Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: q6CGmdbblP3m8tIZvGhyZz7vTUW+gZFGFXqCVH92UZc=
Subject key identifier: 60:DB:DB:DA:AD:0B:11:FF:1E:09:27:93:F9:C1:09:EA:62:48:7D:04
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 01A0F18C07FD1A916629C65FF1CA9F59EF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 09A9
Signing time: Wed 30 Sep 2026 09:01:21 +0000
Manifest this update: Wed 30 Sep 2026 09:01:21 +0000
Manifest next update: Thu 01 Oct 2026 09:01:21 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: nQ/TNX3Ofz7qIQmEbPupLqij4bXn0zsnVXmvIdIbTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8c:07:fd:1a:91:66:29:c6:5f:f1:ca:9f:59:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Sep 30 09:01:21 2026 GMT
Not After : Oct 1 09:01:21 2026 GMT
Subject: CN=60dbdbdaad0b11ff1e092793f9c109ea62487d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:d4:3c:1c:d3:3f:77:0a:22:b7:30:7d:6f:
cc:74:86:06:16:31:c0:fc:4d:63:d0:56:47:bb:80:
3a:c2:59:e5:0c:13:8c:e4:d6:a8:30:8d:ba:86:08:
94:25:22:82:21:6f:d1:c4:74:01:f3:98:bb:b6:0a:
b2:82:64:5e:2f:b6:8c:1a:84:d4:32:a1:00:ab:ee:
16:44:ed:b1:04:f3:60:b7:a6:3b:d9:c1:5a:58:7b:
73:d0:4a:fb:c9:77:5c:9a:48:81:64:66:6e:15:e1:
c9:aa:ea:a1:95:8a:ab:22:ec:67:c0:d3:b3:1d:95:
b5:ba:10:a7:d7:55:e1:3e:29:ea:ac:eb:33:cd:e7:
92:06:f5:ee:c8:8f:ab:a9:c9:00:71:e5:31:dc:e5:
75:13:4c:0d:eb:06:72:4f:9c:ca:f0:2f:05:9e:64:
7c:ac:a5:87:bc:bc:2f:e9:dd:1e:51:a9:f1:0f:a8:
ab:a6:47:60:df:ce:42:22:d1:aa:ea:e7:eb:08:24:
69:1b:fb:bb:01:7d:ac:41:42:20:75:db:00:22:4c:
a7:82:a8:76:58:c7:53:94:51:e9:13:47:ee:3f:bd:
62:68:4e:b2:9a:4d:15:b1:50:5b:2c:0d:88:a6:86:
f3:36:4e:81:73:3a:b8:e9:84:5c:39:c4:6b:2c:11:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:DB:DA:AD:0B:11:FF:1E:09:27:93:F9:C1:09:EA:62:48:7D:04
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e1:a0:a4:57:a3:b9:7a:b9:10:b1:f5:af:17:54:51:fe:78:
2a:57:f9:5d:53:2b:5d:8f:9e:53:4b:65:06:f5:09:0e:b5:07:
a4:a3:4b:f9:18:62:ec:c2:4f:d6:f5:f9:38:17:5e:6b:e8:ab:
38:21:10:74:d5:3a:18:c3:c6:06:53:bf:67:d0:ae:2a:22:25:
57:a5:e4:d9:f9:08:a5:94:91:9b:d4:23:f8:36:99:ba:f4:b2:
01:11:d3:6a:e3:94:32:ad:cf:92:94:5d:e7:54:90:d0:41:81:
9e:16:b5:aa:25:99:1a:d4:c7:46:6e:0e:68:2b:28:24:e0:6c:
20:7e:06:90:14:f3:71:6b:97:94:09:7e:42:b8:d2:16:87:01:
57:9d:0f:82:1d:3c:15:3b:35:57:67:ad:f9:b7:2f:bc:08:bf:
68:e9:4a:24:04:81:bd:15:9a:ce:fd:88:85:56:4c:7b:b9:f9:
b9:b5:7d:f5:72:0e:46:c6:ca:53:01:24:09:af:c8:d9:4c:35:
81:de:ce:0b:c8:15:4d:26:b0:c9:56:56:25:1b:d1:8e:21:8e:
7a:ac:a8:0a:f6:31:97:12:eb:46:ea:fa:93:ab:9b:03:d4:bc:
a0:a9:19:b8:3f:ad:ac:ac:b9:23:2f:1b:28:7e:57:18:ce:c7:
0e:89:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:54:01 2026 by rpki-client