Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: SAP2LwwTNAcokp1hMm86PtOKTDO4YMHt3ZG1qObVuF4=
Subject key identifier: 01:1D:4D:8E:21:EC:C5:1B:A8:1F:EA:FD:F4:F1:D5:87:4B:6B:B4:0A
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 01A0CCA367EB1BAD890F91ED8AC876FB48A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 18E0
Signing time: Wed 23 Sep 2026 05:00:56 +0000
Manifest this update: Wed 23 Sep 2026 05:00:56 +0000
Manifest next update: Thu 24 Sep 2026 05:00:56 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: eFyuzboMpJEcqkIS3TdM5imMnH2qDBvrQvyKouvrhQo=)
2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:67:eb:1b:ad:89:0f:91:ed:8a:c8:76:fb:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Sep 23 05:00:56 2026 GMT
Not After : Sep 24 05:00:56 2026 GMT
Subject: CN=011d4d8e21ecc51ba81feafdf4f1d5874b6bb40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:93:2c:2d:77:cd:76:31:02:a3:d9:b1:a7:
f7:f2:dd:86:71:0a:d3:8f:68:a0:da:00:66:2f:3d:
f8:fd:f1:b5:6d:41:2e:36:7f:78:f9:bf:7e:12:25:
5e:2d:3c:ea:a3:1f:d6:c2:aa:29:94:05:b8:d1:f5:
b6:be:7c:f2:2b:93:9b:f2:3d:39:ef:45:ec:4d:ef:
d9:cb:5a:e7:71:81:22:4a:ae:d3:4d:bc:3e:3a:6a:
03:75:68:3b:36:a9:a2:8b:be:4c:28:91:05:af:f3:
71:6a:a1:69:cc:78:d6:87:4e:47:c2:64:af:7d:d6:
af:c5:89:20:21:da:cd:6e:5f:01:cc:80:c7:fd:4f:
11:08:bf:2d:89:35:07:de:19:27:71:5d:7e:ba:bd:
50:a2:55:60:a5:b8:14:1e:71:f0:db:09:1f:7e:16:
89:f3:2a:b3:a5:85:a6:d1:61:64:6a:de:1e:81:49:
22:27:5b:88:03:65:89:65:6b:31:bb:85:b1:ef:00:
a6:b4:8e:db:cc:b7:44:46:a5:64:ff:01:0c:da:0a:
04:28:09:19:3c:5a:2c:66:f7:de:5f:19:7c:f5:d5:
37:ed:21:f2:d8:a0:88:c7:8e:1d:68:04:85:bf:2a:
4f:83:52:83:28:91:79:ce:7c:4b:7a:75:2d:77:08:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:4D:8E:21:EC:C5:1B:A8:1F:EA:FD:F4:F1:D5:87:4B:6B:B4:0A
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:fa:ff:dd:c5:5e:a9:8d:85:4b:66:5b:85:e8:65:02:4c:
47:78:88:6b:c0:75:d2:c3:a1:48:2e:b7:ff:2b:49:25:a7:94:
18:e3:f4:88:da:04:bf:93:8d:02:6f:46:08:f7:c4:c5:ab:59:
07:6c:fb:80:31:e7:9c:55:b6:b9:91:f7:92:f1:c2:25:3b:4c:
a0:33:e7:57:0f:64:d4:7f:e3:e4:b8:76:67:fc:d9:93:d0:17:
c2:f1:fe:a6:e1:72:02:b6:cb:1b:6b:b8:b7:f9:78:a4:ad:a8:
47:8a:af:3f:93:4b:fd:8b:94:32:95:23:ee:8d:52:eb:cb:1b:
92:fb:7c:76:06:d6:66:58:b9:18:0a:2e:db:93:13:91:07:ad:
9b:16:d1:98:87:2c:72:a3:ac:2b:fe:3e:0c:6f:f2:dd:8f:49:
1c:81:9c:0b:b7:c9:90:43:fe:b7:a0:e2:7f:18:cc:22:72:c3:
e0:95:65:f1:12:5e:ef:cd:2b:be:22:cd:34:60:22:97:d3:c7:
ee:97:8b:e6:af:53:ae:5f:14:03:d8:67:9d:67:c6:fa:2f:9f:
a0:c4:9e:f3:ec:9a:3e:e8:8d:2b:e0:c3:a9:c8:c7:42:19:d0:
43:7a:49:d9:78:97:7a:17:b7:72:50:af:30:36:d6:23:da:39:
81:84:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:19:10 2026 by rpki-client