Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: hiSRbEYSVrGbDrFzgLa6Ggd0nq2l1+A4rl2Q3nlIR50=
Subject key identifier: 0A:DC:76:33:EA:FC:A6:A5:30:F9:7E:23:D1:F8:F4:EE:E5:A0:2D:63
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019D99CFE00FE7841655168B934779A4C154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 09D2
Signing time: Fri 17 Apr 2026 05:00:30 +0000
Manifest this update: Fri 17 Apr 2026 05:00:30 +0000
Manifest next update: Sat 18 Apr 2026 05:00:30 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: vWds8o9LuEt5rGff7Y1lJgebQAcmx3TH6vL8eKfvTtw=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e0:0f:e7:84:16:55:16:8b:93:47:79:a4:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Apr 17 05:00:30 2026 GMT
Not After : Apr 18 05:00:30 2026 GMT
Subject: CN=0adc7633eafca6a530f97e23d1f8f4eee5a02d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:10:ac:96:b1:ef:5a:4b:b6:be:67:5d:ab:
a8:2e:2c:0e:fb:f4:24:d5:6e:ac:43:8b:d1:75:ac:
55:7a:53:24:5b:cb:c3:a0:e8:5c:a9:10:07:58:32:
10:85:6a:ea:c7:2f:2e:a5:9d:28:2a:76:53:43:dd:
24:20:ee:81:ec:9e:55:e9:69:8b:76:17:11:7d:eb:
d6:a5:30:ec:19:70:2c:ae:51:cb:be:47:fa:9a:98:
53:f5:e8:77:86:c0:4e:04:e0:83:d5:02:b1:f7:e1:
a8:be:16:78:7a:cc:a2:73:90:2b:29:c4:54:31:c2:
e2:d3:77:f8:08:fb:b6:5f:8b:bd:2d:4d:c3:1b:78:
7b:74:72:ad:e3:5b:85:f6:6f:a8:14:ca:f8:d7:48:
ea:69:8c:84:74:e8:ac:a9:ac:35:e8:ff:6d:1b:cf:
c6:7a:e6:df:2b:15:12:60:af:4f:e1:44:07:81:b1:
b6:a2:7c:9b:72:02:21:ba:81:df:9b:35:ad:1f:b0:
1b:99:74:5f:b1:66:ff:e3:31:2f:e9:5d:b0:56:92:
a5:8a:15:3c:e7:0c:7a:5f:0e:c7:09:5d:75:bc:2a:
1e:c4:6f:24:76:74:2e:02:8e:21:95:9b:58:76:5a:
08:9a:96:a1:d1:49:50:2b:b7:0a:aa:54:4e:69:e2:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:76:33:EA:FC:A6:A5:30:F9:7E:23:D1:F8:F4:EE:E5:A0:2D:63
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:da:aa:e6:fb:fc:68:42:f7:8b:45:fd:f1:4e:2a:e2:7f:
7c:60:d3:39:86:c8:c1:a2:f2:a1:b7:43:fa:88:73:09:eb:45:
69:62:80:fc:4d:df:06:18:99:81:2f:6e:a3:1d:d2:77:e8:87:
e1:2a:19:80:21:bf:d5:bb:96:ea:13:09:4c:24:a8:b0:71:00:
e7:9e:99:2f:cc:00:d9:a2:04:79:c7:6a:19:bf:55:47:3c:53:
b9:9a:66:d2:9d:93:a3:6a:33:a6:f0:c8:bd:1f:9b:f4:91:d3:
b6:f1:fd:e3:5d:b7:73:5c:c3:04:10:d2:57:f4:03:e2:43:cf:
ae:ff:89:fc:ff:ab:e9:33:c3:f3:b6:da:12:cf:12:d6:4a:40:
59:eb:d9:c7:40:39:ae:16:fc:c8:94:5d:e2:15:af:09:0a:56:
c5:30:28:4a:21:ad:a8:fa:74:8e:dc:22:8e:69:8b:3e:66:47:
19:79:6c:28:3b:ac:38:8f:ef:04:9a:06:8c:30:be:36:4f:c6:
ca:42:e6:1c:fa:b9:14:a9:64:7a:e2:56:40:1e:ed:ef:74:c9:
7b:ec:49:66:4d:28:ce:0d:9e:0c:02:32:03:69:25:ff:14:46:
c9:5c:3c:54:66:13:63:0e:39:02:6d:ac:b5:f4:85:8f:33:5e:
9f:9d:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:18 2026 by rpki-client