Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
File: mXw08WgyztiYLPBvtZoCKYQB-No.mft (raw, json)
Hash identifier: rz6IL8/SvcDt78IYjuiMeDHE88BUCqX4f0mZlZPkYJc=
Subject key identifier: 36:CD:B2:40:02:51:B4:A7:E5:EE:85:81:14:23:74:22:D4:6F:46:DB
Authority key identifier: 99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
Certificate issuer: /CN=997c34f16832ced8982cf06fb59a02298401f8da
Certificate serial: 01A0E73F500873C0EC1FEC108E05FC932190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:21 +0000
Manifest this update: Mon 28 Sep 2026 09:01:21 +0000
Manifest next update: Tue 29 Sep 2026 09:01:21 +0000
Files and hashes: 1: M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa (hash: lU9vzqH6uaYjhvpiDwQOl1OKXNocXUzAF959NsQaJPo=)
2: mXw08WgyztiYLPBvtZoCKYQB-No.crl (hash: NxsCdPPcGHLf+OdJ4FOV5GSpl4mmrdAyXAmqman/Rs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:50:08:73:c0:ec:1f:ec:10:8e:05:fc:93:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c34f16832ced8982cf06fb59a02298401f8da
Validity
Not Before: Sep 28 09:01:21 2026 GMT
Not After : Sep 29 09:01:21 2026 GMT
Subject: CN=36cdb2400251b4a7e5ee858114237422d46f46db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:c5:99:25:bc:74:13:a9:da:2f:50:ee:bc:
a2:0f:8f:c3:99:98:67:3b:2a:cd:75:cd:cc:91:15:
b0:e1:1b:cf:51:19:5d:e4:18:4b:2b:b5:db:65:ab:
ae:17:07:24:69:60:90:e9:62:e5:5e:9f:3c:09:16:
a1:a7:99:90:7f:13:25:fa:a0:e2:c8:09:7c:0a:db:
1b:5f:f0:22:55:ae:2b:60:14:1c:f2:01:c9:7e:ee:
ea:9d:00:6b:8e:6a:e1:e0:bd:ab:6e:08:d9:ec:26:
89:a5:1c:96:83:27:45:8a:b8:5f:9f:51:2e:bb:c8:
f7:d2:24:5d:5f:a4:f4:2b:f2:70:52:47:2b:14:ad:
62:aa:81:1a:85:90:cc:89:99:4a:26:e9:4c:68:86:
65:17:01:d0:4a:94:44:f7:bc:44:3e:59:ce:89:d6:
01:62:3a:bd:ae:fb:8b:04:aa:50:93:00:89:15:b1:
f5:73:1a:2a:f7:37:e0:fa:ca:e5:a5:fd:fd:f6:ea:
ee:1e:8e:d7:ea:01:48:b1:94:6a:c3:43:38:f3:52:
b7:57:ab:98:0e:50:f3:e8:ee:13:0f:d2:67:d2:15:
7d:ce:40:b1:8f:e2:bb:f4:d3:f7:2a:b6:ef:b6:48:
44:e5:05:bf:5f:f5:79:39:27:88:26:d6:0c:e1:1e:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CD:B2:40:02:51:B4:A7:E5:EE:85:81:14:23:74:22:D4:6F:46:DB
X509v3 Authority Key Identifier:
keyid:99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3e:4b:12:d7:e0:51:4b:ac:7f:0b:73:75:b8:12:a6:d5:59:
71:8e:55:6c:61:95:45:11:21:09:0a:2a:ee:21:59:d5:0b:17:
1d:f5:90:8b:19:93:38:b7:de:e1:79:6f:7d:05:48:c9:00:65:
2a:9c:43:ae:ef:22:7d:b7:2f:1a:fb:d9:87:c7:54:2b:21:8e:
d1:0a:90:a0:bf:49:e4:9f:d5:92:1d:2a:dd:c0:eb:f4:49:a4:
c7:d0:8b:25:59:9a:fb:7e:6c:3b:9c:ab:73:ee:23:80:11:0b:
27:79:a8:df:b3:9f:bc:4e:19:27:17:42:81:49:38:53:6d:c2:
78:5f:ce:f8:cc:11:2c:cc:ef:70:1f:46:fc:28:2a:d9:de:35:
ea:77:6e:8e:16:0d:37:71:b5:16:2f:1a:8b:73:1f:43:04:8e:
67:68:4e:12:cc:26:8d:ce:d7:42:51:03:18:f2:03:9f:a7:48:
fb:a0:4a:ca:cb:d8:04:ce:1f:2c:d9:91:7c:9d:62:9d:65:26:
8c:2e:99:8a:f9:a1:29:55:80:e8:d3:a0:3e:b0:cf:30:39:4e:
dc:e2:1d:27:74:07:89:48:04:fd:9f:1d:da:cc:8b:8a:f0:96:
71:ce:44:2d:db:cf:8d:f9:a7:e5:2d:a5:85:52:8e:3b:63:9b:
3f:5f:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:14:46 2026 by rpki-client