Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: 89xj3PSa6TTAyqiJv9/qxNNnxozCSMw8TDAmKVpa1Rg=
Subject key identifier: 40:2F:39:F8:E0:34:D6:AE:15:3B:D7:D1:BD:03:F6:63:CF:E9:D4:8D
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 01A12B0D19685856C4179460EC561BB2DA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 13:00:41 +0000
Manifest this update: Sun 11 Oct 2026 13:00:41 +0000
Manifest next update: Mon 12 Oct 2026 13:00:41 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: 5BgepdYleUSbgLcSvaHeVIf4r+9SV0R2tvakkt4YPaw=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:19:68:58:56:c4:17:94:60:ec:56:1b:b2:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Oct 11 13:00:41 2026 GMT
Not After : Oct 12 13:00:41 2026 GMT
Subject: CN=402f39f8e034d6ae153bd7d1bd03f663cfe9d48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:2d:a4:24:08:8c:e1:28:00:33:5b:cb:8c:
24:79:9b:c0:4c:37:66:65:32:31:ff:b3:b4:ef:e8:
a5:a4:04:4b:6e:4e:52:be:57:a6:ec:40:9b:b1:2a:
07:97:dd:b0:27:d7:f1:9f:71:24:03:c3:00:b1:c6:
49:01:b3:3c:cd:a1:40:67:8f:c2:4b:bf:1b:30:f0:
85:2e:ff:07:70:1a:92:c6:ad:44:f3:8d:1a:36:78:
ea:74:d5:c6:52:57:36:ba:df:96:af:a4:3d:ef:1d:
ad:b1:5e:6a:9b:b0:75:7d:66:85:53:57:c3:b3:88:
2a:97:6d:ab:51:04:6f:dd:99:f8:50:31:16:3b:35:
d6:6e:7f:47:52:82:19:02:ce:30:85:f5:0f:82:d3:
3a:f9:80:8a:81:e7:f8:e2:66:ed:07:42:d3:27:20:
7a:87:be:cb:fd:66:f0:f3:a0:9c:bf:c3:96:cb:be:
f3:ba:4e:c9:f3:a6:76:a8:1a:58:de:88:6b:bf:77:
f2:2e:dc:b7:9d:4e:f8:54:61:ef:d3:96:94:23:46:
41:4b:9e:55:17:90:7e:1e:36:c1:68:d6:60:ff:ad:
28:2c:d4:94:41:30:d8:54:10:e3:65:15:eb:ff:b5:
22:48:b2:8c:8d:33:82:3d:22:96:3a:52:57:e3:41:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:39:F8:E0:34:D6:AE:15:3B:D7:D1:BD:03:F6:63:CF:E9:D4:8D
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:7b:37:36:c0:11:58:5d:62:8a:04:cc:a3:b7:8c:27:4e:
34:26:82:3f:a1:c8:3c:8c:22:6e:33:54:f7:34:7d:92:7e:cd:
10:96:e5:fd:b5:b3:cd:bf:70:43:bb:7c:cb:9c:fa:9f:88:43:
fe:8e:ba:f3:b7:db:cc:bd:86:62:d3:07:12:da:a1:e6:6b:24:
74:c8:49:26:71:6b:c6:e3:79:24:98:e7:c8:d9:48:87:89:fc:
cc:bf:5d:cf:14:fe:21:f7:83:df:02:20:51:ca:6d:5a:25:74:
55:40:b2:8c:0a:1d:96:8b:54:c1:a9:a1:0b:7f:e8:b4:37:59:
4f:c2:2b:69:af:42:83:6c:dd:55:68:47:84:b2:0a:7c:48:08:
ca:c3:a3:1f:9c:4d:20:90:34:0e:61:cc:7d:1e:dd:3c:40:e4:
8b:26:d1:66:05:1d:af:54:e7:f3:9d:a1:d6:2d:30:7a:17:a1:
3d:55:04:58:05:13:61:f3:6d:34:1f:a6:0a:78:c2:98:1b:05:
1e:4b:69:81:05:46:b9:9b:e6:d3:1a:e6:5f:b8:38:94:c1:d3:
b4:09:55:36:dc:1c:54:ee:24:f7:45:04:3b:44:7f:31:84:de:
a9:fd:66:b3:9d:2c:73:66:d5:a8:7f:86:46:7a:ed:e7:1a:c5:
d9:d9:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:04:04 2026 by rpki-client