Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: KuRQCIKZohpU8RK9n9X9ngTHZ5fWsxoysz0QHTz7kdQ=
Subject key identifier: 39:F0:C9:16:50:67:FD:65:C9:F5:44:D3:F4:47:01:78:DC:E7:C1:43
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 01A0DC1757B0A06D7E9A1452F9A3672EAF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 1155
Signing time: Sat 26 Sep 2026 05:01:52 +0000
Manifest this update: Sat 26 Sep 2026 05:01:52 +0000
Manifest next update: Sun 27 Sep 2026 05:01:52 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: DNHszdxZBkUxzWgTrm5z2vzvh40tTgLSZfkmyQ+FF1g=)
2: mXvHGytm_d-ZmmjoABMVc3yVsds.roa (hash: yE1KIjBpAWB8h1LtfkwyNXpw6sG5nRfdWFiNpWMDlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:57:b0:a0:6d:7e:9a:14:52:f9:a3:67:2e:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: Sep 26 05:01:52 2026 GMT
Not After : Sep 27 05:01:52 2026 GMT
Subject: CN=39f0c9165067fd65c9f544d3f4470178dce7c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:55:a1:10:e2:87:66:99:46:e8:f3:1e:4d:
a6:40:c7:1d:f5:1f:95:1a:95:d5:d4:85:91:1b:32:
08:51:37:63:a5:36:b0:a8:45:e1:78:69:88:ab:16:
99:11:7c:b2:e3:85:8a:48:3a:0d:bb:2a:a5:4c:3c:
14:04:2c:79:2a:f3:f9:c2:a3:ad:dd:f3:f2:40:28:
1f:88:8f:98:e4:07:10:85:9c:1d:e7:9e:ed:9d:38:
7c:f1:2c:6e:4d:82:0d:ec:1e:1a:50:85:89:6c:79:
19:da:55:b4:59:d2:2a:9e:64:ab:83:3d:80:05:39:
72:6e:d0:b9:da:ea:f2:d0:21:00:f5:9a:f0:78:2f:
8b:5c:fb:cf:df:c8:74:47:ec:a2:fe:0b:61:b6:c3:
5d:99:57:c0:86:ba:08:86:a6:f0:dc:d4:03:68:fa:
96:96:9e:50:50:a6:e3:fc:2b:43:a9:6f:3e:7b:53:
c6:7b:c6:0f:c3:42:b1:9e:d9:fa:46:09:ef:4a:bb:
29:1b:27:8a:76:42:fc:ce:5a:d9:cc:87:99:17:b5:
82:57:78:eb:b4:5d:e0:db:d0:19:63:9f:44:af:e7:
91:3d:92:b0:e6:e5:7f:7a:de:47:99:a7:53:9c:e3:
fa:7e:96:c3:37:b2:79:64:4e:af:34:be:92:60:55:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:C9:16:50:67:FD:65:C9:F5:44:D3:F4:47:01:78:DC:E7:C1:43
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:25:6a:de:98:a8:17:3a:69:a8:8f:22:b5:1e:71:da:5a:b8:
68:a2:38:53:2c:42:5b:b2:06:16:fa:89:21:6a:0f:cc:56:11:
46:a4:f5:6f:9a:72:6b:18:76:c1:a6:68:9f:1a:10:38:68:1b:
c4:2d:d7:32:f1:19:0c:8d:76:34:04:18:12:a1:00:6d:af:9f:
69:56:92:0a:d7:8c:ee:38:fa:d5:65:29:01:54:4e:b6:52:38:
aa:32:4e:c8:7a:be:12:85:9d:9e:1f:f3:70:fa:9b:79:86:08:
66:df:b3:69:6b:a7:5f:c3:f3:57:72:9b:e5:b5:f1:d6:8f:a0:
62:97:25:10:b4:3e:31:32:5e:ae:65:25:51:15:f5:75:3a:52:
19:ae:49:b6:0c:85:62:5c:fc:fd:6e:f1:b2:ac:c3:c6:45:8a:
06:62:e4:4d:9b:23:dc:16:2a:09:3a:6a:e0:6f:b6:19:eb:28:
56:f8:65:66:3e:7e:a5:e2:bf:5c:3e:c3:cc:bb:88:57:4d:4e:
08:3f:65:03:aa:49:8e:26:8f:a6:77:e0:31:f5:fd:cc:69:12:
e5:89:ed:da:03:24:64:32:b4:ac:4c:15:ce:0a:0e:3b:15:24:
57:51:72:dd:f5:ae:32:96:1b:48:bb:e6:23:a3:d5:99:c3:44:
dd:22:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:50:35 2026 by rpki-client