Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: um8aYuO8iD/Ioa0ceuuaQPLJhKbE4Xg3+shEFRG4STg=
Subject key identifier: 8E:7D:EF:9C:31:08:B2:11:03:CD:38:26:C1:5C:E8:C3:73:28:6B:61
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 01A0DBAA29C1623DA09318F6230BC2374518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 08B6
Signing time: Sat 26 Sep 2026 03:02:37 +0000
Manifest this update: Sat 26 Sep 2026 03:02:37 +0000
Manifest next update: Sun 27 Sep 2026 03:02:37 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: mTiWRFdJUwUzUNw4gWxVlBAapAEIsIH828bICwVICtc=)
2: Of6AglNJHlgcluYUlIjfioWiCKI.roa (hash: sDgKEq0ut0vUDDCpX/3A3ZadxIlIok7qphOucEB2uLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:29:c1:62:3d:a0:93:18:f6:23:0b:c2:37:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Sep 26 03:02:37 2026 GMT
Not After : Sep 27 03:02:37 2026 GMT
Subject: CN=8e7def9c3108b21103cd3826c15ce8c373286b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:8e:c4:5c:2c:ab:41:95:45:98:02:c9:7d:
b6:3b:5c:90:75:50:60:89:97:36:50:96:fb:17:75:
18:8b:ff:31:25:fc:3b:ae:46:7e:6e:0f:32:e1:06:
ae:67:54:9b:8a:d4:54:84:03:98:4e:f7:b1:48:46:
b7:55:c7:c6:e1:0d:50:9e:59:46:88:39:1b:91:c1:
29:15:e6:2f:39:b4:24:0e:39:17:27:e7:ce:72:56:
3f:c0:6d:0b:f7:9d:e1:bb:32:56:72:f4:f1:d6:2d:
75:03:48:8a:92:65:70:55:98:40:91:f4:2f:5c:68:
cd:62:ab:84:3a:14:9a:4c:08:6a:a1:1a:a3:49:5e:
0a:ce:8f:b0:74:39:e4:fe:2d:97:d8:d8:9c:d8:42:
cc:8c:32:d1:62:30:c2:92:52:cb:2f:f1:15:49:4d:
6e:e1:78:84:ac:e2:1b:cf:8e:ab:1a:e0:2d:76:42:
55:02:5b:38:22:bd:71:0c:21:18:dd:df:48:e6:36:
3c:bd:28:cf:03:c2:fd:8f:99:8b:5d:f4:f7:db:a0:
b0:fb:50:a4:e2:f3:6b:5a:12:13:4f:74:fe:8d:31:
15:f2:d6:ad:d5:4a:59:10:c8:a6:90:43:94:9a:4c:
56:b5:e1:b8:b1:70:79:e5:39:d3:35:04:78:28:f6:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:EF:9C:31:08:B2:11:03:CD:38:26:C1:5C:E8:C3:73:28:6B:61
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:6c:69:f4:b9:ec:a9:09:9e:17:ed:92:6c:ce:a1:24:78:
a8:24:7d:f2:e1:9f:2c:a6:6a:43:07:bc:d1:b5:24:b8:db:03:
49:26:20:14:03:42:c0:68:d1:4a:04:3e:c6:98:44:7a:95:d4:
4a:34:ac:27:71:72:db:28:ae:82:49:77:7d:4c:63:ca:8d:a4:
3b:47:c1:f4:ee:b6:99:61:c4:77:85:2f:2e:74:84:90:1b:20:
9b:c8:2a:12:46:ca:d2:55:dc:c3:78:33:9f:ed:5a:0d:4b:bb:
dd:cd:85:58:62:98:5c:cb:f7:31:93:1d:89:d6:a4:ca:25:d1:
be:df:35:52:35:5e:5a:67:83:9a:b8:fe:35:72:fa:a8:b4:b9:
70:aa:00:72:ab:2f:a2:bc:02:5c:d8:8d:46:50:bf:41:d4:c4:
ce:c8:88:2c:cd:74:36:48:69:d2:e6:4a:75:63:30:62:62:58:
d4:e4:96:35:66:22:71:69:d8:b8:f3:50:d9:be:25:fb:c4:da:
b0:d1:7e:1b:ae:a5:17:67:97:42:09:ed:0e:3e:38:cf:87:52:
19:29:6e:74:07:7b:9a:4e:11:6b:4d:01:c5:e3:52:10:c2:24:
b8:00:3e:ad:de:bb:30:b5:71:60:35:17:d7:80:b6:53:48:78:
0c:dc:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:21 2026 by rpki-client