Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: EKSg0uC9kCtapiYyCZbufWWP8iR2qXFMpKFuMiJaI/I=
Subject key identifier: 48:0B:2D:93:16:1D:18:BD:AF:4C:7F:B7:23:D3:0A:EF:A2:D2:00:4A
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 01A0CAB5367D359DBDE96C3A84CF93DA48C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0B79
Signing time: Tue 22 Sep 2026 20:01:08 +0000
Manifest this update: Tue 22 Sep 2026 20:01:08 +0000
Manifest next update: Wed 23 Sep 2026 20:01:08 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 5zzU5s7d9osWuQCGzigGaBPBXgbO9tI9hlDzn0AKA5A=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:36:7d:35:9d:bd:e9:6c:3a:84:cf:93:da:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Sep 22 20:01:08 2026 GMT
Not After : Sep 23 20:01:08 2026 GMT
Subject: CN=480b2d93161d18bdaf4c7fb723d30aefa2d2004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:4b:c2:5b:97:7e:79:76:0d:3e:73:5a:76:
2b:6d:2d:f9:ca:13:c5:1e:06:ba:3e:1a:00:8b:a4:
a6:7a:04:6b:e8:bc:36:d9:42:da:29:70:15:0c:21:
79:e8:f2:cc:cd:5b:e6:86:5b:b8:82:07:00:53:f4:
24:6e:ba:e6:bd:5e:e2:f1:0e:34:fe:8b:9f:d7:d7:
94:92:27:3a:0d:2b:00:e7:f0:30:bc:0e:c0:39:16:
c4:82:9e:8f:8e:b2:bc:a5:02:8d:75:be:86:0d:f1:
d8:b9:01:9e:2d:7f:0d:2f:6f:5e:de:ce:7d:9e:02:
d4:8d:27:05:36:58:52:db:ca:4a:7f:e0:7e:47:12:
40:7f:2e:c7:05:89:e7:74:d5:b8:60:d7:a8:0c:70:
1d:ce:e6:53:60:f0:8f:51:04:e8:6c:e8:cf:54:f2:
0a:97:eb:2c:2e:20:f9:f4:c0:95:cb:d7:03:c3:f6:
30:38:d8:70:52:ee:bb:e1:0a:23:e5:e3:58:7a:cd:
ac:b6:48:b1:be:30:a2:8e:cc:d8:b0:08:8e:6b:72:
20:2c:df:b9:2a:eb:be:08:e0:f9:8a:2b:65:e2:df:
82:f2:ca:26:47:fb:14:dd:c0:6d:5a:fe:e0:b4:84:
0b:f1:12:af:65:5a:b4:85:56:6f:eb:49:b6:3d:af:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0B:2D:93:16:1D:18:BD:AF:4C:7F:B7:23:D3:0A:EF:A2:D2:00:4A
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a2:a0:18:89:eb:11:8f:d7:d0:d8:73:e4:36:a2:01:ef:00:
ac:e9:16:10:4f:34:73:da:e3:76:b0:31:8f:c2:35:03:2c:99:
6c:67:1c:d3:e1:27:82:bc:0e:69:c5:cd:23:01:9e:c2:5a:cc:
94:9d:41:60:0a:37:45:83:1c:94:78:47:2d:64:4b:bc:5d:69:
ca:03:ad:58:e8:cc:cc:14:b8:b3:64:01:7a:68:49:29:e8:e4:
1c:47:8c:10:58:e4:3c:ad:62:53:3a:fa:46:63:c7:8b:6e:b7:
7f:4b:e4:8b:2f:9a:74:93:9c:8e:31:a4:ee:3d:67:fc:af:60:
30:52:25:14:e8:81:ac:74:1c:87:3c:55:f5:ea:d5:7d:19:a3:
41:cd:29:54:12:57:7a:ba:86:24:b4:ca:ad:2c:61:f7:0f:62:
26:cf:20:ab:0e:d6:64:1e:7b:44:b2:9b:4a:69:ab:aa:5c:d7:
fb:21:19:90:9b:16:76:b2:31:b5:3f:a5:9e:9c:16:d2:57:1c:
c5:19:50:09:b6:83:60:02:b4:6a:9c:4b:80:89:82:ab:60:1a:
c3:22:55:48:09:95:c7:88:22:76:4a:45:14:48:7a:db:2b:d2:
6f:a1:28:3e:8c:40:ca:ad:34:ef:16:c6:26:ed:be:df:45:a2:
e7:31:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:46 2026 by rpki-client