9:14:79:
37:21:2e:59:2f:e5:fd:b3:9d:15:68:a6:eb:72:f9:
cf:99:01:7f:19:57:31:62:b0:2e:28:39:57:97:69:
20:78:c1:d8:1e:e5:85:2f:c8:da:8d:6c:1e:a1:e1:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:D6:B0:83:3C:66:F7:60:2E:C2:D8:C3:B5:A3:80:6F:21:37:C3
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c9:77:c0:24:f2:28:b4:40:1b:b0:66:e1:03:c0:ec:13:ea:
7a:0b:72:d5:b2:67:fe:9d:03:c9:bf:d0:0a:b5:e6:87:47:d2:
73:3b:c4:8e:b4:8c:ee:57:44:bd:a0:98:12:3f:a5:94:cb:e6:
66:cf:95:f3:0b:4c:c5:bc:e2:39:b1:a2:e9:d0:18:b5:1f:bd:
0f:21:dd:97:36:55:b7:4c:08:06:7e:de:eb:67:9e:58:d9:40:
85:42:be:ac:fa:35:5d:87:78:21:0f:d0:60:20:10:b5:56:f4:
80:f9:ab:ba:e5:b0:97:08:c3:95:38:43:7e:57:2e:49:bd:64:
17:70:53:d2:03:48:8c:ad:db:48:e6:d5:5c:50:f9:1f:82:65:
9d:0b:12:be:7f:d4:ff:e2:f9:9e:17:a0:45:f4:26:e0:51:25:
f3:52:d2:82:c5:5b:53:3b:f3:25:df:17:84:68:75:05:ec:e5:
e9:71:16:1a:e6:d1:36:05:5a:0f:12:0a:e8:a5:8b:fb:a0:81:
e1:da:26:5c:df:ad:ab:ec:ba:b9:9d:e4:79:26:26:8b:18:e7:
ab:69:6b:da:10:eb:f3:9a:db:eb:45:a1:0b:1c:3f:20:42:e2:
90:57:b0:e1:d1:a1:1a:0e:0d:f7:f7:f1:e5:87:18:f8:7c:72:
8a:70:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:50:04 2026 by rpki-client