Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: U9ypSlzXFs5ZVJSzT/GAwV9Jf5Cx8svDQRE+xAa1MoI=
Subject key identifier: F5:46:8E:B0:6F:AC:F0:65:EB:F3:11:E1:C2:A1:BF:7C:15:F3:A7:85
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 01A0CCA3B68E3F3E0C8892E398BC5431345C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0B7A
Signing time: Wed 23 Sep 2026 05:01:16 +0000
Manifest this update: Wed 23 Sep 2026 05:01:16 +0000
Manifest next update: Thu 24 Sep 2026 05:01:16 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: N/5ljU/dlpbeuYKcFn+J46ohzoY8URcHSBCoV4xDUiY=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:b6:8e:3f:3e:0c:88:92:e3:98:bc:54:31:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Sep 23 05:01:16 2026 GMT
Not After : Sep 24 05:01:16 2026 GMT
Subject: CN=f5468eb06facf065ebf311e1c2a1bf7c15f3a785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:6e:44:bc:2b:94:75:c4:b7:55:26:df:dd:
46:37:c1:66:9b:5a:40:cd:40:cc:b2:b0:9c:6a:d6:
28:73:d0:f4:2e:1a:15:67:d9:70:6b:61:35:51:d7:
fa:5d:c2:bb:fe:a9:c1:1c:e5:32:8a:e9:f2:82:70:
2c:ed:0d:dd:d6:14:f0:c2:e8:b9:7f:ef:06:f6:8c:
66:f7:cb:c6:10:00:c4:85:19:78:f6:49:c0:b7:b5:
58:b4:db:33:bf:32:13:84:f3:86:f4:af:f7:08:8c:
8b:de:13:b5:25:89:f2:d1:42:7c:ea:a9:6e:f6:b6:
55:1a:c7:69:0f:46:73:d0:87:72:eb:45:9a:c6:f4:
28:61:a0:8c:40:fd:a5:28:b5:e9:d8:94:43:f4:67:
fa:18:d6:25:50:f5:af:11:43:4d:98:48:6b:10:c5:
0e:29:7b:35:18:5a:1f:97:af:68:e3:25:c9:c8:df:
c5:4f:a1:b9:a7:f6:1a:4f:50:dc:cb:65:17:71:77:
13:98:44:23:01:40:79:3a:01:95:ff:83:7c:a9:49:
bc:fb:5c:8d:51:9e:58:e0:01:f4:a9:bf:6d:d2:8b:
23:f9:89:e8:3d:9e:a0:c4:11:0a:76:5a:5d:58:8d:
ca:fc:46:81:c6:ba:c5:72:af:b9:18:db:58:fc:b3:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:8E:B0:6F:AC:F0:65:EB:F3:11:E1:C2:A1:BF:7C:15:F3:A7:85
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:0b:58:bb:b2:04:97:09:5e:a7:7d:90:7c:a3:22:7a:b8:
3f:1f:bf:c1:6e:b9:bf:2d:70:2b:0d:a9:a7:b3:93:a3:96:a5:
cb:25:df:5a:e6:4d:ed:a9:27:5d:89:d1:66:6a:a3:49:54:75:
78:ed:9b:af:fc:b0:55:d4:20:f7:53:32:9e:27:03:47:18:2e:
0e:6c:cb:4b:dc:43:21:06:c8:cf:0c:91:b5:1a:40:fa:a3:4b:
1b:2f:c4:d4:86:90:44:df:ea:77:34:7a:77:7c:3e:08:ce:2c:
92:3e:17:14:4e:fb:cb:bb:bc:61:7d:b9:a3:bb:06:5e:99:96:
54:02:46:2a:a1:12:aa:24:6e:69:57:b7:44:35:a5:7b:4d:fc:
98:f0:a5:3d:ce:ff:4b:33:ca:2a:af:a8:c5:4f:bf:78:6b:50:
de:97:da:52:57:df:ce:f7:19:13:de:c4:68:e3:0d:e6:5b:10:
dc:20:02:bd:d4:c8:54:74:79:a1:65:68:c8:90:08:b2:85:bb:
ac:85:48:6c:39:44:bd:c3:34:f2:b3:89:10:45:81:61:16:ed:
dd:79:7a:c8:5c:74:62:c2:07:8e:30:4a:1f:53:b7:20:d4:aa:
40:d0:15:37:2e:5a:8f:92:69:8a:1a:fd:62:fd:17:d5:67:0e:
21:1c:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:03:37 2026 by rpki-client