Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
File: RDO2ork3CiSzs5vwMBiRnDY1lYw.mft (raw, json)
Hash identifier: JhFovfzCrb+lDZAVhUMl0fyRMe9QtbqpBUn54w3rqjk=
Subject key identifier: 1D:E6:27:6A:92:53:27:5C:E5:1C:92:B0:3E:9B:3A:AE:3A:C7:0C:32
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Certificate issuer: /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial: 01A0D9BB52259BE612BF93F78BBA80E4AA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:07 +0000
Manifest this update: Fri 25 Sep 2026 18:02:07 +0000
Manifest next update: Sat 26 Sep 2026 18:02:07 +0000
Files and hashes: 1: RDO2ork3CiSzs5vwMBiRnDY1lYw.crl (hash: TTSctUH/XtEScTyxYzA15Zculvxy2ev6igxai3vX1H0=)
2: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (hash: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:52:25:9b:e6:12:bf:93:f7:8b:ba:80:e4:aa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Validity
Not Before: Sep 25 18:02:07 2026 GMT
Not After : Sep 26 18:02:07 2026 GMT
Subject: CN=1de6276a9253275ce51c92b03e9b3aae3ac70c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:d6:53:e5:b3:91:20:2e:42:fd:92:6c:e5:
42:d6:b7:ed:ad:f8:a1:96:b6:d1:0c:83:15:82:df:
b5:eb:db:01:db:34:31:0d:e8:ea:87:c1:35:5c:3a:
1b:1a:65:b2:91:6e:08:a4:57:aa:f1:e9:04:90:65:
57:1a:a2:24:1e:ed:3d:67:88:4a:ca:fc:0f:24:26:
33:ba:0b:f1:e2:23:ca:60:fa:ee:36:d5:f3:18:73:
ec:41:77:7f:11:11:da:e4:9d:0f:98:07:78:5f:05:
95:b5:9e:6c:f6:1a:c8:fb:f2:a6:c6:33:ae:8d:f7:
a5:f6:64:92:c1:2b:95:63:78:db:c2:1d:1b:f3:50:
a0:52:95:35:3d:45:e9:da:b4:b9:c1:ff:83:db:3e:
62:2b:b8:a0:a6:2f:d6:02:b6:30:ae:80:a1:9a:8d:
99:52:1c:9a:9c:a8:0e:d5:23:1d:b4:ec:d7:7e:c3:
31:02:50:00:00:23:c2:52:96:9f:9b:32:43:fd:5f:
b0:bf:71:4b:27:c3:67:38:e0:6a:63:f0:08:39:61:
32:70:69:af:c8:24:ed:18:6d:a1:13:c4:92:43:a6:
38:2c:3e:9b:e1:9f:9f:69:dc:59:45:60:8a:bf:38:
e9:5e:00:1b:85:b8:94:04:40:73:9c:b2:7e:bf:63:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:27:6A:92:53:27:5C:E5:1C:92:B0:3E:9B:3A:AE:3A:C7:0C:32
X509v3 Authority Key Identifier:
keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:74:22:85:19:54:45:d7:1c:a3:d9:cc:78:0f:11:dd:3c:
34:28:ef:1e:b2:9e:a7:37:34:29:05:2d:b5:13:f2:09:98:32:
47:0c:ae:f5:bc:c4:90:04:11:87:c6:18:51:c9:70:9a:32:78:
b5:9e:b4:29:ac:2b:fb:9c:f9:87:bb:ec:74:ab:63:4f:84:81:
22:aa:cf:5d:7a:ad:1f:e4:a3:5e:d7:64:00:d3:64:53:8f:a1:
8f:8d:5f:fd:b7:c0:bd:25:20:38:13:6c:09:b3:eb:04:59:c7:
e2:75:ae:86:1c:67:e6:dc:76:70:f1:d6:50:e9:c3:14:56:02:
c4:33:ef:a4:15:27:dc:ab:ef:19:77:d6:65:14:b7:cf:a1:fe:
6c:07:7f:55:cb:f4:4f:6d:a8:b8:6d:ac:6a:e5:71:b2:ba:a7:
cf:d4:b5:27:b7:74:9c:9f:41:eb:7a:f6:f3:f7:e5:f5:26:a1:
d6:fd:c2:5d:a2:48:fb:f1:a2:93:a5:b5:0e:a9:6e:da:0e:1c:
ca:80:cf:37:1d:3f:2a:6a:dd:f1:71:cf:d4:63:17:b2:73:32:
e7:8e:d9:cc:ae:0c:92:63:03:ba:21:db:3d:a6:ad:84:de:26:
b8:87:fc:68:aa:ab:91:e4:b5:10:59:82:b2:ae:37:33:dc:61:
90:41:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:09:36 2026 by rpki-client