
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier: 8WjF7iIpK02di9gSu9t1JclO96/yCA8HUfLOTIf9ukM=
Subject key identifier: 46:68:81:2A:7B:D1:13:F2:2C:65:5F:A8:3D:9B:39:B7:6A:B4:4A:A0
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer: /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial: 01A0C4E9BAE857312EC877A2E928E6A309B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number: 0A91
Signing time: Mon 21 Sep 2026 17:00:47 +0000
Manifest this update: Mon 21 Sep 2026 17:00:47 +0000
Manifest next update: Tue 22 Sep 2026 17:00:47 +0000
Files and hashes: 1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: fQ2EoG16bN6dnI9RlhVUTcMT1wt9lIw7vj9ZShTqQQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:ba:e8:57:31:2e:c8:77:a2:e9:28:e6:a3:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
Validity
Not Before: Sep 21 17:00:47 2026 GMT
Not After : Sep 22 17:00:47 2026 GMT
Subject: CN=4668812a7bd113f22c655fa83d9b39b76ab44aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:e6:85:1c:af:a4:a6:47:59:41:8e:3f:6e:
57:48:fa:1f:2a:7f:e1:d9:38:a6:d9:64:5b:57:4e:
e6:05:77:82:11:5a:7b:32:db:dd:d1:70:65:53:01:
d5:47:78:cd:d5:f9:ac:16:af:ff:93:ea:bd:94:87:
52:d7:6a:d2:a6:7e:b5:60:22:8b:51:90:36:35:96:
64:99:f1:ec:6b:e6:23:13:e2:d4:e0:a4:cd:9d:73:
58:4a:3f:73:a0:74:80:f0:3a:b7:53:de:8e:87:6b:
aa:17:83:bf:3b:aa:f8:f5:6c:d0:7c:c0:30:66:ae:
52:18:11:cd:4a:48:30:6c:ed:e5:42:e1:03:62:f8:
2d:fb:6e:bb:ce:c0:58:06:56:d4:37:1b:c4:00:29:
9e:e3:1b:2a:fa:fb:a3:f5:6e:13:08:53:68:73:68:
71:89:ef:d8:eb:da:52:43:71:d7:d1:02:56:d4:89:
b4:4b:5a:c7:dd:30:12:a1:82:fb:2a:54:2e:cc:4d:
d1:ba:de:c2:15:cb:1d:63:14:2f:f9:d4:d7:6b:7e:
87:95:9c:c4:09:34:58:38:ff:e3:35:b8:8d:c3:f8:
62:52:d7:81:cd:59:88:54:0f:0d:a6:50:7d:da:50:
13:d7:73:28:3d:f2:0d:40:06:ab:7c:07:f9:d5:a1:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:81:2A:7B:D1:13:F2:2C:65:5F:A8:3D:9B:39:B7:6A:B4:4A:A0
X509v3 Authority Key Identifier:
keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ce:77:31:56:40:b7:9a:6c:7d:17:36:7c:03:9f:28:da:c9:
7e:a8:d6:70:50:b7:8b:eb:eb:0b:99:22:ea:bf:9b:ee:5b:42:
2d:73:d0:03:f7:78:81:3a:a5:a7:a5:aa:c8:e6:b5:78:c6:68:
c0:72:e8:97:81:9b:16:87:68:ea:91:6e:8d:64:39:9b:e7:c1:
50:0c:46:3a:36:a8:7c:f3:95:84:95:fb:a3:7e:da:29:14:6a:
fa:7f:1d:b1:12:06:ca:02:6b:05:fe:de:4e:2d:d7:85:d5:94:
c8:a0:24:65:06:f7:16:3c:85:53:18:3f:14:c5:86:8b:d5:8d:
ae:56:24:70:44:9f:68:9d:3e:b9:b4:6b:28:ec:59:12:22:32:
0c:27:a2:02:9d:2e:83:47:01:37:64:fe:76:ab:85:2f:9e:88:
b0:20:e3:4a:80:4f:da:09:e9:44:c0:98:55:45:0a:2e:8d:d3:
40:80:11:f6:c4:6c:7e:e3:ae:3d:80:4a:ea:bc:a0:d3:a7:36:
d8:c2:32:e9:83:7c:ba:a5:d2:ce:fe:21:f1:af:29:67:b3:74:
84:f8:aa:fd:91:83:37:19:35:68:6b:d5:3a:3a:d3:cf:14:62:
29:fd:a1:7a:d4:71:23:86:4c:a7:07:d0:ae:a2:35:1d:14:68:
55:88:6b:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6broVzEuyHei6Sjmowm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjc5Mzk2OWE2Yzg0ODNjYzM2Njc5MzQ0NTBmNjY3OGZk
MTk3NTgwHhcNMjYwOTIxMTcwMDQ3WhcNMjYwOTIyMTcwMDQ3WjAzMTEwLwYDVQQD
Eyg0NjY4ODEyYTdiZDExM2YyMmM2NTVmYTgzZDliMzliNzZhYjQ0YWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorLmhRyvpKZHWUGOP25XSPofKn/h
2Tim2WRbV07mBXeCEVp7Mtvd0XBlUwHVR3jN1fmsFq//k+q9lIdS12rSpn61YCKL
UZA2NZZkmfHsa+YjE+LU4KTNnXNYSj9zoHSA8Dq3U96Oh2uqF4O/O6r49WzQfMAw
Zq5SGBHNSkgwbO3lQuEDYvgt+267zsBYBlbUNxvEACme4xsq+vuj9W4TCFNoc2hx
ie/Y69pSQ3HX0QJW1Im0S1rH3TASoYL7KlQuzE3Rut7CFcsdYxQv+dTXa36HlZzE
CTRYOP/jNbiNw/hiUteBzVmIVA8NplB92lAT13MoPfINQAarfAf51aE7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZogSp70RPyLGVfqD2bObdqtEqgMB8GA1UdIwQY
MBaAFND3k5aabISDzDZnk0RQ9meP0ZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2Et
MGE3NTc0OWY3MTQ4LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2EtMGE3NTc0OWY3MTQ4
LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwM53MVZA
t5psfRc2fAOfKNrJfqjWcFC3i+vrC5ki6r+b7ltCLXPQA/d4gTqlp6WqyOa1eMZo
wHLol4GbFodo6pFujWQ5m+fBUAxGOjaofPOVhJX7o37aKRRq+n8dsRIGygJrBf7e
Ti3XhdWUyKAkZQb3FjyFUxg/FMWGi9WNrlYkcESfaJ0+ubRrKOxZEiIyDCeiAp0u
g0cBN2T+dquFL56IsCDjSoBP2gnpRMCYVUUKLo3TQIAR9sRsfuOuPYBK6ryg06c2
2MIy6YN8uqXSzv4h8a8pZ7N0hPiq/ZGDNxk1aGvVOjrTzxRiKf2hetRxI4ZMpwfQ
rqI1HRRoVYhrpA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:32:27 2026 by rpki-client