Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: B1PPuYffZuO+yRp6VghXIOJ/WmPG9SavECyKdf+6ouE=
Subject key identifier: 94:7F:B8:B5:90:CE:BA:70:88:DF:C2:70:0B:85:12:AD:B1:76:99:73
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 01A0CF364835DC0F8F837848F8C26D54A871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 08CD
Signing time: Wed 23 Sep 2026 17:00:36 +0000
Manifest this update: Wed 23 Sep 2026 17:00:36 +0000
Manifest next update: Thu 24 Sep 2026 17:00:36 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: vs06fxbp7j/G8ohTsoivsxf+tbwhIEjFgMsTo2Pqoa8=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:48:35:dc:0f:8f:83:78:48:f8:c2:6d:54:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Sep 23 17:00:36 2026 GMT
Not After : Sep 24 17:00:36 2026 GMT
Subject: CN=947fb8b590ceba7088dfc2700b8512adb1769973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:9a:39:aa:d8:a3:51:9b:01:08:96:35:c5:
ef:00:1f:43:ea:00:e9:21:7e:24:c7:59:62:df:8b:
ee:63:d7:20:7e:82:b1:f8:53:71:c6:68:69:16:b1:
bc:1d:bf:85:64:3c:c6:dd:9c:27:78:43:97:82:af:
2b:2d:d2:9a:21:38:0d:46:44:fe:8f:a5:dc:5e:61:
76:fc:04:df:1e:41:1a:2b:f5:e7:a1:ef:f6:27:0f:
98:42:87:ed:70:03:0c:2a:4f:fe:15:0b:75:ea:23:
36:79:f4:b6:9f:35:5e:89:a9:25:fb:67:7b:2d:a9:
45:1a:2c:12:ea:fa:9e:37:eb:5c:fc:ac:dd:26:6a:
4e:76:2f:98:ee:12:1a:3f:d7:cd:e1:a3:d8:a8:43:
81:30:0a:bd:e8:5c:56:95:7d:86:42:b1:79:13:15:
4a:20:f6:84:29:c6:22:62:16:43:27:7c:d5:f0:06:
12:3c:2a:aa:89:db:25:56:93:7a:3b:27:33:37:08:
2e:eb:45:a9:ce:c0:78:41:d4:27:ce:70:c8:02:04:
13:5e:4a:55:11:5c:7a:5f:20:00:41:0c:04:25:3e:
51:da:79:5d:0b:f2:53:f0:f4:02:09:f1:38:4c:11:
2e:7d:00:58:50:2c:a6:03:eb:b7:2b:04:52:6b:74:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:B8:B5:90:CE:BA:70:88:DF:C2:70:0B:85:12:AD:B1:76:99:73
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:1c:37:7d:b4:0b:fe:4b:78:12:40:4d:43:d4:2a:be:27:
b5:4d:40:ea:37:7e:21:90:46:24:22:b7:37:9d:7b:7a:10:eb:
bd:bf:c3:ab:2e:60:54:e4:0d:02:1e:1c:6b:20:a6:64:90:3d:
ca:f3:3b:ba:5b:76:9d:e2:c3:c2:90:34:7c:6d:22:d2:b1:f8:
4f:c2:33:f3:31:05:87:a5:72:9b:57:da:dd:3e:9f:61:e7:5c:
e4:14:3e:ba:b5:3d:c5:3d:34:86:60:b6:6f:ca:06:a9:1d:9e:
03:54:6f:52:f1:b2:a4:96:ac:c2:5a:e4:a2:da:4a:4f:86:84:
e4:42:7a:7a:de:2f:48:90:70:f2:e1:fa:e9:50:fa:db:37:bf:
f0:b0:86:e5:ea:b2:b1:d4:90:be:10:b6:cf:0d:16:53:79:47:
35:ac:bc:a4:82:a6:a3:7c:3e:43:81:ab:ea:a5:c0:59:cb:4a:
07:5b:06:1f:e9:8f:73:45:7e:90:d9:4c:83:9b:bd:b4:42:9b:
79:77:6b:51:c7:75:40:ed:82:e2:2d:12:5a:c0:db:33:2c:a3:
7c:e9:7c:ac:d6:6e:33:2c:c8:0d:33:15:24:8b:02:11:77:d5:
b2:05:38:3f:fb:fb:37:bf:5c:1b:ec:e1:e4:d9:6f:47:a2:05:
72:1f:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:44:24 2026 by rpki-client