Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: Cr5YA07OmI/gtidyp1dBLOYEAPi8O4tKIHJfyCAdcVU=
Subject key identifier: 19:B2:DB:D1:03:3A:2F:43:83:E1:77:06:D9:81:80:E1:DB:A4:FE:55
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 01A0E2502C7A209060F490BB8A2E0D31FDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 17A2
Signing time: Sun 27 Sep 2026 10:01:40 +0000
Manifest this update: Sun 27 Sep 2026 10:01:40 +0000
Manifest next update: Mon 28 Sep 2026 10:01:40 +0000
Files and hashes: 1: 1-xDJz0e0_7YGYVGjppG3DfxLqZY.roa (hash: zO3O8OjkbPv61bTvqyfOoS0qfvqmSfyg/E3fdlXCnrs=)
2: OVRZqerAEA6FdBHYTHLhizGh3Lk.roa (hash: W21lAIvc4nqkkHrKrS73psgIVNPGbE549XUQirrqwIg=)
3: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: 0Q7lygLeWWOuOsQWnwqKo1EXlfTV76aexvo65pmya2E=)
4: e44guLfP35rbMYmq1et0-pJl0Xg.roa (hash: xefm7hUzpQcUW8PNo6qYp/Qx0pr2/QhPaTWWMRnSDm8=)
5: iDGiu9b2-5gZed1g0VFujNY9Peg.roa (hash: ZId1dGdqtQ2GMpbChYr39bY2N4BezjujTh90i4mM35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:2c:7a:20:90:60:f4:90:bb:8a:2e:0d:31:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Sep 27 10:01:40 2026 GMT
Not After : Sep 28 10:01:40 2026 GMT
Subject: CN=19b2dbd1033a2f4383e17706d98180e1dba4fe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:9e:0d:26:03:c2:6a:ce:ca:27:6b:a6:82:
75:39:cf:32:f6:d8:be:5f:36:a6:60:ff:a1:95:15:
8c:41:8a:79:6a:e7:22:c9:b0:a6:01:6b:82:04:b6:
be:ac:b9:50:81:b8:3e:55:4d:0b:fa:31:5e:3e:5d:
9d:6b:6a:07:93:1f:9e:1d:37:ae:15:18:ca:b3:84:
f5:02:81:1b:4f:85:a3:d3:b9:91:12:9f:a7:62:6c:
bf:67:b5:e7:cd:dc:ff:6a:21:e1:00:75:12:d2:80:
7c:a3:36:90:b3:07:7b:10:7f:18:c2:ea:7a:7d:31:
69:80:76:45:d2:c1:25:77:78:ef:87:9d:b1:c7:40:
33:78:3a:7a:4c:0f:b2:9a:b9:b1:3f:ea:a0:72:a7:
85:33:76:29:69:29:b9:9b:50:66:c9:17:d8:5d:e7:
9e:0a:25:2f:4b:bd:ab:f2:3c:4a:81:b0:f1:cf:48:
e1:9d:89:a8:12:70:ed:b5:5e:48:59:2b:79:bf:66:
ce:4b:26:42:10:28:aa:42:ad:8c:05:d8:99:16:6c:
07:9b:b6:bc:5b:7a:66:5d:7c:74:29:ea:82:f9:bb:
b2:0a:2c:18:20:68:33:b2:ca:99:14:38:c8:4f:d2:
2d:27:57:7d:d3:47:1e:9c:17:84:a3:1f:95:88:d3:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:DB:D1:03:3A:2F:43:83:E1:77:06:D9:81:80:E1:DB:A4:FE:55
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ff:fa:27:f8:0e:d6:66:54:d3:67:72:eb:d0:55:52:b7:e4:
07:d2:b8:26:4e:35:f0:4b:de:35:6b:1e:a0:5a:2d:27:13:f7:
d3:76:bb:a0:b8:66:2f:3b:ff:55:10:8c:de:46:73:6e:76:b1:
ce:6d:71:a2:96:77:1a:05:2f:e7:d1:ee:a8:21:eb:0c:8e:1a:
8c:33:d4:4d:9d:31:65:8e:fa:f0:b5:26:9d:be:04:ef:41:65:
04:6e:af:71:04:f0:4c:0d:5d:1d:b1:4b:6a:ca:0b:b7:62:cd:
1a:5a:dc:9b:92:2e:16:0c:e4:34:81:7c:00:8a:d9:75:ec:0e:
61:1f:90:b5:28:d8:bc:66:52:d0:22:b5:bb:a2:e1:6f:0a:88:
90:29:b2:e7:38:a1:63:c6:41:7e:3d:99:3e:e5:ed:55:f1:bd:
19:67:0a:f4:a9:cc:07:01:45:36:c3:6c:0c:04:21:20:3e:95:
f2:eb:3f:4d:c5:d1:bf:d1:31:ff:1c:0d:33:f7:a5:f7:33:a9:
6f:6b:f7:19:1a:a8:ce:57:a6:65:c7:ae:fa:54:a6:dc:28:67:
32:48:52:5e:89:fd:9d:e7:dd:45:ba:f2:34:ff:6d:d5:74:33:
9d:67:0b:db:99:fe:3a:3a:3a:2f:7b:54:ec:11:3d:ad:69:fd:
9b:24:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:27:28 2026 by rpki-client