Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: 6ZOVfidhFRAPm4KvIwHea7SX1l5NaAo73NqObv4c2IE=
Subject key identifier: BD:B3:EA:60:D3:14:A9:3D:C5:82:4C:8C:D6:8B:3C:7F:D8:8D:3D:4D
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 01A0E106984D9EF5C704AAB3EA616687AFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: 024D
Signing time: Sun 27 Sep 2026 04:01:40 +0000
Manifest this update: Sun 27 Sep 2026 04:01:40 +0000
Manifest next update: Mon 28 Sep 2026 04:01:40 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: i5Vc9LIPVYrDOE8zfBEd1VaH+oN5ftLZYF95GFKssjw=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:98:4d:9e:f5:c7:04:aa:b3:ea:61:66:87:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Sep 27 04:01:40 2026 GMT
Not After : Sep 28 04:01:40 2026 GMT
Subject: CN=bdb3ea60d314a93dc5824c8cd68b3c7fd88d3d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:40:1b:78:9a:1d:5a:32:ba:05:d2:c8:ae:
05:94:9b:0a:d9:52:69:22:63:9e:68:95:5e:05:e0:
7e:25:d3:5e:68:05:b1:9a:b3:15:71:30:db:63:7a:
cf:cc:39:32:e4:c4:1e:e5:62:5d:a8:ee:a6:5a:55:
71:a4:9f:d2:9f:e9:59:39:15:ff:66:7a:5d:73:7d:
67:cc:73:d6:db:bb:67:21:7a:25:0d:50:bd:49:2f:
13:22:68:d9:d3:c4:6b:a7:80:53:01:58:7d:9b:0b:
7c:1d:d2:ea:c4:69:b8:7f:34:8c:42:b5:5f:4e:43:
7e:6b:9d:6d:5c:c0:6c:c0:55:94:c6:96:1c:e0:3a:
2a:b5:4f:c4:fa:54:51:3c:09:80:d0:88:eb:10:59:
e8:75:01:4a:29:5a:57:d0:84:40:e7:9e:79:bb:6c:
36:52:df:3b:14:dc:87:7d:34:96:57:f0:f1:5f:dc:
a4:1c:6f:e2:78:3d:c6:fe:ad:e4:e6:4d:e8:f2:b1:
a7:10:97:0e:c3:54:be:b4:d6:3f:82:39:da:ad:ad:
b1:8f:6f:bb:ab:4d:ce:f0:47:de:68:07:3d:a4:05:
85:33:a5:6c:ee:71:da:91:ca:e1:a9:e2:7f:66:ef:
86:0f:f3:3f:64:98:7f:2d:d0:2b:dc:60:a2:e8:2d:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:EA:60:D3:14:A9:3D:C5:82:4C:8C:D6:8B:3C:7F:D8:8D:3D:4D
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6b:5c:48:12:b5:83:ea:d9:db:cd:d6:49:4b:d5:c1:4e:55:
c4:01:24:8d:1f:d7:b4:2c:f8:70:6e:08:e5:b5:5c:91:ab:c2:
d7:6d:4d:da:f8:46:0d:fa:a5:00:0b:39:35:6a:83:77:a9:bc:
78:49:1a:7f:9d:c7:6f:41:5b:54:53:05:a8:74:59:36:30:67:
b2:2b:8a:e6:0b:29:fc:0a:cd:55:6e:42:1f:37:1f:7d:f7:92:
5c:2a:f6:6d:dd:45:37:2a:d7:d1:49:1d:69:fa:ef:32:7b:8d:
8a:58:87:6f:81:1f:ee:c3:f4:1f:fb:b5:59:1f:8f:4a:3b:54:
d8:7d:ed:73:ac:96:27:c1:15:d8:c9:48:5c:16:99:02:2f:87:
34:f4:46:59:0c:b2:a2:3e:26:36:78:b8:24:a5:2a:7a:b8:6e:
dc:cd:21:53:76:a9:3e:c3:47:04:e9:7e:a5:5a:86:16:60:13:
5d:a8:89:e2:bb:7e:ae:e2:f2:e3:78:1c:ad:89:af:87:a3:fe:
dd:72:1a:5b:5b:c5:56:54:71:98:85:31:52:90:85:ff:0c:e2:
51:be:ce:1b:e3:8f:8d:d4:06:07:1f:97:86:49:46:9a:7f:bb:
45:8c:ee:2f:9e:86:de:8a:d7:39:88:25:98:23:e5:72:a4:c5:
57:d5:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:59:21 2026 by rpki-client