Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: 7Gi8DhpTZzOpfqhGJ795E9JFQMzBq97+4c2QRXLMpaI=
Subject key identifier: 1D:FC:39:09:1D:B1:3A:73:3C:25:AD:ED:70:26:DD:47:4F:D2:77:44
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 01A0C1437998B05CC77EF4D1A182512FDFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 09D1
Signing time: Mon 21 Sep 2026 00:00:19 +0000
Manifest this update: Mon 21 Sep 2026 00:00:19 +0000
Manifest next update: Tue 22 Sep 2026 00:00:19 +0000
Files and hashes: 1: 1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa (hash: P2lru/8ni4eoEw7i4AHjlyzAE6kNl3zcnc1hnURt9xU=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: ZqdW7vw71wQ7xy/QkpVcbogfgagPqfOn3rox/tvZCwE=)
3: mh2brnHNSaddV-TGipTyR59FJWE.asa (hash: jv8wytnHrw3E5yNeqCKAofAn7TsK73xMRATCR28aRe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:79:98:b0:5c:c7:7e:f4:d1:a1:82:51:2f:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Sep 21 00:00:19 2026 GMT
Not After : Sep 22 00:00:19 2026 GMT
Subject: CN=1dfc39091db13a733c25aded7026dd474fd27744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:57:87:19:05:c9:2f:a3:93:fe:79:8f:b4:
c8:cb:59:57:9b:18:0c:7f:c9:73:63:2b:19:6a:ec:
b1:4c:38:33:9d:4d:db:1f:6b:2f:9b:dd:99:5d:28:
7b:75:26:14:74:9a:8d:83:d7:9d:66:ae:fd:dc:88:
1d:31:d2:ff:e6:b6:db:2b:14:95:c6:8b:7f:7f:bc:
a7:d4:54:a4:79:b4:19:7d:57:7f:87:07:8f:fe:e0:
64:0d:36:a0:27:50:0b:71:2c:36:6d:7b:bc:bd:77:
97:6d:bb:fe:99:83:e2:74:16:19:0e:07:fa:f5:05:
d0:b9:e5:90:c4:35:60:8a:86:0a:30:83:e6:8c:fc:
7d:8a:e2:88:06:97:ea:c9:77:20:e0:5d:af:b9:c0:
17:12:05:d3:1c:30:fb:e8:4b:8e:48:82:62:a0:af:
95:d4:bd:49:ea:71:38:d4:cc:d1:77:2d:e5:cc:99:
9a:32:02:76:2e:46:84:31:e9:d6:46:72:0f:b0:ca:
8c:56:1e:47:5e:c0:7e:a0:4e:24:6d:d4:9b:02:27:
87:df:7a:bb:01:4d:15:60:fe:79:e5:bf:5d:ca:f7:
f0:b2:ae:d3:e8:ee:d4:a5:fd:fe:64:e3:be:6a:39:
e8:f8:ee:8f:bd:60:fe:22:c2:de:c0:e4:f6:9a:6c:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:39:09:1D:B1:3A:73:3C:25:AD:ED:70:26:DD:47:4F:D2:77:44
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:40:01:80:19:08:9a:4e:d9:3d:71:c0:57:37:32:19:20:e5:
cb:3c:2f:dd:8a:59:32:f7:24:ae:3c:8e:ea:83:98:7e:2f:02:
95:ed:1c:20:c3:f2:2a:5c:e7:fa:12:36:4f:7e:aa:d4:1c:09:
f6:6d:dd:0c:cb:98:c4:09:1b:6f:8b:63:3e:47:80:ee:7d:21:
7f:dc:1e:61:b5:81:d4:56:f1:53:77:d4:0e:da:e8:42:53:2b:
e5:d3:c7:9d:f0:59:78:4d:da:f3:5a:86:8a:c1:c8:77:a6:ba:
66:88:56:72:97:b7:6f:96:47:f5:ba:f0:7a:b3:e5:a3:59:65:
0d:65:c5:9e:f6:02:61:2a:3c:6b:6f:5d:45:1a:f3:a0:b3:f9:
cd:e6:3c:ca:e4:30:11:91:19:97:b7:13:bc:71:52:43:1f:a6:
28:d6:6c:5d:6e:c1:c1:de:38:27:96:67:8d:18:af:51:2d:40:
8a:b1:94:03:a4:95:04:94:95:f8:aa:53:f2:c8:ad:47:ce:66:
20:eb:40:71:ed:21:ba:f1:a6:f2:f8:7d:fc:ad:71:b7:36:93:
03:23:b6:ed:5a:9c:56:f3:f7:10:ab:ad:9e:50:13:ba:b1:5b:
82:42:5f:0b:a0:e9:b5:c3:ce:af:39:6a:2b:ee:d1:28:0c:43:
df:96:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:13:27 2026 by rpki-client