Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: aWEk3Ip2DelYQ2h0jbleOw9hOuHT3mLH52slQ/5yH8M=
Subject key identifier: DE:63:7E:0B:8E:A4:11:AA:18:93:70:3E:F5:47:CF:D5:53:F4:3C:2F
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 01A0C821C0BCB173D3CF6DAD0EEFEED11DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0FE2
Signing time: Tue 22 Sep 2026 08:00:50 +0000
Manifest this update: Tue 22 Sep 2026 08:00:50 +0000
Manifest next update: Wed 23 Sep 2026 08:00:50 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: XrYQNXA77iwjTrGEQv6Wy4yKGkUJ2dKpAPGt7AIahUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:c0:bc:b1:73:d3:cf:6d:ad:0e:ef:ee:d1:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Sep 22 08:00:50 2026 GMT
Not After : Sep 23 08:00:50 2026 GMT
Subject: CN=de637e0b8ea411aa1893703ef547cfd553f43c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:2e:2e:2d:af:91:c4:df:f0:e9:5e:b9:c1:
3d:93:08:1d:00:09:9c:45:fc:7f:5c:3d:c4:c1:89:
1b:6b:57:ee:33:be:49:71:e5:6e:c6:62:d1:3e:e9:
7e:ff:b2:15:69:6d:11:e0:21:be:32:e2:dd:7d:2a:
e9:14:c0:eb:43:8c:d4:70:e4:54:ce:50:75:61:18:
57:38:58:63:09:05:80:b0:a2:f5:4e:99:e7:5a:f9:
c8:a2:f5:37:f0:f1:9b:f7:ae:53:2f:bb:64:96:52:
4c:4a:00:95:f8:95:5e:0b:99:3a:c7:92:ed:80:0b:
b6:28:60:be:56:1e:83:d4:fd:4b:4e:2d:4a:34:36:
15:98:48:18:a6:1f:63:4d:98:73:78:85:a0:9e:5b:
cf:1c:f8:a4:1e:20:8a:a5:06:e7:fb:71:51:93:a0:
5a:32:59:7e:e1:ce:1b:4d:67:48:4b:f4:91:4c:27:
70:e7:1f:74:a4:af:85:68:0f:c9:05:70:3f:b5:3b:
81:bb:9c:a1:bd:35:87:48:71:3d:47:32:4e:b2:92:
24:ed:26:54:16:f3:d3:f0:5e:9e:ed:50:d6:d5:86:
e5:5a:8c:12:e6:46:05:63:b7:e0:32:d2:95:4f:0d:
cc:86:8f:25:5b:d3:ff:67:de:5f:46:22:f2:05:6a:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:7E:0B:8E:A4:11:AA:18:93:70:3E:F5:47:CF:D5:53:F4:3C:2F
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:96:14:94:63:e5:70:5a:ca:d2:87:d5:4b:bc:25:5f:29:
47:7b:22:25:9b:51:b4:f3:8f:a1:22:54:bb:83:64:b1:39:58:
fa:4c:09:ac:3a:7e:4b:c3:a6:7b:25:33:de:4d:d5:47:a5:34:
48:d0:d1:f8:45:84:1e:07:94:3a:86:34:7e:f7:24:90:4d:87:
a5:13:44:a1:88:33:d5:ad:99:ab:f8:2f:1b:06:1a:23:f3:0a:
f2:98:1d:45:fb:8c:58:56:aa:58:7b:8f:94:40:65:74:51:41:
e7:cb:a9:88:11:cb:1c:fe:42:cf:ac:24:db:f4:56:38:4a:00:
5c:eb:64:d6:ac:30:11:58:50:91:5f:3b:3e:0c:bf:ae:42:47:
5a:99:9a:29:64:be:2a:77:25:84:49:7e:64:aa:4c:6a:2e:ad:
2d:7d:94:02:04:02:6e:18:c9:08:ac:ba:42:fe:db:63:3d:5d:
84:db:63:8a:4b:af:09:02:47:a8:34:9d:bd:9a:5e:78:8d:c0:
2b:4d:af:85:f3:ca:e4:a9:1e:cc:06:40:ed:b0:0d:65:f4:40:
aa:bc:c7:3f:45:19:9b:92:65:a7:4a:f1:ae:63:b7:a6:a5:65:
7c:1d:3a:40:54:62:70:e7:8b:46:95:d5:3a:00:33:26:a5:76:
04:a9:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:53 2026 by rpki-client