Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
File: 352lG6cnhKBORBIPne1HhWd5TBs.mft (raw, json)
Hash identifier: VGG6GAXBvCEj5QB87/pNznfUdxZLfAzaR/R5QhXCgbg=
Subject key identifier: 80:33:D4:13:67:1E:0B:56:E7:98:84:B7:C3:E7:B5:8A:D1:7B:DA:77
Authority key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Certificate issuer: /CN=df9da51ba72784a04e44120f9ded478567794c1b
Certificate serial: 01A0CFA413FC7D94B2A4EF3AE41F9BD28E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
Manifest number: 0E56
Signing time: Wed 23 Sep 2026 19:00:31 +0000
Manifest this update: Wed 23 Sep 2026 19:00:31 +0000
Manifest next update: Thu 24 Sep 2026 19:00:31 +0000
Files and hashes: 1: 352lG6cnhKBORBIPne1HhWd5TBs.crl (hash: nskjrVhKnFLMsKGr/e2Uf40AyZB9k49GsJyRVIO4Kpk=)
2: Ru9KC4nvRUDF4bBAaW6tgqG-Wu8.roa (hash: sRTsiBo1pOMtAFb9I92ULrCBl10f1Og0CuUrBuyqSS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:13:fc:7d:94:b2:a4:ef:3a:e4:1f:9b:d2:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9da51ba72784a04e44120f9ded478567794c1b
Validity
Not Before: Sep 23 19:00:31 2026 GMT
Not After : Sep 24 19:00:31 2026 GMT
Subject: CN=8033d413671e0b56e79884b7c3e7b58ad17bda77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:15:88:69:89:bd:28:14:ad:a7:c6:d6:4e:
93:72:95:0a:29:9e:c4:ab:35:05:62:70:b4:a4:5e:
e1:7e:9a:ab:2c:43:c1:6f:ff:87:a5:6c:82:5e:df:
85:e0:09:bf:40:1b:38:bc:34:89:4a:8e:bf:2f:25:
24:77:f6:65:ca:30:f7:a1:71:9c:e3:e7:c5:15:70:
71:f3:52:49:a2:07:56:38:86:e4:34:96:d5:3c:01:
76:f4:fe:19:9a:ae:9b:31:ac:09:74:d3:9c:84:2c:
fe:e3:d3:75:ce:1f:e8:71:70:94:41:3b:dd:77:db:
29:d8:b1:a2:6e:33:47:aa:c1:dd:cf:f8:5d:55:a8:
e1:b5:ef:1e:b4:98:17:0c:fb:a5:20:ad:73:cb:2a:
c1:5f:31:a5:bc:99:e2:c5:64:ea:17:8b:1a:ef:92:
50:e2:8b:dc:22:c7:8b:b2:d1:36:94:2f:14:32:ad:
bc:39:c0:d3:39:1d:96:a1:78:99:04:6e:2b:29:9e:
df:21:8f:fa:aa:a9:05:fb:25:9a:5d:01:fe:88:e9:
59:10:1e:61:74:34:c7:cd:7a:33:ce:81:7d:c4:31:
a8:36:eb:d8:0e:eb:e3:0a:9a:24:29:c1:a2:ee:87:
76:e4:c9:f1:52:fa:92:84:b9:e4:68:20:e2:5e:8f:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:D4:13:67:1E:0B:56:E7:98:84:B7:C3:E7:B5:8A:D1:7B:DA:77
X509v3 Authority Key Identifier:
keyid:DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:86:9b:de:15:3e:28:64:6b:56:71:df:5c:91:a1:96:81:80:
87:72:ca:ff:43:44:bc:48:35:55:09:42:e5:b1:fb:4e:7e:6e:
18:69:d1:c1:43:7c:4a:24:e5:47:0e:d7:17:b7:fa:3e:f1:77:
b5:83:f6:5e:3f:f0:d5:df:43:02:53:14:81:09:4f:b7:67:1a:
50:5c:62:09:ae:77:85:02:09:db:63:33:94:14:11:a6:c1:ec:
4e:c4:3e:3d:98:90:f2:e2:3c:fc:bb:3b:33:f5:88:ee:e9:f3:
68:81:91:2d:72:7f:eb:fc:33:1a:a7:c9:0d:93:df:32:04:9f:
ca:c8:12:6d:a8:d0:17:2b:aa:de:59:d5:08:3e:57:78:6f:5c:
b0:5d:6e:2d:9a:4d:59:23:9c:82:b5:74:3a:22:dc:40:ce:39:
d7:ce:d9:a3:b8:06:6d:a6:81:56:5e:fe:f0:1f:3b:c6:c8:4f:
20:7d:35:cd:49:59:89:7e:1e:7c:77:3c:92:4b:54:d9:12:59:
91:a3:65:f1:6e:cf:70:e3:6e:29:f4:9a:ba:7b:25:8c:99:b0:
4f:10:59:a2:3c:43:75:e8:97:f3:0e:5a:1a:06:3c:02:05:de:
f7:e8:37:78:80:21:49:1a:eb:6e:6b:14:a6:92:5f:94:57:6d:
4e:0a:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:23 2026 by rpki-client