Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: mYqqjRZeg6dru/9mXYnNEGTsEVjs8WDy5ECekzMUWE8=
Subject key identifier: 0D:64:09:72:20:DE:08:EA:86:07:0B:C7:AB:95:23:0E:7C:4F:CE:F3
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019E1F10F04489768E0E02BA2A02BAD79839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0A17
Signing time: Wed 13 May 2026 02:01:04 +0000
Manifest this update: Wed 13 May 2026 02:01:04 +0000
Manifest next update: Thu 14 May 2026 02:01:04 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 15zvlYsxZ1CTIArM0eb1AUZS34mUkIm/H+jqA8ox+6U=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f0:44:89:76:8e:0e:02:ba:2a:02:ba:d7:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: May 13 02:01:04 2026 GMT
Not After : May 14 02:01:04 2026 GMT
Subject: CN=0d64097220de08ea86070bc7ab95230e7c4fcef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:b5:a4:8b:87:d0:4f:68:2d:b7:43:d2:a2:
ff:1e:de:e1:ed:78:c3:70:1b:6c:be:52:6f:cd:8e:
df:4e:48:66:ab:ad:39:8f:51:71:9b:e9:5d:6a:29:
f1:de:0d:3f:35:22:f0:39:ab:94:fd:57:2a:c2:32:
58:f9:5e:96:46:7b:91:5e:ab:17:15:89:3f:ed:f8:
fa:cd:14:7e:5d:4d:cc:1c:50:c1:bf:b2:aa:b8:16:
43:65:0c:9e:ae:87:0e:b0:b1:f6:d4:ba:66:81:4c:
e4:78:6e:60:45:ec:dd:2b:0c:e9:84:8f:c0:27:7b:
44:11:bd:83:9c:ba:b3:32:76:4d:6f:02:8f:2d:b4:
b3:8b:43:0e:56:58:e9:b2:61:6b:4a:fb:aa:9d:e7:
53:ee:bb:b8:12:b6:ff:b1:79:c0:b4:90:7c:8b:6a:
d6:57:04:73:66:77:a6:a5:f5:10:54:59:b1:40:0f:
2e:fc:86:40:4b:69:60:95:da:de:02:0a:c4:d1:22:
87:7b:77:25:26:c0:95:d7:96:7d:4a:59:d7:d2:76:
98:42:c8:01:45:18:ab:12:05:d6:46:88:d8:bd:ea:
2b:0b:72:48:7f:b8:13:9f:14:2b:ca:c5:3d:78:fa:
19:be:4e:85:05:5f:30:71:c5:32:c6:54:0f:88:37:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:09:72:20:DE:08:EA:86:07:0B:C7:AB:95:23:0E:7C:4F:CE:F3
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:89:b5:b8:48:02:d0:c7:3d:1d:04:36:1d:9b:cf:73:13:
2e:39:2c:ea:9d:ba:e0:11:f7:13:20:7d:5f:d7:8d:d8:7c:9b:
5a:c4:10:6b:51:05:28:6f:97:b4:c4:1a:6e:34:a9:b6:0c:54:
3b:3d:2c:cd:93:20:f9:09:e1:ec:ff:ac:f1:38:32:63:3a:39:
da:f1:2d:fb:47:9c:20:47:2a:bb:9f:9c:1c:8e:bb:79:b8:38:
4f:42:79:a2:ff:15:79:6a:42:51:6c:c2:76:65:76:da:a9:6b:
c8:ec:4a:84:bd:89:e9:71:37:48:a8:29:04:66:6d:36:70:1e:
ef:f9:fb:4c:79:f7:69:70:a0:c3:89:ee:6d:bc:fe:81:d8:4d:
90:92:05:14:ae:12:c0:6e:07:4e:91:a5:ae:e4:e7:53:81:b9:
ab:23:0a:3f:88:30:a5:b1:fa:34:d1:e8:72:3c:74:f1:31:66:
8d:43:39:f5:46:68:37:f5:3b:bd:f1:94:b7:f7:cd:a9:c4:6b:
09:a6:42:d8:c2:59:24:c3:5d:1d:18:77:66:09:fc:1a:06:87:
07:1e:97:2b:09:7a:87:9c:0e:dc:f7:31:f4:c5:40:3b:a9:b0:
9e:59:bc:de:38:bd:12:3f:c6:ce:79:ed:85:c4:38:c9:ff:8d:
88:1a:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:12 2026 by rpki-client