Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: LSnCPj1Igs8SlGWY/Y5tYwO/6CVhsNzSwSmTD/hpUs8=
Subject key identifier: C2:2D:62:F1:5F:9D:8C:F7:E1:C6:30:85:D2:A2:DC:46:2F:52:8A:BE
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 01A0E0989661C3190B5D26FFF98359708D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 02C4
Signing time: Sun 27 Sep 2026 02:01:31 +0000
Manifest this update: Sun 27 Sep 2026 02:01:31 +0000
Manifest next update: Mon 28 Sep 2026 02:01:31 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 0e6KAzG46hfy2cboWZ4G/bq3iteCXKdKMVNld/dYUwk=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:96:61:c3:19:0b:5d:26:ff:f9:83:59:70:8d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Sep 27 02:01:31 2026 GMT
Not After : Sep 28 02:01:31 2026 GMT
Subject: CN=c22d62f15f9d8cf7e1c63085d2a2dc462f528abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:eb:fa:cf:ac:54:4a:29:ae:22:09:7f:a8:
fa:89:82:d9:7b:64:c7:98:bc:a1:e4:a3:21:29:c3:
46:f4:d9:20:55:fd:38:24:e8:94:ff:36:96:54:77:
82:16:86:f8:e3:b9:6a:e4:52:6e:c4:cd:1b:01:24:
c2:b2:c9:ce:e3:30:6d:98:d4:94:c9:c3:7a:e3:c4:
03:02:f3:f6:50:47:9e:f5:7b:55:d1:50:ef:72:13:
d7:86:0e:f2:6d:b2:29:55:eb:eb:94:28:59:b5:0a:
95:ea:92:4b:c7:03:04:a3:e9:ce:81:f0:31:73:50:
7b:c3:e7:93:ac:6c:8e:30:6c:b6:ab:be:43:27:2b:
a2:97:6f:4a:a8:73:6b:12:0f:d5:2f:3d:c0:eb:41:
82:d3:30:b0:02:b2:f0:43:a8:04:5d:0a:d3:9d:27:
94:12:6f:ca:ec:e7:f3:78:58:24:b6:31:e1:c9:da:
8b:67:30:44:fb:d2:17:a0:48:6a:b2:c6:d1:3a:94:
e3:43:c8:e4:ab:77:76:41:e2:d2:98:c8:5b:de:d7:
09:26:ba:87:ee:a2:b5:45:81:51:c2:90:f3:c5:20:
d2:50:54:9e:eb:a6:5c:e0:d2:ea:cc:2c:b0:81:a4:
97:df:22:3f:87:8e:79:d4:a2:1c:96:92:a2:30:61:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:62:F1:5F:9D:8C:F7:E1:C6:30:85:D2:A2:DC:46:2F:52:8A:BE
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:eb:45:4d:b7:8d:df:73:5d:bc:31:f6:78:8c:68:01:a2:41:
7c:da:9f:89:2a:33:bd:76:f6:29:9e:ff:ce:ca:71:c6:af:f5:
f3:40:80:99:c2:65:a1:a6:ec:18:06:e2:92:02:2e:91:9a:59:
a5:93:13:62:1b:cb:b3:1f:73:f0:7b:09:32:3a:70:a7:f3:93:
4d:fb:d8:27:a6:0b:c6:f0:8f:c6:30:a0:c4:9b:58:e2:26:eb:
e5:c0:ce:59:6b:ac:c5:bd:d2:1b:a6:6c:a6:6f:ab:a8:bf:57:
9c:99:6c:f4:da:69:4d:49:04:84:4a:0a:81:0b:a0:eb:55:6c:
b9:9d:50:50:9c:09:96:2c:37:bc:42:4d:da:06:46:b3:a3:f0:
97:4b:48:a4:cb:e5:d9:7d:3f:e4:03:77:3a:7c:96:2f:16:6e:
b2:c5:df:e9:0c:93:69:2e:1c:e2:97:e1:3b:3a:1f:24:9c:18:
f2:04:c7:d1:1b:eb:81:c6:9f:03:a8:9c:77:a9:f0:1e:76:8e:
73:2b:84:40:b7:e7:39:95:12:f7:a9:37:2c:1b:29:f3:35:4b:
53:98:c0:9d:ad:16:91:84:3b:10:fa:e3:9b:ca:ce:3e:37:91:
fe:4a:1f:4d:e5:bf:2a:fa:6f:3b:a8:6f:5a:be:7f:02:f8:bf:
7a:79:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:24:05 2026 by rpki-client