Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: C2q6p2x7Q8uEGNBO3a018oydgg6Q9mR4LFNdOwsU+ak=
Subject key identifier: 36:98:8B:96:F9:B2:6C:15:F7:4A:DA:60:3B:54:69:2E:EF:5C:E3:37
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01A0C632D2D35BFB6EFEC86940F51ADE6FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 23:00:14 +0000
Manifest this update: Mon 21 Sep 2026 23:00:14 +0000
Manifest next update: Tue 22 Sep 2026 23:00:14 +0000
Files and hashes: 1: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: Tb8lBSnmLY8MiMk9PmGJTnoPLDv7ec/CoiAzSlPzGwM=)
2: Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa (hash: rsyFG4zSMDanCniCWjGQKtysSRfWfwv2oqvo0sGOb8Q=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: zQSdeObX9i7OS1eAgVlUu1k6izE.roa (hash: fz5kqxfesb7Vy8VFR5dTlm8GMN9rTXkTLsQbrA4g9G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:d2:d3:5b:fb:6e:fe:c8:69:40:f5:1a:de:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Sep 21 23:00:14 2026 GMT
Not After : Sep 22 23:00:14 2026 GMT
Subject: CN=36988b96f9b26c15f74ada603b54692eef5ce337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:8d:05:bc:cb:9e:ec:67:fa:a1:e8:6d:05:
5e:a4:54:d5:c8:1f:4c:df:f6:dc:e9:4b:ee:9e:11:
d9:d8:cf:aa:5c:a0:4a:f8:eb:fd:84:de:2d:66:db:
6e:c6:19:67:35:6b:ae:9a:02:b3:d4:49:f2:eb:d4:
61:34:7c:54:a8:82:2a:b8:b5:17:09:39:cd:a5:a1:
9f:1e:f9:14:47:f2:5b:4f:50:91:3d:e4:97:c3:89:
16:f6:74:d3:cf:66:7c:fb:e7:ed:76:de:35:9c:24:
97:3b:d3:c6:b1:98:11:22:a7:4e:82:fd:64:f2:44:
9c:06:a5:d1:0c:e4:6d:3b:3c:37:64:6c:b8:2e:67:
1c:5d:a0:4a:e1:1f:0d:9e:a2:ff:7f:2a:1c:e4:4a:
32:8c:b4:c8:cd:d1:78:d8:1d:40:de:3c:28:9d:47:
e5:d3:7a:a4:61:28:99:00:42:53:2e:cf:d0:fe:01:
6a:42:fd:90:e6:43:92:1f:de:4c:6d:a2:98:16:25:
1a:54:1d:63:3c:86:cb:9e:92:78:ea:fa:89:c0:bd:
ed:31:ed:c4:38:25:22:a1:91:c6:79:e7:17:4e:bb:
0c:6f:45:ec:de:52:b4:e8:02:6f:0f:e1:8b:1d:97:
11:15:1e:1c:35:01:9d:1a:46:13:3f:b5:10:e1:80:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:8B:96:F9:B2:6C:15:F7:4A:DA:60:3B:54:69:2E:EF:5C:E3:37
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:e9:9e:b8:8b:be:fd:00:8a:0b:7b:75:a9:63:cb:a3:0d:
1a:e9:0f:ed:0c:65:79:08:c0:fd:8e:91:8b:6b:42:10:02:b8:
5a:d5:bd:34:db:17:47:8e:20:4f:2f:e6:b3:0a:2c:d7:77:0e:
cf:db:c0:5b:9b:47:d4:17:79:9a:be:7b:be:a8:a8:e2:c8:4c:
d7:7f:d3:03:06:36:e4:75:98:b9:d0:94:09:a3:73:69:85:08:
24:9c:11:92:8f:ac:1c:db:66:e6:12:42:39:f3:66:ce:ba:63:
86:98:4a:8b:2d:5c:0f:4b:41:54:d8:92:fe:25:ec:e7:df:ea:
58:6d:0b:8d:c9:a5:63:3a:73:ce:e5:76:19:33:ce:5d:12:5a:
22:c8:23:fe:be:54:fa:d1:05:1e:e1:35:e6:18:aa:04:77:d0:
99:8d:7b:16:a4:64:9c:dc:56:82:3c:1b:f1:c9:04:87:9a:bc:
50:b5:4d:bd:e2:62:14:a5:79:85:e7:a8:f1:3f:35:1a:36:8c:
33:05:f9:f3:85:90:a6:19:09:5e:55:91:b4:cf:d1:70:a2:1f:
c4:ce:16:3d:81:ea:2e:c6:9c:17:fd:2f:a7:62:1c:bd:2d:59:
07:bf:50:6a:fc:ed:e1:34:ab:c4:3d:1d:48:08:fa:57:6f:5b:
81:85:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:01:09 2026 by rpki-client