Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: bEXCvgnwyWs8aeF931gpKJjYcBE3H8e1ONNv0/H729s=
Subject key identifier: 10:E1:75:EE:8A:07:C3:13:B9:41:56:7F:1F:E8:4F:0D:EB:98:4A:BB
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 01A0CCA389909DBA25A2672C57CB5E6AD2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0A22
Signing time: Wed 23 Sep 2026 05:01:04 +0000
Manifest this update: Wed 23 Sep 2026 05:01:04 +0000
Manifest next update: Thu 24 Sep 2026 05:01:04 +0000
Files and hashes: 1: GabJ5twvONaV1oDv6R6xRBsqjPI.roa (hash: VboUrV+ncooHpKApDm37rXqvF783TBpkHD8FibYc72I=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: olt6UxFjIsHzZ2dHPVwIn/IZPqkP2S1XP03hHBFcrHM=)
3: WqDYkLVstMonrCj4dC5iBXxan-U.roa (hash: G8VWWDKI9sp/TM5uduS2yPz7BYIgFFNJMWsqqgCcC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:89:90:9d:ba:25:a2:67:2c:57:cb:5e:6a:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Sep 23 05:01:04 2026 GMT
Not After : Sep 24 05:01:04 2026 GMT
Subject: CN=10e175ee8a07c313b941567f1fe84f0deb984abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:80:9f:9f:74:ca:a9:87:60:66:52:05:38:
82:ad:c5:e1:34:ce:be:2a:48:dc:7e:cf:f0:2d:3c:
77:50:35:44:cd:f1:ae:12:a1:b7:63:fa:63:8f:70:
14:00:e9:01:c6:4a:9c:30:2a:95:ff:2d:ac:e7:2c:
62:5e:84:05:dc:e8:55:60:f5:7a:45:7d:c7:a5:09:
a5:f8:bb:86:0d:eb:61:be:ec:7b:1f:8b:8d:73:bd:
a4:37:8b:7e:ee:bf:04:44:27:f4:f2:2a:4e:0e:5e:
c6:35:83:06:bc:9e:a1:4d:bb:04:91:db:81:44:74:
2c:3e:5a:2c:aa:99:57:12:07:83:c7:04:49:21:7c:
a3:39:18:87:d3:34:6a:a8:85:a7:2c:1d:71:4c:5d:
b8:94:06:be:7c:82:00:75:3b:c2:06:53:b5:06:9c:
e2:c3:f6:c8:5d:f6:a0:9a:52:85:37:50:98:03:a0:
0c:67:21:b5:41:49:e8:9d:98:95:93:4c:65:59:3d:
a6:90:e3:66:91:09:d8:54:9c:d0:3b:b8:7f:20:d5:
63:2b:e8:53:66:48:ac:b8:af:85:05:14:ea:0e:28:
3f:a7:bd:9a:12:1d:a5:cd:b3:69:eb:e6:0e:f3:02:
27:ba:3e:b3:cd:1b:21:66:73:e1:21:02:e4:e7:e8:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:75:EE:8A:07:C3:13:B9:41:56:7F:1F:E8:4F:0D:EB:98:4A:BB
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:da:e7:19:a3:b6:07:94:74:3c:60:5c:56:f2:16:23:5c:1d:
84:3c:b4:9b:26:5d:8f:80:49:17:7d:63:b0:9b:3c:a5:e1:93:
6f:52:db:a4:02:72:0b:6d:9f:42:c4:f4:84:9a:26:67:d4:1b:
3a:e4:a0:98:04:f5:90:2b:9e:09:7f:84:6e:08:f3:5b:69:4a:
1f:75:b7:df:cf:d1:08:b9:df:c7:b9:07:2a:dd:ba:91:cc:dc:
1f:7f:9e:ce:09:f3:eb:70:bf:1c:39:24:40:75:bf:1e:fe:63:
80:d9:35:cd:f8:29:48:ea:32:af:a4:05:26:38:33:90:b8:52:
ed:4b:63:39:f6:fe:f9:a9:63:27:ab:56:d9:01:4e:ce:4e:4c:
63:59:48:b6:17:9f:56:94:fa:21:fa:ed:8c:28:71:be:fc:e5:
3e:62:b9:a3:2c:08:71:13:58:91:1f:a3:6e:67:57:bc:af:ae:
08:d9:72:41:57:c9:f3:f1:73:b3:97:43:0f:2a:6e:d9:ca:cb:
bb:fa:36:00:54:e9:90:c1:6c:86:79:d0:6c:14:29:9b:ed:88:
a7:e9:ad:e2:0e:2b:47:bb:c3:4d:c3:af:ec:b1:df:15:60:c2:
cd:c6:f7:8a:a4:2d:66:e3:8b:9b:a9:13:e3:cc:7a:b3:f5:d6:
a8:99:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:43 2026 by rpki-client