Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.mft
File: p9j0jemBeis8NM5N4XroElfcRAc.mft (raw, json)
Hash identifier: lMJIrgI/hBiSimgoczlSubxf/sEb9w0uokdDNwI2K9I=
Subject key identifier: 4A:8C:E2:FE:14:A2:88:D9:0F:56:6C:9F:A6:67:0F:68:B5:8C:C4:7D
Authority key identifier: A7:D8:F4:8D:E9:81:7A:2B:3C:34:CE:4D:E1:7A:E8:12:57:DC:44:07
Certificate issuer: /CN=a7d8f48de9817a2b3c34ce4de17ae81257dc4407
Certificate serial: 01A115609695E6708482A4C943BE995DFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.mft
Manifest number: 27
Signing time: Wed 07 Oct 2026 08:00:13 +0000
Manifest this update: Wed 07 Oct 2026 08:00:13 +0000
Manifest next update: Thu 08 Oct 2026 08:00:13 +0000
Files and hashes: 1: 5w5DbTtvb6SeMz3_UE0rwfblTDc.roa (hash: fHfClX6ib9kUfrFHkePYoEnfGuEUjbb4k9MOYx0DJ4Q=)
2: p9j0jemBeis8NM5N4XroElfcRAc.crl (hash: 8Td5O/x8zI5aQuRvb/aW3tV0bnpDPsScoKcnyEd/Akk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:60:96:95:e6:70:84:82:a4:c9:43:be:99:5d:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d8f48de9817a2b3c34ce4de17ae81257dc4407
Validity
Not Before: Oct 7 08:00:13 2026 GMT
Not After : Oct 8 08:00:13 2026 GMT
Subject: CN=4a8ce2fe14a288d90f566c9fa6670f68b58cc47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:e2:79:e7:1c:6e:4e:62:90:41:3f:c3:07:
66:a8:9c:77:61:2e:92:a0:c7:d0:bf:95:7b:e8:98:
0a:07:d5:92:5a:5f:cd:3f:98:d6:17:ef:e0:67:e3:
c6:90:77:4d:18:06:97:47:18:05:ff:70:de:70:33:
53:f8:5f:27:2c:5f:ea:8e:d4:15:bb:da:63:e7:f8:
cc:bb:2e:7c:e4:48:ba:f2:cc:3f:9f:a1:5b:bf:ca:
65:15:68:92:c6:0d:dc:1b:b9:03:9c:f2:dc:b2:6f:
e0:68:e8:74:a0:f1:d9:37:97:dc:22:d9:8e:86:7e:
fe:ad:13:84:73:22:2f:84:59:88:e3:01:f2:d3:c8:
c0:f3:d3:1d:4c:74:f7:c5:bc:48:e2:12:66:cf:7a:
63:5a:e9:eb:72:cf:ee:0d:79:e5:af:9e:6c:30:8f:
fa:c1:4c:38:b8:97:45:b6:8f:9b:54:7f:b7:75:86:
be:9a:2b:e7:8e:21:c0:a9:f1:12:5d:9d:5e:67:cd:
fb:ac:47:ae:ba:93:61:75:45:c8:02:95:98:f0:b5:
8c:d0:13:a0:0f:40:3e:d2:a8:7e:cf:e2:a4:9a:73:
a3:a4:b9:20:63:f4:4f:1f:53:ba:e8:21:c7:c5:2c:
72:62:95:97:f0:77:00:84:ac:b2:34:0c:42:28:0e:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:E2:FE:14:A2:88:D9:0F:56:6C:9F:A6:67:0F:68:B5:8C:C4:7D
X509v3 Authority Key Identifier:
keyid:A7:D8:F4:8D:E9:81:7A:2B:3C:34:CE:4D:E1:7A:E8:12:57:DC:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:04:b6:ee:18:3f:61:0e:bd:ba:ee:69:e3:0d:a4:1d:07:13:
db:18:af:4e:05:98:a6:df:8d:e1:d4:b3:6d:b2:f6:9d:11:96:
b7:11:9a:bf:17:9f:da:6c:b9:a6:22:1b:5d:24:bd:5f:99:ab:
01:be:43:21:b6:ab:63:46:5c:fa:18:fd:f5:5a:49:f6:ca:93:
61:fd:3c:fd:c3:46:4a:48:2c:2a:bc:f5:74:b1:d5:32:91:2d:
b2:e8:89:5b:14:6d:eb:1e:ca:28:65:ff:00:9c:fc:91:ae:ca:
64:f5:cd:dc:9b:98:63:ce:f7:07:79:1e:00:1d:9e:1f:44:5b:
67:71:dd:6b:43:f0:04:a0:95:c0:14:90:35:0a:70:1d:b4:cb:
56:a7:41:24:cb:49:ad:1c:d9:9b:aa:35:18:45:d0:a1:86:eb:
64:8c:35:40:07:31:f6:65:3c:c4:d4:4e:06:26:ae:19:7d:a1:
eb:ac:30:01:86:af:c4:f7:47:16:37:4b:e6:5e:f1:72:85:0f:
60:f3:5d:69:68:d1:bc:0b:37:a9:30:67:07:ce:02:fb:ef:9e:
a6:f4:b4:3d:d8:b2:95:ba:dc:af:56:e0:fa:e7:80:91:29:75:
8b:e2:54:cb:06:7b:2c:c5:e0:12:1f:4f:1c:d4:b2:a7:1e:36:
e0:05:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:42:57 2026 by rpki-client