Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: 00tYIizFETDio0IRNGavx23nNaZokf3NPKQmyzvOV2U=
Subject key identifier: 80:A4:D8:C9:25:AD:27:E7:E2:05:81:07:BD:82:E1:5B:94:5C:72:A6
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 01A0CD4846E32066AC16E877254F1772AAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 07A9
Signing time: Wed 23 Sep 2026 08:01:00 +0000
Manifest this update: Wed 23 Sep 2026 08:01:00 +0000
Manifest next update: Thu 24 Sep 2026 08:01:00 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: xf5iDHvjk0CZ8SRlhGnvHn0389c234HPYiLnk4AkUEc=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:46:e3:20:66:ac:16:e8:77:25:4f:17:72:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Sep 23 08:01:00 2026 GMT
Not After : Sep 24 08:01:00 2026 GMT
Subject: CN=80a4d8c925ad27e7e2058107bd82e15b945c72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:97:03:2d:27:ba:08:d3:17:13:7a:b1:74:
d1:97:2f:ed:c6:77:47:bc:7c:4e:56:e3:30:72:8d:
28:55:00:c5:d3:33:10:cf:07:67:65:e3:c5:a8:a4:
ce:01:a6:8d:87:36:dc:4a:e1:49:8c:dd:c2:eb:82:
ae:fb:4c:66:ff:1d:a6:0b:09:27:7c:17:97:58:d1:
06:ec:cb:7d:86:be:48:5a:af:6a:4a:99:ed:03:1e:
89:b6:c2:e7:c6:89:4e:58:34:87:ee:38:bb:03:cd:
00:43:8b:64:bf:d3:3b:96:59:44:ba:98:c9:e5:63:
80:e6:bc:a3:43:72:36:32:5a:36:d2:b2:6c:92:c5:
5d:74:63:d2:4d:00:a9:d3:d7:54:1c:b9:1d:bd:95:
d2:47:4d:a5:62:bd:85:93:86:e2:8b:1c:d5:bc:52:
63:bd:ca:5a:a1:9c:87:96:44:2f:98:99:2d:51:2f:
e7:a2:21:48:87:8e:45:0e:ed:fc:fb:76:83:7d:89:
8f:14:2d:12:d8:86:5e:96:5a:ec:04:52:49:a4:a3:
a1:8a:b0:f1:6e:65:cd:f3:c4:e8:a7:7b:7a:89:68:
e0:ef:4f:81:de:9f:9f:a7:fa:ee:a3:33:41:a3:2c:
77:09:85:dc:8c:b4:b0:6f:8d:a0:62:d7:26:52:70:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:D8:C9:25:AD:27:E7:E2:05:81:07:BD:82:E1:5B:94:5C:72:A6
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c3:68:2a:36:6f:8a:49:08:d1:72:bb:a4:14:31:0d:e9:d1:
46:c2:5b:5d:2d:27:b9:25:e7:54:d6:06:c9:eb:c5:39:88:6e:
ba:f2:c1:6a:82:67:95:c5:98:57:03:79:33:20:d7:6f:f5:92:
37:73:b1:f1:97:36:55:63:36:df:ad:ab:b5:3b:f1:29:3d:47:
39:9a:76:1a:97:cb:19:ce:4a:c3:b1:78:fc:8f:57:e6:ec:ee:
86:c9:27:ea:14:8b:a1:37:72:9d:d7:ed:35:f5:9b:9f:f3:ff:
b9:55:10:09:ac:a7:70:42:de:47:71:98:62:71:5f:eb:47:8a:
ec:99:dc:f6:30:74:6e:1e:f5:9c:03:2d:ec:6b:c8:70:ab:16:
39:33:24:66:71:c1:53:01:5b:aa:ef:b7:55:82:54:3c:57:62:
8a:38:1f:73:8d:d9:68:74:16:98:c0:fa:de:1e:5b:7f:70:6c:
e8:c1:28:ed:bd:4b:8b:ec:7a:87:81:49:04:60:2d:59:3b:bd:
dd:59:0c:e8:1f:cd:db:b4:07:97:91:e2:0d:59:7f:a2:37:4a:
4d:b5:1a:d2:b7:a4:16:7d:ee:72:42:4b:80:01:a4:c1:d9:09:
18:b9:7a:fd:65:0e:82:6e:ef:e4:f7:a1:4c:40:33:07:d9:b5:
98:2f:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:03:33 2026 by rpki-client