Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
File: D2Kgc3giOs5WqEzv0weCKMsL5S4.mft (raw, json)
Hash identifier: EfgIHOg5Qh1YCQNUMWBQnbOJPd9HdYK8wX2DdPcD8pw=
Subject key identifier: 5A:83:45:AE:17:DF:41:36:00:DB:DF:B8:1F:F8:7D:22:8A:F1:F5:08
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 01A0C6D7B90C5A958DE81A5B4318AE769592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
Manifest number: CB
Signing time: Tue 22 Sep 2026 02:00:21 +0000
Manifest this update: Tue 22 Sep 2026 02:00:21 +0000
Manifest next update: Wed 23 Sep 2026 02:00:21 +0000
Files and hashes: 1: D2Kgc3giOs5WqEzv0weCKMsL5S4.crl (hash: kq0Q0VNCyvlyUPKlxjG5aGTIjP0UhZRwuxIJ2rtdv5Y=)
2: gqNmtUdf580qEHDGPMO8uXNf-94.roa (hash: TMnDxy4wqlNlKPOnHn9qZ+VG+0+ZivW3PzYjlXvUSu4=)
3: hcfkZ1canYcqBaE9iPzQiK47YkU.asa (hash: WYngWTyXnFZ7BPoBYe6DykacViEk1I9J2lH7LeX7hgc=)
4: ytpxWALMMzMXxSAcFbBovYCQkDw.roa (hash: tuj/U5H6ku6EtzVDyrVdq4eCW3Pp8DR50mZnV0/ryY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b9:0c:5a:95:8d:e8:1a:5b:43:18:ae:76:95:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Sep 22 02:00:21 2026 GMT
Not After : Sep 23 02:00:21 2026 GMT
Subject: CN=5a8345ae17df413600dbdfb81ff87d228af1f508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:15:9c:53:5d:58:97:4e:40:89:75:08:1c:
70:56:d7:ed:54:d1:b2:eb:22:e0:d0:f1:c0:75:5b:
c1:f2:10:50:13:97:45:07:4a:ef:88:67:fe:0b:a5:
b6:bb:94:ce:a9:38:d1:6f:6a:cd:ab:bb:a9:5c:1e:
67:b9:48:8b:c1:aa:4a:42:99:3a:fe:f4:7b:30:63:
64:05:97:61:fc:6a:0f:ad:3b:f1:bd:1b:a1:42:99:
0e:70:80:7a:8c:1f:a4:fe:c6:a1:43:23:9b:9e:b5:
6e:24:6e:5f:ea:0b:24:49:de:37:a4:09:ac:b8:44:
9f:7c:9f:61:56:d4:31:d3:32:2f:90:3e:23:63:c0:
04:15:b9:c0:b1:1c:2e:60:3c:72:b9:86:a7:29:9c:
da:f5:ab:31:66:02:d1:0d:ad:a8:89:29:0d:ad:5e:
c6:22:a8:62:5a:e8:ab:8e:da:d4:af:61:42:96:f0:
9f:91:46:0b:67:b7:ad:06:5d:f4:da:44:42:37:02:
76:14:83:0e:4b:ae:c2:df:49:69:f5:99:e7:1e:92:
d4:40:2a:78:d4:a1:4b:01:40:1f:59:5f:02:74:58:
fa:f8:e9:ab:d8:c3:54:ba:e0:8d:6c:dd:07:43:8c:
90:94:08:06:62:1b:e8:c3:1f:19:bc:fe:a5:a3:b2:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:45:AE:17:DF:41:36:00:DB:DF:B8:1F:F8:7D:22:8A:F1:F5:08
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:71:ce:8a:26:77:9e:24:cf:d1:06:44:11:17:4b:93:26:
33:d4:c6:91:fe:fe:4f:68:0a:44:84:e3:c1:8d:ed:a0:2e:b3:
53:69:7f:c7:09:0c:58:22:90:4f:a5:97:df:32:d3:9e:81:62:
c8:2f:ba:89:70:2b:7f:90:8d:0c:5d:13:89:cc:8c:01:f9:ea:
9e:b2:50:6f:28:5b:6d:d8:15:f3:17:11:8a:b6:52:8a:a0:1a:
0e:5d:22:0a:d0:5a:e3:d6:74:bc:9a:ac:54:6e:54:89:51:24:
69:ad:56:23:f6:b4:b4:20:89:e0:77:40:4f:8f:a3:cd:fd:9d:
b8:4f:f0:38:ac:a2:1d:55:1a:f8:9d:d5:db:b2:d6:ce:7f:b3:
aa:42:c1:d4:bc:9d:d5:14:b4:f4:30:67:d2:7e:17:96:5d:10:
79:cd:08:e9:9a:6c:25:1e:16:02:96:af:ff:e9:b6:bd:23:8f:
de:c0:4f:2b:0c:ec:7d:44:e7:2a:79:fd:cf:16:3d:d6:25:6d:
14:3f:68:77:89:3c:12:fd:53:f6:80:da:0c:30:64:9d:1a:80:
63:92:3c:7a:bb:6f:92:56:4d:76:71:51:60:6c:a2:eb:78:d3:
bf:37:a1:01:cc:8a:d2:b0:4a:c1:d9:7a:30:64:2a:d9:a3:5c:
c6:bc:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:10 2026 by rpki-client