Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: e8rAldseGRbBb8STXvQQiVEnpByvCnekmbG5wtK1AdE=
Subject key identifier: 70:C5:19:B9:13:22:9A:AE:4F:C5:B0:5D:69:AF:B0:20:79:1A:BA:D7
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 01A0D20073ECE3FA9A7F59DB9191F9C148DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 06:00:39 +0000
Manifest this update: Thu 24 Sep 2026 06:00:39 +0000
Manifest next update: Fri 25 Sep 2026 06:00:39 +0000
Files and hashes: 1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: cKM7vEvy+VM3s+7cDsZYpBrmm+PnTOs5QWtRYsVAaHs=)
2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:73:ec:e3:fa:9a:7f:59:db:91:91:f9:c1:48:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Sep 24 06:00:39 2026 GMT
Not After : Sep 25 06:00:39 2026 GMT
Subject: CN=70c519b913229aae4fc5b05d69afb020791abad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:36:27:2e:75:5a:83:c2:90:86:4c:7d:66:
25:50:67:af:eb:03:d7:9d:bb:ca:1d:36:65:84:7a:
b1:33:dd:b7:0a:f5:84:8f:56:aa:e3:bd:6b:87:f7:
a4:5a:36:41:89:8a:05:39:cc:91:92:a7:6d:5f:12:
2d:93:2d:dd:91:a1:db:ed:e4:a1:13:0e:10:3d:18:
c3:58:9b:7c:19:b4:8d:41:b9:c0:99:d9:45:7f:12:
ba:ca:d9:18:85:b0:51:2d:fc:f4:0a:f5:af:c0:31:
b3:54:a1:a5:c8:d2:8a:da:8e:2c:6c:8e:7b:45:bf:
1b:67:bd:8c:ca:44:3a:a6:07:12:3d:ac:4a:57:68:
78:af:c5:57:d2:08:26:d3:8d:a5:62:b1:d9:8a:45:
03:f8:b6:8e:37:c6:47:75:f7:d2:0f:61:5b:63:98:
2f:fe:2f:55:9b:34:8a:29:36:e1:01:e4:3d:23:4a:
36:59:fb:e0:61:84:9f:31:ee:a0:4d:1b:59:21:9b:
a7:64:c7:39:30:91:9a:a1:5b:b9:00:67:91:ef:7a:
0a:80:ba:03:88:e9:a6:db:79:f7:05:79:80:e0:57:
b5:23:96:91:5b:7e:a8:cd:9f:ff:d1:ff:e6:ef:6d:
ec:4d:f9:cc:bc:e7:89:fe:fb:8c:ce:03:f9:49:07:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:19:B9:13:22:9A:AE:4F:C5:B0:5D:69:AF:B0:20:79:1A:BA:D7
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:c3:97:68:c9:b1:20:96:24:29:9b:da:63:b1:90:d5:dd:
3d:e7:07:5d:98:2a:5c:f5:58:fb:de:08:e7:ad:97:a7:e3:62:
a9:de:93:4e:62:16:b4:8c:81:ae:80:58:1e:de:81:79:5a:15:
74:13:5a:31:b1:37:01:05:59:b5:c1:6a:0b:da:85:de:d0:54:
72:cb:94:05:35:17:76:ff:d2:47:77:5b:ac:08:7e:c5:f2:e6:
cd:49:c8:6d:bb:4b:0d:71:49:47:27:49:f5:2c:dd:e2:98:c9:
f4:89:ff:32:74:8b:c4:74:e2:27:f3:ae:6e:67:7c:5f:0d:e5:
27:9a:4f:08:83:66:68:c0:1d:4d:2e:c0:c5:98:da:12:4d:93:
c1:74:1d:ac:8e:de:ea:78:f3:54:83:c0:f2:ad:28:70:52:81:
2c:f2:21:26:54:1e:0e:87:c8:4f:0e:53:94:db:6f:dc:dd:b8:
ea:8a:f6:8c:6c:93:24:c3:ec:7c:28:c3:93:84:59:4b:76:69:
d3:24:c1:4a:7b:af:e9:5e:ad:42:0b:ae:aa:82:27:32:ec:15:
b5:ba:e1:af:f6:56:03:9a:88:b4:b2:4e:98:4a:b9:91:e5:12:
cb:1f:a9:78:f4:87:29:42:e4:d1:16:c1:ba:d1:ee:22:e5:66:
f5:4e:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:05:55 2026 by rpki-client