Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: iZ4EWSmYrPuMXHqXfZfvnGBnIsVgPbcz/PyXxP9rIKk=
Subject key identifier: 95:D9:05:98:11:68:B2:AF:DC:F9:C6:0D:B4:CA:EA:94:14:7E:88:E4
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 01A0E8F6D6B52930F29736A62327D1D9ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0D46
Signing time: Mon 28 Sep 2026 17:01:25 +0000
Manifest this update: Mon 28 Sep 2026 17:01:25 +0000
Manifest next update: Tue 29 Sep 2026 17:01:25 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: T2QgmMLF7JyJpvrGmEy9pXxP72mysp57amTzHi33pSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:d6:b5:29:30:f2:97:36:a6:23:27:d1:d9:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Sep 28 17:01:25 2026 GMT
Not After : Sep 29 17:01:25 2026 GMT
Subject: CN=95d905981168b2afdcf9c60db4caea94147e88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:e9:cc:ee:81:9d:9f:3f:ed:ec:82:ca:23:
e0:76:8a:8f:01:ea:88:a0:21:c5:c7:06:f0:e2:06:
de:70:ff:de:2f:c1:07:ce:7b:3e:c1:01:40:75:e8:
ba:97:13:9c:5c:05:72:ac:2a:43:3e:15:d2:0a:1b:
54:e9:53:75:eb:b4:a8:2d:2b:61:c4:30:85:a0:95:
d0:fa:aa:6f:29:a9:c5:6c:3a:a0:62:28:e4:dd:6e:
65:8c:95:bf:24:fb:05:dd:f1:87:68:0e:15:8b:2c:
89:83:58:bd:63:07:45:b6:42:04:f6:59:ab:3d:f0:
1c:79:40:3b:07:f0:20:89:51:6a:b5:d6:05:f9:38:
5b:c7:a1:ba:e7:ae:27:9d:59:79:1a:bd:3c:4b:d5:
fd:be:5e:63:67:19:d8:f5:02:ad:1d:a4:fe:83:0e:
e3:6b:52:ab:b9:b3:06:b4:27:c2:66:47:42:23:21:
f9:b2:d9:55:eb:ea:01:c8:33:54:4e:ed:91:97:1b:
9b:42:1a:0d:1c:75:1e:d8:95:9a:1d:7b:56:1a:1c:
a3:20:e9:e7:a9:8f:22:98:50:14:35:d3:2e:9a:e4:
59:87:ec:03:98:d7:8e:13:a4:13:db:88:76:77:d1:
f2:7a:a8:24:53:ed:35:c4:96:4b:bc:ed:ba:62:b1:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:05:98:11:68:B2:AF:DC:F9:C6:0D:B4:CA:EA:94:14:7E:88:E4
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:c5:2b:77:cb:fc:39:38:73:7a:2d:32:34:e8:1e:53:a9:
68:5d:4d:8e:9d:1f:f6:64:11:ba:87:0a:ee:9a:bb:1f:fd:10:
cd:4e:5d:49:22:48:ad:ea:f1:78:4b:41:9e:16:ee:3c:d2:d9:
49:a0:de:f9:58:ec:7f:a5:70:47:f4:1d:0c:ec:98:75:cc:e2:
47:93:d7:83:16:d8:01:69:11:5a:51:dc:c9:26:d3:a6:bf:cc:
96:bb:48:80:80:65:f3:d3:c3:e6:70:d6:38:ed:5f:98:6b:36:
5f:7d:cc:11:3b:a5:75:fb:a9:50:52:c5:7b:94:10:d0:23:b9:
4c:ca:99:b9:e8:8e:ca:ae:01:aa:7d:1d:08:b0:9a:52:56:74:
5b:33:c8:d8:8c:e3:a5:a8:a9:dc:95:fe:02:75:c2:0f:90:32:
d3:86:c6:b9:03:4e:d8:37:8d:1c:1c:51:ba:b9:16:7c:32:70:
8a:e6:1d:3d:b8:77:c9:43:1f:07:bf:a9:5e:ad:84:0b:12:04:
be:e7:88:5c:7b:b4:62:7b:be:f9:71:28:6b:4b:c9:f0:b2:ac:
84:ac:07:79:63:6d:5a:45:43:ff:3b:fe:80:aa:ae:17:61:94:
a6:5d:3f:1e:2d:e4:f0:56:90:5a:b8:4b:98:af:46:46:aa:51:
fb:16:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:38:18 2026 by rpki-client