Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: QYZyaCAFnPlycxYAjinlZqlpFFLit8+YNnleuKXIuDw=
Subject key identifier: 43:53:D4:4E:44:37:E3:C9:46:69:83:E9:AB:02:24:E4:9D:36:AB:39
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 01A0C4B2D808BB82207B4F7C589E9AC6CD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 1844
Signing time: Mon 21 Sep 2026 16:00:50 +0000
Manifest this update: Mon 21 Sep 2026 16:00:50 +0000
Manifest next update: Tue 22 Sep 2026 16:00:50 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: QmMoZ3n0oa/6gaOfz+Su6EDp/lt/5JRDB/01v0N1nx8=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:d8:08:bb:82:20:7b:4f:7c:58:9e:9a:c6:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Sep 21 16:00:50 2026 GMT
Not After : Sep 22 16:00:50 2026 GMT
Subject: CN=4353d44e4437e3c9466983e9ab0224e49d36ab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:b8:fa:fe:39:de:55:be:8c:df:a6:5c:72:
3d:82:e9:95:93:2a:7c:6c:bd:09:8d:78:22:7f:a3:
30:1a:c0:2e:fe:7c:6e:bf:c1:b6:57:e2:7e:5a:2a:
9f:d1:5f:8d:8f:66:42:5a:ce:64:67:af:19:5b:20:
e1:15:86:81:65:f1:c5:04:62:84:73:88:86:f0:e1:
26:8a:a8:59:d0:78:fc:fa:45:0d:27:25:6e:0a:be:
61:12:65:95:77:f4:29:0b:74:b8:12:33:a2:7e:dd:
c2:19:5c:82:98:55:bd:a6:b8:ca:68:d2:87:94:db:
2f:2c:f5:40:04:ef:a9:8e:89:c1:6e:93:02:89:1e:
2e:b3:3f:a9:0f:d0:de:55:a0:60:94:85:5b:f1:4a:
d0:1d:f7:87:81:d6:10:7c:3a:15:b7:6a:7c:55:5a:
1b:ab:f2:f6:1d:f4:3d:2d:7b:6c:b9:57:f2:97:7c:
d7:38:c7:ab:86:8c:92:a1:6b:97:d1:4a:a1:df:27:
e5:9f:69:ef:9d:1d:9b:85:9a:09:9d:82:58:40:06:
4a:fb:b1:f4:a6:07:0f:45:9a:d8:9c:23:0a:1c:d8:
6a:9b:f7:eb:1e:7e:2e:c9:34:89:06:cf:48:aa:64:
e2:df:bf:82:f2:9f:a8:b8:ef:63:b2:d8:a9:20:bb:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:D4:4E:44:37:E3:C9:46:69:83:E9:AB:02:24:E4:9D:36:AB:39
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:c8:86:b1:73:48:f1:fb:90:04:3c:82:05:78:d5:ce:a6:
ea:05:37:da:f8:95:8f:19:e9:70:fb:a2:63:2f:9d:0e:a9:04:
75:54:7c:d2:50:ca:b2:28:70:7f:3e:d7:7f:1b:40:48:04:9e:
4f:4e:a0:d1:c5:b6:93:fe:fd:e0:75:f4:6f:9f:32:b8:7b:04:
fd:32:e2:c9:95:d7:c8:bc:88:77:7e:d8:be:ea:83:1d:68:d3:
8a:42:9f:8c:83:f8:6f:98:4c:8b:04:b2:b7:e5:a4:51:da:ad:
db:a5:77:b3:0a:b3:7c:7c:a8:e9:b5:22:97:19:da:be:aa:47:
d7:30:63:8f:f4:14:e9:11:db:7d:5b:93:8b:06:1a:5a:63:7b:
e1:20:a1:b2:f3:d4:c6:b7:f2:9d:b3:4f:f8:af:7b:1a:9f:90:
b0:71:09:cb:f7:c2:f5:09:dc:f8:e0:b2:d0:ca:6b:fc:49:6a:
67:67:2a:45:52:39:df:19:23:ab:e5:73:a3:69:8f:78:4b:86:
6b:8c:ae:8f:d7:6e:1d:71:0c:06:4c:4a:a0:de:8b:71:6c:90:
ed:73:20:84:1e:ed:32:2d:b5:55:29:9d:6a:fc:1d:3c:13:86:
d0:bb:b6:23:1c:1f:8b:bf:74:e8:0f:1e:88:40:b0:18:bc:d9:
0d:02:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:02:00 2026 by rpki-client