Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: SxZuHsdAjlEeHBKduX8YjZhky9hYvKfXRXzbnU5JN88=
Subject key identifier: 0F:7C:D9:A8:EF:D5:B0:2E:32:23:61:91:AA:44:B6:C6:77:FD:17:80
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 01A0CF3618E1F27AD318FE5348C41616C5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 0243
Signing time: Wed 23 Sep 2026 17:00:23 +0000
Manifest this update: Wed 23 Sep 2026 17:00:23 +0000
Manifest next update: Thu 24 Sep 2026 17:00:23 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: ex/goDdF4bkR/QcFlniyrJ1OmRamfqPSjG3gNSBsKlc=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:18:e1:f2:7a:d3:18:fe:53:48:c4:16:16:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Sep 23 17:00:23 2026 GMT
Not After : Sep 24 17:00:23 2026 GMT
Subject: CN=0f7cd9a8efd5b02e32236191aa44b6c677fd1780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:7f:86:98:33:62:18:0a:ff:43:af:00:9d:
08:34:79:c1:69:48:0d:fb:e2:08:7f:4a:8c:ad:f1:
bc:2e:f7:99:e0:64:d3:79:fc:7b:97:a0:49:ec:1c:
84:7e:0f:12:e7:ef:29:cf:e5:02:c7:ad:aa:c6:8c:
7e:71:db:37:84:d8:74:e2:a4:c2:63:83:f8:68:ec:
df:2d:cc:be:4b:2b:26:18:2b:5c:e0:23:3e:58:b3:
bb:cc:ab:e1:ef:d5:63:aa:9e:6d:c4:fd:75:e7:77:
03:55:00:7f:2c:d9:8b:9e:af:59:59:3a:b6:ae:53:
9e:49:5e:82:a1:a4:c3:1e:d6:2d:72:31:78:71:3d:
5e:e4:58:70:34:bf:c5:2b:a5:d3:1f:f4:59:8c:6a:
71:4c:ee:de:f9:79:c6:c6:0e:23:58:4d:6a:b5:d6:
5c:33:69:30:8d:25:7f:4c:d6:fd:54:d0:6d:48:32:
9d:aa:1a:96:8b:25:2e:31:0b:b5:3e:55:b3:d4:fb:
7d:53:d9:f8:81:fe:24:9a:8c:c8:c4:c8:26:98:18:
78:34:57:ec:9c:c2:d9:eb:7a:03:d7:35:e9:9d:e2:
94:13:29:c0:c6:3c:d9:e5:d2:8b:29:62:12:5a:21:
b9:d0:1c:29:9c:2f:76:3d:64:37:c9:61:71:ac:b9:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:D9:A8:EF:D5:B0:2E:32:23:61:91:AA:44:B6:C6:77:FD:17:80
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e8:dc:28:ee:29:09:cd:5b:42:98:5f:5c:0f:05:56:f7:19:
ea:91:53:e9:b2:c5:95:38:26:c5:f7:9d:c7:ec:87:b7:21:d8:
46:61:55:b7:28:a4:ff:d8:05:51:d3:4f:0d:a3:4a:e9:7c:88:
99:e1:57:1e:94:39:0a:c6:76:8f:6c:8a:3a:15:01:d2:24:3b:
13:73:e5:1d:7a:60:11:1d:ab:1b:31:e5:fb:a9:62:62:47:02:
4a:f6:30:66:a1:c0:4c:79:2a:16:e1:be:f2:c3:0b:c5:c7:40:
f7:4e:aa:42:0b:7f:9e:93:35:6a:a8:09:fd:85:84:c7:41:a8:
36:f4:29:8d:b9:47:31:48:db:75:67:91:51:97:fc:c5:d2:64:
79:b5:3c:52:9f:68:2d:36:d4:f1:9f:81:fe:e4:73:a8:15:db:
c5:9a:97:cd:17:d2:2e:0d:e3:fd:1d:c6:57:3e:c7:f7:38:38:
e6:e0:19:38:75:4f:e5:1a:da:30:33:22:f5:11:0a:2a:5c:ad:
c6:ed:b0:b9:12:ed:e3:d5:d2:8b:c1:bb:b0:bb:27:44:71:97:
78:0a:d9:23:95:fc:2c:f4:0a:8b:23:cc:37:cb:24:db:f2:d6:
0d:f6:7e:f7:4f:85:15:e8:d0:35:08:8b:bd:20:8e:d7:28:12:
99:cd:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:00 2026 by rpki-client