Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
File: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft (raw, json)
Hash identifier: YnIQPoSllB5Fr2B9oWE05pcLRSYt/GYhPmXHp4Q+w68=
Subject key identifier: F9:CA:81:1B:4D:A6:6A:17:BB:4C:D2:71:B7:26:03:85:52:B6:B1:98
Authority key identifier: D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
Certificate issuer: /CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Certificate serial: 01A0CC3607D744E7758B08B9CFEF1173D369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
Manifest number: 18
Signing time: Wed 23 Sep 2026 03:01:27 +0000
Manifest this update: Wed 23 Sep 2026 03:01:27 +0000
Manifest next update: Thu 24 Sep 2026 03:01:27 +0000
Files and hashes: 1: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl (hash: H5SRljSZW9QkT7MlvaFJKNd3kwfBtUaF4CGF9WDjpwY=)
2: MHgmAaHalMHKwpPJPQFgKqFWdjM.roa (hash: RClo5fDOGBqxAoQCa1Pl8X75q2Nvy7FYruNsUuh0Z+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:07:d7:44:e7:75:8b:08:b9:cf:ef:11:73:d3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Validity
Not Before: Sep 23 03:01:27 2026 GMT
Not After : Sep 24 03:01:27 2026 GMT
Subject: CN=f9ca811b4da66a17bb4cd271b726038552b6b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:c6:c9:da:40:1c:14:a7:75:52:ca:43:84:
a4:13:8f:cf:07:c4:6d:66:1e:29:e0:66:92:d2:30:
c4:a6:d8:dc:57:ff:dc:e5:bb:b1:54:39:46:04:1a:
91:2a:5b:51:45:18:a9:cd:a8:fe:7e:16:78:71:69:
95:49:85:20:2e:a2:33:a2:36:95:a2:4e:2c:fc:3b:
99:fd:e4:14:42:2a:6e:4d:80:e4:01:e9:8d:07:11:
b5:c9:03:42:5f:74:e1:9a:fc:9d:6e:e1:82:7b:c3:
73:5d:af:61:0f:6e:9e:1d:26:c3:39:ba:a4:6a:24:
13:a7:1e:ae:01:34:ca:3a:66:85:13:48:7f:42:0e:
14:21:5e:49:7d:e0:af:1e:ff:0c:5c:21:9c:bc:96:
81:81:d8:54:cf:18:61:53:96:af:4e:b5:ab:d4:3f:
1c:ae:96:4a:12:fd:36:08:d2:bc:8d:8d:52:05:a7:
86:7a:85:d7:6a:c2:76:6c:4f:ed:c6:65:07:ae:74:
3e:f1:bd:2a:b3:19:2f:0b:a7:77:50:cf:12:64:38:
c9:3e:1c:3a:6e:fd:bc:76:1a:65:fb:e3:b1:6a:b0:
61:f0:f8:69:e6:b7:45:8e:51:1a:05:00:9a:e6:ce:
82:30:ae:0d:99:13:7b:35:0d:78:42:29:ff:aa:57:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:81:1B:4D:A6:6A:17:BB:4C:D2:71:B7:26:03:85:52:B6:B1:98
X509v3 Authority Key Identifier:
keyid:D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:52:92:51:9c:5c:a7:fa:8d:d8:21:89:40:8c:36:8b:be:c2:
ba:8e:62:ef:dd:ed:a3:04:0c:2c:2d:41:b0:06:42:5c:e1:3a:
a7:cc:4b:57:ee:94:59:3b:d6:3c:8f:1b:0f:33:7f:a7:3e:e3:
61:be:3e:b8:90:63:fc:cd:e2:b3:5d:d2:83:14:b9:78:b9:57:
df:13:46:14:b5:8e:da:5b:14:13:09:d9:b5:1d:2c:34:42:84:
7a:13:15:e2:05:38:96:3a:a8:8b:49:19:cb:ff:e3:a7:14:14:
31:e6:7a:70:08:0c:8c:38:c9:76:f5:14:27:5e:05:a7:78:5f:
ab:db:dc:8e:2d:84:8a:a7:f5:f7:4c:3c:c6:6a:8e:2f:41:b8:
70:98:81:47:ee:7c:1b:9a:83:b1:16:b6:62:9c:94:47:c2:ed:
a4:ba:6e:b0:38:98:41:ee:ed:37:43:64:09:13:ee:e3:f1:57:
a2:ae:b7:0c:c2:52:81:8d:e0:f2:f7:d1:2b:aa:08:6f:0e:46:
61:6a:c5:12:36:96:ca:e8:0d:6f:fb:bf:e4:f4:70:66:fb:1b:
67:1f:a3:2d:02:d3:49:30:67:2a:1c:db:bf:fe:c3:99:10:c1:
7d:e0:2d:49:51:c0:17:74:63:ac:3b:1c:f4:bc:2d:4c:f0:36:
e2:75:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:57 2026 by rpki-client