Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: MUygEYElD9xpPrcnFr5uX7TT0FIWzWz6lvEWcbc6Erg=
Subject key identifier: 48:EE:C2:E3:C7:E3:C5:6D:86:1B:14:72:22:26:CA:ED:E9:D2:0B:E7
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 01A104DC215EB95806F2E46EB187CEC740B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 0627
Signing time: Sun 04 Oct 2026 03:01:37 +0000
Manifest this update: Sun 04 Oct 2026 03:01:37 +0000
Manifest next update: Mon 05 Oct 2026 03:01:37 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: MlasvNCEJE9C/pKkNwxzsVoi7nZaYiTN4UC6MGEw2w0=)
2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:21:5e:b9:58:06:f2:e4:6e:b1:87:ce:c7:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Oct 4 03:01:37 2026 GMT
Not After : Oct 5 03:01:37 2026 GMT
Subject: CN=48eec2e3c7e3c56d861b14722226caede9d20be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:0e:f0:03:18:f7:fb:81:8b:2a:e0:2a:50:
7d:7b:f9:45:63:99:d8:09:f3:4d:df:07:bd:c2:ad:
85:55:95:a6:09:8b:4b:b0:04:98:08:56:e5:15:b6:
66:3e:ec:ab:08:50:2f:59:70:82:6b:a6:8b:f3:cd:
d5:b3:cd:99:8b:4f:c0:a6:4e:f8:89:93:c8:19:d7:
46:b8:94:a4:79:4f:81:9d:6b:a0:15:6c:13:70:54:
14:1a:16:79:10:89:7d:80:1b:84:84:26:4f:29:4b:
5c:7e:2c:6d:eb:6b:ef:78:14:46:50:9e:7c:5b:93:
c8:eb:76:0d:49:7d:c8:fe:39:87:40:ba:f8:00:bf:
ed:28:d7:22:7f:c7:eb:b9:68:c6:22:7e:3b:80:31:
7f:d6:67:7d:c1:cb:3b:83:a8:56:27:e7:ab:de:88:
5e:a0:6d:3a:e3:1d:b5:0a:02:9f:2c:d7:22:8b:9e:
ce:bd:a2:57:b1:81:fe:1b:c7:a0:59:87:f3:c0:00:
92:e7:83:74:cb:3c:80:8f:d5:92:3b:a5:91:db:f9:
da:e6:73:f3:06:d2:bd:ab:a5:cc:89:08:be:76:5b:
34:fd:5a:72:fb:98:70:ec:88:8f:66:e9:37:0a:b5:
69:7d:cb:fe:60:77:1b:5e:fb:43:6b:58:de:95:43:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EE:C2:E3:C7:E3:C5:6D:86:1B:14:72:22:26:CA:ED:E9:D2:0B:E7
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9d:14:84:51:2a:44:00:2b:6e:68:4c:42:aa:be:1a:d2:d0:
7f:3a:eb:4e:22:b8:9f:03:8f:c7:0c:ae:a3:19:f1:f1:a2:c2:
d1:8f:5d:9a:cc:87:44:a5:32:4f:2e:a6:09:cd:ff:9b:e7:ea:
0d:de:b6:a8:67:7f:6e:66:89:0d:fe:37:bc:27:e2:44:a6:c2:
e4:29:6e:18:10:14:3f:29:99:b4:a8:dd:f7:6e:f6:75:75:1d:
e7:4e:fd:77:cc:40:00:15:78:67:24:05:ab:2e:c3:d7:d0:36:
4f:f7:86:57:7d:3a:b9:26:21:1f:4b:2d:35:be:c1:89:55:bf:
93:4b:8e:85:0a:e8:ef:ac:7c:c0:bb:1e:d0:62:cf:a6:3c:b4:
b9:8d:42:5a:45:f0:c4:1b:62:69:5e:06:93:aa:14:95:98:65:
58:58:e7:35:00:a6:0a:b2:4a:69:79:0c:a4:b7:41:71:fa:95:
67:52:ac:66:0a:57:5a:51:e9:fe:e9:c6:41:28:9b:d3:50:5f:
82:56:52:47:5d:de:75:01:6b:47:8b:88:6f:3a:39:57:78:35:
bd:7c:31:82:21:92:1f:e6:1b:05:df:f8:60:26:0b:27:fc:53:
27:56:70:be:1a:a2:ae:6b:68:45:95:01:ad:c0:b3:ea:16:7c:
a5:23:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:52:39 2026 by rpki-client