Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: bG/R+H5+Wp2KIY/nF3RnZI8j5qqeTcWcFoZkYdNECKA=
Subject key identifier: 99:29:9C:C4:53:10:9F:B9:46:94:B4:6C:A9:75:D6:EE:D4:2F:6C:01
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 01A0C2C428C33FED3A8D7DA8EC5477E81492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 0B95
Signing time: Mon 21 Sep 2026 07:00:30 +0000
Manifest this update: Mon 21 Sep 2026 07:00:30 +0000
Manifest next update: Tue 22 Sep 2026 07:00:30 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: 0nrTf+tEUcDJJq0LBx5NthDSwo5QU95mlHAW+eEv++w=)
2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:28:c3:3f:ed:3a:8d:7d:a8:ec:54:77:e8:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Sep 21 07:00:30 2026 GMT
Not After : Sep 22 07:00:30 2026 GMT
Subject: CN=99299cc453109fb94694b46ca975d6eed42f6c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:ff:f8:d7:e7:52:ba:c4:21:6c:51:a5:e5:
e6:24:fa:da:82:30:8e:3b:87:48:f0:76:ee:a4:c1:
dd:01:51:d2:49:0b:42:44:41:e4:b3:f6:3c:c4:96:
1e:7e:2d:43:3e:a6:11:a4:db:de:2b:e0:e1:e6:5d:
67:13:30:35:8f:48:b2:3c:fd:13:a9:4d:06:d0:fe:
e6:e4:00:c0:27:01:9c:15:bd:d2:30:62:a9:3d:76:
0b:36:0d:e3:cf:5f:d3:e5:6a:92:04:61:7d:e4:08:
cf:eb:c6:c7:21:53:76:6c:9b:8b:2d:4c:a5:e8:1e:
c4:c4:73:36:71:4f:ea:4c:44:08:80:78:9e:fc:80:
4f:22:19:7b:aa:4e:dc:c4:c6:51:b4:4e:1a:e9:77:
98:1b:ef:32:15:72:a9:49:d1:1d:e0:37:7a:48:94:
16:9f:c2:42:24:b9:93:34:e7:ad:b6:f6:c1:d9:f4:
b4:70:29:29:15:58:5c:9a:70:e4:1a:a2:26:7a:5e:
9d:09:05:10:ba:0c:1d:e6:36:d5:25:7a:11:52:9d:
dc:e7:02:bc:21:dd:f0:be:dd:b6:00:49:65:72:c4:
e3:a6:e4:1e:49:41:70:6e:ad:61:14:f5:2e:bd:bc:
cb:a3:36:65:55:08:3d:70:3f:d9:6c:e2:20:96:bd:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:9C:C4:53:10:9F:B9:46:94:B4:6C:A9:75:D6:EE:D4:2F:6C:01
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5f:ef:c9:5b:01:b8:a9:3c:c5:26:66:94:1e:d0:52:72:a3:
ed:32:b0:48:87:f6:11:a5:bf:07:ac:06:50:4c:cb:ed:23:1b:
c7:c7:c2:da:53:b8:6a:89:63:e6:16:86:a5:34:25:97:b7:b0:
8d:f4:8f:7b:f2:ef:c3:36:b5:9a:27:db:75:5e:25:36:7d:84:
ac:1f:b8:82:00:0a:05:28:c3:b8:ef:a1:6a:c8:a6:1d:b3:eb:
9f:a3:68:2e:5e:6a:7d:a5:e8:66:9f:c7:37:65:93:2d:77:d0:
fe:ba:a7:ae:e2:d4:4f:4c:b1:fd:11:cd:51:5a:7c:b8:6f:c9:
f0:72:6d:fe:cc:2f:6c:ea:b1:ae:7e:df:b2:29:ff:c3:9c:21:
10:bf:59:96:33:a3:0a:37:98:3a:2c:81:70:9d:ac:07:1c:70:
2b:30:94:f6:61:5d:ee:03:60:d4:7c:7f:d0:bf:fb:4f:a7:c7:
e3:13:d9:35:32:6f:ed:56:52:6f:dc:7b:77:f4:39:bb:fb:1c:
3e:b4:84:ff:75:54:ea:97:40:0b:40:d6:2d:cc:b3:9b:4f:5e:
ed:c0:29:2a:4e:fe:5c:35:05:1c:7f:6c:1a:be:d9:5f:94:c9:
cf:59:c1:10:3f:10:18:0d:0e:9a:32:bb:d8:05:f9:4a:41:49:
fa:f3:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:46 2026 by rpki-client