Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: cl8gcogGHWxrOwjgioagFEBpQ3Lc18w4rzYcgsHj7yk=
Subject key identifier: A7:38:D3:DE:44:60:2C:AC:F2:65:C8:F5:C2:B5:86:D5:E5:87:41:3D
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 01A0C9D9673D6880C422F78A964061B045DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0FF2
Signing time: Tue 22 Sep 2026 16:01:03 +0000
Manifest this update: Tue 22 Sep 2026 16:01:03 +0000
Manifest next update: Wed 23 Sep 2026 16:01:03 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: 6kf5R6gWyNGrwJQ1k5GRh0/gMfHWbmgtAtCBTd7BfIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:67:3d:68:80:c4:22:f7:8a:96:40:61:b0:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Sep 22 16:01:03 2026 GMT
Not After : Sep 23 16:01:03 2026 GMT
Subject: CN=a738d3de44602cacf265c8f5c2b586d5e587413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:c6:92:fa:e6:e2:26:13:46:38:39:f5:c8:
16:9d:a3:60:45:3f:7b:dc:91:4d:46:24:27:8a:f3:
2b:57:9a:af:68:52:0b:62:4b:51:92:6a:d1:61:20:
70:bf:dc:aa:35:33:94:0b:f9:ba:1a:25:05:e8:41:
4f:eb:39:f1:8f:63:07:64:86:1a:07:8d:d2:ff:9e:
7e:cf:19:8e:7a:39:b5:f5:83:00:2a:ce:57:f5:f0:
2b:be:45:c9:30:3f:23:a8:32:e2:17:ac:b7:cf:a5:
f2:04:d7:0e:7e:64:e3:58:b3:5b:29:97:e2:20:0d:
fd:1b:d0:f3:fb:0a:58:a4:ac:fa:95:0d:65:95:2e:
d0:34:ae:3f:58:7b:b5:72:75:4a:31:2a:ae:cf:32:
23:7d:23:7b:5e:d0:3a:8f:d4:de:b1:ce:54:70:55:
7c:6e:98:da:cb:dd:dc:54:41:c1:10:14:71:c3:1f:
b7:ed:73:7d:6a:2c:c5:a1:93:1f:1d:30:b4:b5:16:
c7:85:c3:78:33:7b:79:c4:f9:66:e4:81:e4:3b:e1:
01:db:04:1d:8f:1f:e4:46:31:ac:24:d2:5e:db:97:
20:66:8d:ec:27:49:46:ff:2e:3e:2b:5b:66:98:16:
3b:f3:f5:c4:30:71:44:79:67:e3:e8:24:77:35:70:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:D3:DE:44:60:2C:AC:F2:65:C8:F5:C2:B5:86:D5:E5:87:41:3D
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:8a:ee:ec:84:7b:34:c7:62:89:45:b7:37:9e:d5:49:32:
4a:6e:a2:74:fb:52:43:44:54:dc:e4:9f:00:e8:ff:b5:27:0b:
97:c6:45:09:12:4e:9a:83:e0:bf:8e:39:0a:fe:42:12:9f:19:
7a:a1:dd:4c:11:c6:60:24:72:83:88:41:e3:a1:6a:57:67:36:
86:47:b4:20:21:f1:e1:e2:4a:fe:9c:0e:0c:8e:90:21:71:82:
d9:28:a7:f0:c8:69:67:53:c4:0f:1a:87:76:4a:68:70:c4:98:
08:60:38:8a:d5:d2:32:cf:e8:02:19:7a:22:0d:17:af:84:c6:
3b:4e:61:4d:8a:4a:b1:5b:3b:6e:6d:e9:f5:5c:c0:ad:b1:b5:
eb:b7:f5:f0:d6:ad:c8:a3:52:c6:7a:90:96:26:c1:d3:9b:58:
10:f2:a0:27:9c:0d:8a:8d:65:36:7a:64:b9:fa:dd:73:71:77:
f8:8e:36:32:a9:cd:6e:57:38:d6:91:ab:59:6c:8f:22:12:e8:
60:88:b8:2f:6b:45:53:49:89:b9:9f:9e:7f:5e:d1:82:e7:f2:
65:15:59:73:af:21:b0:53:93:b7:f0:20:d1:1a:3e:1b:5a:6f:
10:aa:f8:17:cf:66:f4:0a:10:1e:07:1a:69:17:8a:89:4e:8f:
a7:e0:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:23 2026 by rpki-client