Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: Okd8HEhHfanbNFlkYk3fuDG6hNFKSWJmmZAEhAY5mcc=
Subject key identifier: 48:4A:E4:30:F3:ED:60:36:D2:DB:6E:65:C5:FE:26:FB:F4:85:27:4D
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01A0D7CD33B2DFD398D8C43FED51FBB30550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0D9D
Signing time: Fri 25 Sep 2026 09:02:24 +0000
Manifest this update: Fri 25 Sep 2026 09:02:24 +0000
Manifest next update: Sat 26 Sep 2026 09:02:24 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: +TaWnv5uMKHdNJz9hzDKMp8e97yERSprEOZ667fgeLs=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:33:b2:df:d3:98:d8:c4:3f:ed:51:fb:b3:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Sep 25 09:02:24 2026 GMT
Not After : Sep 26 09:02:24 2026 GMT
Subject: CN=484ae430f3ed6036d2db6e65c5fe26fbf485274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:87:94:48:09:f1:35:84:d2:17:4b:d4:f7:
d9:03:5d:d7:77:a9:b5:d6:b0:23:e1:cb:48:2b:14:
4a:0a:c0:7e:99:38:ec:ef:12:6c:90:75:53:04:f1:
9d:4b:87:55:66:96:13:19:0d:df:21:cd:dc:ae:a5:
d0:5a:31:16:0e:c4:df:e6:6f:be:a0:8c:8b:65:be:
7c:02:c8:97:4c:6a:55:cd:9b:4d:49:53:7b:c8:c7:
0b:fe:99:14:84:d2:12:44:9d:08:d1:d6:56:51:dd:
dd:99:0e:ff:55:3d:66:7d:d1:b8:4e:29:92:4a:50:
46:eb:7c:76:cf:77:9b:06:b9:bc:48:2d:4e:ee:73:
13:94:b7:23:ac:46:5d:0a:1e:70:d5:0f:d1:f8:66:
60:c8:08:6a:7d:80:f6:ea:c0:d1:b0:a2:a1:4e:3d:
36:7f:38:29:b0:e0:59:ae:94:57:c7:99:4c:a6:d0:
97:c7:df:08:7d:2e:9c:cc:82:73:f3:af:a8:df:42:
8e:12:7f:2e:eb:4a:a5:ac:66:8e:cb:10:a3:02:55:
23:68:e0:cb:fa:6b:05:c6:58:70:36:13:0e:31:ab:
bc:9b:3c:26:5d:fb:c2:d1:45:f8:22:9c:62:b9:50:
5e:73:6a:bc:70:a6:9f:79:fd:9a:8d:ee:9f:76:ff:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:E4:30:F3:ED:60:36:D2:DB:6E:65:C5:FE:26:FB:F4:85:27:4D
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:24:87:55:2f:65:16:ca:6c:66:4c:ba:cb:de:47:26:ba:
52:8c:2c:c1:90:70:e5:34:23:35:30:97:86:5c:e6:6b:ce:8f:
b2:ca:c3:ca:d1:fd:3d:03:30:00:a1:a5:9d:8d:ac:e2:42:94:
53:16:1f:04:8b:d1:88:91:6f:53:d5:0c:ea:bc:ef:5f:15:c7:
9b:10:3e:be:bc:ca:ff:e9:8d:50:48:5e:54:79:44:9c:a0:49:
ae:4b:f0:ac:f1:85:48:c8:75:52:54:c5:5b:c6:50:6d:f2:79:
77:61:99:de:fc:97:ab:b1:3f:26:dc:72:c8:77:c2:75:b1:e5:
1d:ba:be:35:84:d4:bd:80:44:55:0f:dc:13:88:8b:70:be:b4:
e0:42:71:4e:b4:c1:72:ff:7f:db:72:a1:67:b5:75:3f:77:8a:
d3:58:e1:20:fd:8d:9d:fa:6b:42:b8:8a:9c:61:3c:90:0b:40:
ca:d8:1a:80:c7:80:fc:43:81:e3:dc:78:ad:c4:1b:fb:f2:54:
78:ef:7d:aa:39:a2:5e:0c:dc:14:1e:11:94:f9:b6:ef:8e:e2:
54:7f:7c:7f:90:05:84:e5:a4:32:8a:91:12:10:83:4a:6e:04:
03:d9:cc:13:30:1b:43:74:c1:3e:fe:f0:73:98:6a:0c:cd:db:
19:ee:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:39:40 2026 by rpki-client