Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: R1HeuH3WfCbpAvf6vwnSgay83RCisMmH/0EJ9CdZbIs=
Subject key identifier: A3:E8:A2:37:30:66:95:E8:12:CA:26:5E:82:21:EF:88:01:D3:11:B1
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01A0D4CAEA3B1AAC7010EAA4C4D173E5274D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0D67
Signing time: Thu 24 Sep 2026 19:01:03 +0000
Manifest this update: Thu 24 Sep 2026 19:01:03 +0000
Manifest next update: Fri 25 Sep 2026 19:01:03 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: 68hzetHkVlK268yrLZPsxTLRBdNhh6vxhuue+diNO1U=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:ea:3b:1a:ac:70:10:ea:a4:c4:d1:73:e5:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Sep 24 19:01:03 2026 GMT
Not After : Sep 25 19:01:03 2026 GMT
Subject: CN=a3e8a237306695e812ca265e8221ef8801d311b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:b8:eb:fe:dd:e7:67:bb:71:d9:f7:2b:cc:
9d:72:19:50:55:f7:33:3f:bc:05:84:cf:7e:a5:15:
09:0e:c6:5b:81:f7:dd:5b:15:b8:5b:fe:87:41:44:
e3:bb:ad:cd:da:74:91:21:89:4c:c8:bf:80:4e:03:
42:12:b2:7c:b3:a9:f2:61:29:28:a8:f0:d7:2e:47:
88:db:2c:42:c3:4d:38:40:ab:fa:60:ba:7e:e2:b5:
33:67:16:05:77:e8:a5:cb:98:79:bf:ce:53:11:e1:
e2:9f:ca:aa:56:83:4c:a6:44:f4:2a:35:52:69:ba:
5c:44:9f:15:ef:0e:c8:60:c0:5e:35:45:55:62:27:
23:42:8c:e9:a1:a8:a8:64:16:af:b0:6d:80:43:ee:
cd:8c:22:90:3b:a7:73:57:ae:38:8d:ad:f8:ac:d0:
d3:ce:b1:b6:08:85:f4:67:25:59:b3:23:63:c6:98:
c8:b4:6d:41:cc:bf:ef:18:43:fc:a0:b3:7e:17:e1:
aa:23:77:31:83:fb:91:e9:7f:ce:e2:1c:49:5b:67:
2b:6d:dd:4b:c7:9d:f3:b8:b9:05:5b:ad:ff:89:91:
bf:ab:5a:c9:1d:b2:5a:fc:da:cb:26:75:c5:26:d9:
a3:f0:36:ea:e0:f2:ad:4b:d8:9f:67:8e:f6:f2:da:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:A2:37:30:66:95:E8:12:CA:26:5E:82:21:EF:88:01:D3:11:B1
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:63:32:14:1c:dd:de:60:a4:b6:6c:ac:e7:88:21:f5:26:c1:
76:c4:27:16:e5:78:ac:f0:d4:c4:6e:44:a8:f6:60:f7:e8:91:
6d:d7:00:73:e7:40:e8:5d:9e:df:85:99:6a:a1:b8:50:84:98:
33:e4:4d:5f:e6:66:0a:5f:d4:57:d7:df:a5:33:fb:9f:0c:5f:
0c:7e:15:a3:a4:87:99:a8:23:17:c3:43:ad:f1:ab:bd:86:aa:
c8:94:b5:ee:e3:76:61:c0:16:63:99:3a:91:1f:39:0a:8a:f4:
1c:d2:b9:d5:dd:f7:91:d2:4f:1d:3e:fc:52:57:c2:dc:ec:5d:
15:66:50:18:69:5e:1b:9a:4d:52:b0:87:ca:5e:fc:25:3d:10:
7b:18:43:9e:51:02:8d:dc:37:3d:d1:0d:fc:64:6a:78:a5:61:
17:78:3f:46:b4:d3:49:a5:3c:94:b8:70:ad:b3:de:79:82:42:
9d:f6:b1:9f:b7:33:9d:53:e9:c1:96:8f:ac:5a:7d:1c:76:11:
13:24:bb:b2:a1:aa:81:a8:3f:9a:fd:fb:39:aa:48:30:8c:5a:
23:aa:c2:db:51:85:ed:b6:1e:62:14:b5:b7:1e:8e:47:8c:9d:
04:48:e0:e6:b8:49:cb:ef:8b:c9:93:12:b3:5b:3f:3f:40:85:
e4:81:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:42 2026 by rpki-client