Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: zD5odCMWzLUwBTlv0/q3bo2TJImlKY/AVxvADWV3O4E=
Subject key identifier: 1D:27:73:9C:C1:96:72:AF:D9:F5:51:9F:36:11:16:D7:89:E2:10:05
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019FA907087E36B59D22D24FDCA36587C83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0AE3
Signing time: Tue 28 Jul 2026 14:00:38 +0000
Manifest this update: Tue 28 Jul 2026 14:00:38 +0000
Manifest next update: Wed 29 Jul 2026 14:00:38 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: IwEdcGe4My0io3D47wB8NN/WQqQ7YXGDzM60snOjlUE=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:08:7e:36:b5:9d:22:d2:4f:dc:a3:65:87:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jul 28 14:00:38 2026 GMT
Not After : Jul 29 14:00:38 2026 GMT
Subject: CN=1d27739cc19672afd9f5519f361116d789e21005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:73:e2:82:be:b4:7d:bb:9e:15:7a:39:4a:
8c:22:85:45:b1:e1:23:88:75:3b:25:f9:0d:8a:87:
c3:b7:2f:b2:65:3c:c6:a6:05:c9:c0:ae:2c:03:8e:
d4:34:ec:80:cd:a6:c1:7f:21:07:14:f0:b0:fc:25:
d3:50:6f:8a:5f:ac:7e:0c:c3:1d:fc:ea:60:c4:65:
ba:6f:29:13:cd:88:20:03:04:8f:45:68:b4:09:df:
87:3c:75:4b:4d:c0:87:96:6d:a3:5c:53:6b:b6:9b:
da:19:b5:42:68:d3:cb:b8:cc:00:04:8a:72:1f:16:
c6:b9:d8:90:c2:e2:89:00:e9:3e:89:76:0b:7d:04:
c7:08:f1:cf:8e:a7:36:0d:2b:fe:52:5d:60:b3:6c:
6a:12:a9:bf:f6:ce:c7:1f:63:23:1b:35:15:75:8c:
c7:54:a5:4c:a3:ea:10:3e:2a:e1:6d:e5:df:5a:95:
b3:1e:92:48:a7:cb:3d:14:79:60:b3:c2:cf:8a:0b:
38:b9:a2:d8:6e:9f:13:17:de:78:29:9d:94:fb:86:
9e:56:f5:05:71:4c:93:86:f5:d1:0b:a9:9a:be:2c:
4e:2c:df:97:52:c7:b0:b8:18:84:22:79:f0:f3:5a:
23:1a:40:e4:0f:36:6b:30:14:e1:49:79:53:16:27:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:73:9C:C1:96:72:AF:D9:F5:51:9F:36:11:16:D7:89:E2:10:05
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2b:21:6b:bc:4e:ea:ec:ae:6e:a5:b4:26:eb:a3:0e:51:cd:
0c:a2:47:b1:d9:15:d7:34:87:82:2b:dd:96:34:4b:97:84:af:
a7:bc:78:01:98:e8:c5:2c:1a:cb:df:b9:2e:76:66:96:7b:86:
92:01:4d:a9:ce:67:ee:30:43:1a:bd:b2:30:26:c6:c2:ac:b8:
2f:8c:a1:c7:43:7a:b2:4f:19:04:13:eb:14:99:bb:5f:61:da:
8b:b6:21:b2:c0:6c:81:e6:43:68:82:89:c5:f9:6c:01:6a:bb:
be:d4:3d:b3:d4:c1:89:01:0c:e1:22:77:95:c6:0f:62:23:17:
fc:b6:e6:3a:39:4e:bf:4b:4d:d4:b9:05:31:ca:e3:dc:dd:90:
aa:04:e2:33:7a:56:9e:39:6e:46:c9:08:77:8d:b5:46:7d:66:
35:e7:92:4f:5f:63:17:00:84:73:d3:b8:32:e3:1d:f7:3a:20:
1a:c9:da:b7:c7:22:cc:c0:28:33:d6:d7:e6:fd:5c:14:fd:a4:
65:db:9b:bc:51:9d:fa:49:fb:93:0f:c9:40:85:56:88:fc:b3:
d8:0c:bb:21:e6:00:20:a8:3c:8f:2b:29:f5:e4:73:fb:f9:20:
99:0a:ac:99:82:32:93:a7:f3:4a:46:5d:dc:2e:56:d0:cd:60:
c8:8a:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:57 2026 by rpki-client