Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: bZWDsDbiXr+DQxeb3AOmvksPkym7lHgrrKWh90msnJY=
Subject key identifier: 56:57:7E:95:6A:9F:7A:B5:73:16:62:33:D2:20:3E:F9:B8:AB:C8:2E
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019CAA58CD57BA739ABA795E9F9D8139288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0956
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: PJ1SvpRf11/8hiGTf31uDhS4Nl2rhe/5E5SGLB5uI0Q=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cd:57:ba:73:9a:ba:79:5e:9f:9d:81:39:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=56577e956a9f7ab573166233d2203ef9b8abc82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:43:ca:74:9d:26:0e:72:87:b7:8e:77:1e:
49:30:5a:67:e5:85:85:0f:66:60:bc:74:7b:99:d4:
9e:53:99:6a:1a:e6:2a:e9:5d:d6:6f:f4:60:25:f0:
a4:92:af:4d:32:4f:18:e4:17:33:21:a3:2e:b0:4e:
94:e7:ff:95:76:4e:96:06:49:08:9b:da:a5:02:62:
02:81:e4:fc:5a:66:52:30:47:56:2a:f2:82:4a:c1:
cf:66:2b:3a:12:a9:39:8c:b9:3a:60:25:ed:f9:ef:
6f:0d:14:71:1f:fa:a1:b6:8b:11:ab:d4:3f:85:8f:
99:11:1f:fa:79:2d:8b:0c:5a:b8:9f:dc:ea:d5:54:
b2:ff:6f:96:c4:de:f7:5a:34:87:ce:ea:d9:04:df:
f3:33:43:58:1e:f3:0b:8b:fe:0a:36:98:af:6b:30:
19:36:40:b5:9c:5f:88:2e:8f:c5:c0:eb:2a:66:d2:
20:db:86:98:84:a9:cc:49:db:10:60:81:da:26:59:
9d:e0:e5:eb:76:e4:66:96:00:2c:28:4e:1c:17:19:
e3:16:c5:92:e5:69:1f:19:96:94:35:51:eb:ff:09:
90:ef:35:8b:37:ce:78:6b:89:32:0a:0c:4b:25:dc:
c4:5a:42:74:e8:ba:cc:e0:e5:ad:3f:0e:d5:fb:84:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:7E:95:6A:9F:7A:B5:73:16:62:33:D2:20:3E:F9:B8:AB:C8:2E
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4b:d1:c9:bb:ee:6f:ae:26:bb:9a:ee:17:be:b1:ce:fc:c9:
dc:8a:b5:c8:89:44:c6:e6:57:ef:a5:28:64:a8:0f:99:62:07:
01:cc:7a:12:c7:f3:b8:c5:2b:c2:ee:c5:28:a6:2c:44:55:1c:
a9:f4:40:71:8d:64:f9:a9:ad:70:4c:5d:ac:cc:3d:ac:82:5c:
25:c8:b9:b9:9d:3a:96:3e:ae:c2:9f:32:4a:f5:e2:fb:f3:ff:
b0:b4:3e:7d:fc:a3:ec:da:e3:5f:9f:64:fa:8b:69:ec:1c:68:
7b:47:3e:13:ff:84:d0:f5:7a:ae:08:bd:61:e5:a5:f7:02:d1:
d5:23:f3:e1:81:35:94:e0:9a:c7:66:21:1d:80:bf:25:65:93:
a9:59:69:fb:3c:0d:be:76:dc:c8:a3:91:b4:d2:4d:21:40:0f:
45:f9:c6:d2:eb:b8:21:bc:0e:0c:be:e1:06:ef:3c:3a:90:52:
6f:95:5f:cf:00:12:d7:91:82:35:a8:ef:2f:72:ff:24:f4:6b:
4e:b3:d9:d9:ee:dc:b5:86:53:80:98:29:c3:10:88:39:86:97:
0b:c9:26:22:68:bd:5c:45:cd:f7:b1:88:e8:82:29:e9:f0:58:
03:38:b3:49:4d:55:3d:66:06:e5:97:1b:1c:65:91:92:df:34:
4e:cb:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:18 2026 by rpki-client