Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: sK88OcpQuFXSGd6ucdqRAw3tvQd6Lh+c0r+j8rZD+Hs=
Subject key identifier: D9:64:23:E3:91:C2:01:9F:0F:35:98:29:9E:4C:2A:12:66:1A:92:54
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 01A0D3156A9DDCD4D0CB6FAF4D5F5D24DFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 02BD
Signing time: Thu 24 Sep 2026 11:03:11 +0000
Manifest this update: Thu 24 Sep 2026 11:03:11 +0000
Manifest next update: Fri 25 Sep 2026 11:03:11 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: RBrkFfoi4wTeFahH5rcQXdj6Mp2pCD/GpdyQMrwT+OM=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:6a:9d:dc:d4:d0:cb:6f:af:4d:5f:5d:24:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Sep 24 11:03:11 2026 GMT
Not After : Sep 25 11:03:11 2026 GMT
Subject: CN=d96423e391c2019f0f3598299e4c2a12661a9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:f0:74:4d:52:2c:58:2e:bb:87:6e:85:b0:
65:fd:c4:1a:2f:96:21:ce:46:07:be:18:f3:3a:50:
ef:d6:ee:3f:e0:cb:89:5d:0b:ed:b5:12:39:7e:34:
7f:62:fc:e1:8d:a2:6b:af:6b:7b:d3:26:99:57:1c:
13:c4:82:39:79:3c:5e:e3:3a:7a:3e:f1:a9:9b:a8:
99:14:db:78:8e:2e:92:8b:82:14:8a:21:08:6c:40:
b9:51:e6:6b:80:b3:1a:84:ec:7e:18:3b:5b:55:b1:
fc:00:96:ce:0c:cc:94:82:be:60:f5:94:e3:17:09:
4e:7c:70:e2:83:e2:83:2c:de:20:e4:08:b2:2f:59:
70:a4:40:df:69:54:0d:21:66:cd:d9:d4:b9:04:48:
bc:51:4a:87:21:df:94:f5:9c:13:c6:ea:da:1e:8b:
94:38:9f:bc:8b:0f:1b:1c:5d:a7:a9:21:16:44:f3:
5d:57:84:ab:d9:86:8f:be:af:b7:17:31:af:3f:9d:
2b:96:f0:77:09:cf:35:d4:30:e1:c4:02:39:38:17:
f0:a4:9f:77:c7:68:f9:e0:29:65:34:4f:1e:8d:22:
cc:12:32:bd:f8:ad:23:4f:14:26:8e:b0:08:93:01:
af:e5:97:5d:33:18:e7:cc:ce:a9:fb:46:60:3f:92:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:23:E3:91:C2:01:9F:0F:35:98:29:9E:4C:2A:12:66:1A:92:54
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:46:1d:66:2a:9d:9e:44:0a:23:54:63:09:da:8c:ea:ea:27:
0d:a7:8b:ee:87:bb:de:b1:84:66:eb:ff:e7:6a:29:c4:1d:33:
31:97:64:e3:c8:8a:14:07:63:18:16:25:58:93:08:63:b8:e0:
0f:e0:78:6d:06:6b:f2:54:f1:62:b7:f6:4f:bf:dd:29:f2:13:
cf:e4:57:65:7b:41:1c:d5:1c:d5:26:e1:08:91:5b:6d:0c:55:
df:2d:42:fa:2c:2d:bb:26:41:9c:4a:ac:b3:da:45:a5:63:22:
35:14:b5:05:eb:c7:43:b4:3a:6f:92:87:4c:36:21:59:db:9e:
0d:96:26:42:6d:58:0d:02:b6:9b:0f:3b:c9:35:e9:24:9e:e7:
07:b0:42:51:9f:9f:21:dc:fa:fe:9f:b1:80:97:66:71:35:6f:
ab:2c:36:b7:08:90:1b:da:2b:a4:09:5c:5d:1f:fb:ee:62:ba:
e7:30:14:c3:34:4e:70:e6:96:dc:28:3f:4e:8a:5b:81:c6:1e:
29:e6:b7:3b:0d:9c:97:62:b2:68:17:1f:c1:94:30:1f:d9:2f:
83:87:e6:5d:c8:66:09:31:b4:fc:a1:37:b8:27:fd:fa:1c:8e:
2a:11:5b:8c:8c:05:67:b9:64:da:ce:bf:b9:1c:c9:86:2c:e4:
0c:c5:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:25:33 2026 by rpki-client