Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
File: 85GH19IXLTZcKckH479vqxZLLE4.mft (raw, json)
Hash identifier: cOIosKmC7RTjstRAzjUmCPBXE7uqSDsLQep6paKvkWA=
Subject key identifier: 24:77:12:35:81:6D:B2:B7:89:81:EB:68:F0:35:02:1E:6A:0B:C3:5B
Authority key identifier: F3:91:87:D7:D2:17:2D:36:5C:29:C9:07:E3:BF:6F:AB:16:4B:2C:4E
Certificate issuer: /CN=f39187d7d2172d365c29c907e3bf6fab164b2c4e
Certificate serial: 01A0D124C7661AADC1B75279C7A7E7806C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
Manifest number: E5
Signing time: Thu 24 Sep 2026 02:00:43 +0000
Manifest this update: Thu 24 Sep 2026 02:00:43 +0000
Manifest next update: Fri 25 Sep 2026 02:00:43 +0000
Files and hashes: 1: 85GH19IXLTZcKckH479vqxZLLE4.crl (hash: XTZJYfOwbeqjKbLComLhAbqdlWwennujLO7S0EVMbKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c7:66:1a:ad:c1:b7:52:79:c7:a7:e7:80:6c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39187d7d2172d365c29c907e3bf6fab164b2c4e
Validity
Not Before: Sep 24 02:00:43 2026 GMT
Not After : Sep 25 02:00:43 2026 GMT
Subject: CN=24771235816db2b78981eb68f035021e6a0bc35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:5a:de:b8:8b:d9:90:a2:51:d7:5c:84:b1:
49:77:75:fd:95:41:37:d7:28:2c:e0:c2:80:c1:bb:
64:96:a1:b3:09:af:39:14:3a:04:f3:5b:d2:0d:1b:
4a:27:ff:68:5f:0b:89:c6:55:5c:10:84:10:f9:da:
f3:10:0f:b0:82:2b:ae:e3:eb:71:e9:09:eb:51:5d:
62:98:a4:fd:e3:52:50:38:2d:62:88:ec:fa:3a:48:
1b:c9:d9:07:a8:e9:35:fd:c7:22:93:c4:5a:02:a1:
83:b9:00:97:fb:59:46:de:df:f5:35:a5:a6:20:ea:
6c:f2:fb:a7:2b:2c:db:84:79:be:3b:89:17:cf:fa:
68:8a:d5:28:35:91:82:5c:90:98:fe:52:3c:68:b7:
06:81:2b:e8:0f:ef:2b:a7:93:33:99:1e:7f:36:1f:
0c:32:d1:7d:dd:ea:f0:96:f9:97:b5:7c:cb:eb:76:
e4:24:1a:c5:e0:8f:44:04:df:03:d8:c8:36:a3:3b:
9b:0d:d4:af:d7:82:7c:6b:dd:19:a8:ad:d9:c4:f4:
8b:ee:5d:47:4c:c7:b6:4c:9d:bb:47:19:1c:27:3d:
6d:7a:0c:32:91:1b:8d:53:c3:13:6f:72:85:6b:e1:
44:5f:ab:22:f4:84:0a:d4:82:10:86:50:30:36:77:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:77:12:35:81:6D:B2:B7:89:81:EB:68:F0:35:02:1E:6A:0B:C3:5B
X509v3 Authority Key Identifier:
keyid:F3:91:87:D7:D2:17:2D:36:5C:29:C9:07:E3:BF:6F:AB:16:4B:2C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:f5:a6:4a:18:df:c8:1c:82:03:a6:6e:db:25:15:28:7e:
f7:35:29:fd:3f:3d:d4:0d:20:9a:7b:70:f4:a1:f8:ac:98:6f:
cf:31:0c:d3:e1:49:6a:1c:c7:22:bf:f8:5f:87:f8:11:19:ad:
cc:cc:69:a6:86:37:ce:b4:58:eb:6f:75:3c:62:51:83:de:2c:
70:2c:9d:b9:3e:83:64:f4:87:1d:a5:4a:40:05:9c:a7:fb:fa:
bd:d8:bc:20:4e:6f:19:3e:26:44:2a:8f:6b:0b:ca:a7:58:45:
41:d4:fd:2c:7d:cf:ae:2c:b5:02:33:53:5e:3a:d6:6f:0f:2e:
7a:4d:e3:a7:88:2c:ff:6a:3e:57:62:a0:46:14:74:8b:1b:f2:
bc:5b:84:86:99:44:52:52:61:f2:c0:ad:4e:f5:cf:98:29:cd:
11:37:94:f0:b8:94:e3:50:d4:13:1c:0f:e1:cb:a2:40:ff:79:
1f:91:14:ac:57:33:61:cb:76:93:bf:62:5a:90:fa:96:fa:b1:
04:71:8e:f7:37:0b:eb:c2:85:05:43:e5:a4:46:be:4e:d8:f6:
e8:bb:46:73:aa:5a:d0:ad:8e:f0:ba:06:64:1c:a5:c8:0d:5f:
b5:b7:45:fa:dd:db:14:2c:75:22:4f:0e:14:57:cf:42:04:28:
37:0f:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:43 2026 by rpki-client