Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: Vlb1tlt3C2q7vl/h7mg2+T7hPmVXSnZSP3hV/6dz0AI=
Subject key identifier: 5A:A9:F8:AB:1D:D7:AE:D5:C1:75:B0:28:7C:A3:B9:06:8C:80:30:4C
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 01A0D07FF723BDD24D5185DB13615101D5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0AAF
Signing time: Wed 23 Sep 2026 23:00:42 +0000
Manifest this update: Wed 23 Sep 2026 23:00:42 +0000
Manifest next update: Thu 24 Sep 2026 23:00:42 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: O9XH4nep4JOeNy8fxkHLkw6l/Uhq/z3tmJ3DYA1gAAs=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:f7:23:bd:d2:4d:51:85:db:13:61:51:01:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Sep 23 23:00:42 2026 GMT
Not After : Sep 24 23:00:42 2026 GMT
Subject: CN=5aa9f8ab1dd7aed5c175b0287ca3b9068c80304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:8e:81:40:de:2c:fa:0f:68:66:51:e3:12:
47:b5:2e:54:72:27:4c:69:c2:4c:b1:45:31:46:76:
0c:35:06:f5:16:55:8e:4a:81:b8:72:9a:90:aa:c3:
99:66:c1:61:d3:bc:36:32:01:6c:3a:41:28:77:5f:
10:56:61:bd:57:b2:43:e5:70:3e:b1:30:fa:4f:57:
7e:24:17:b6:f7:d3:ea:04:93:00:c6:91:3c:42:ab:
a7:57:07:72:42:23:80:c7:5f:3f:b7:54:b1:2c:96:
e0:6f:8b:bc:c0:b1:6d:8f:46:2f:1c:0d:e9:58:ab:
28:5a:95:2e:ba:9d:c9:b7:8f:f7:d0:3f:32:ac:b9:
b7:f2:a9:4d:61:30:d6:62:1f:36:12:60:12:89:3b:
b0:f4:89:93:55:fa:47:a1:64:bf:08:14:1f:82:39:
ab:ab:d0:6d:1b:f5:96:86:a8:6c:1b:9a:66:8d:d0:
fb:8a:1b:b2:6f:20:0c:76:3d:2c:22:4a:95:73:d2:
8e:c9:cb:11:2b:6c:cf:b4:dc:68:8e:70:dd:ae:f8:
fd:60:93:80:ec:8a:6d:3b:d0:2c:ac:1c:96:7e:4b:
ef:97:38:2a:d0:71:09:0e:e6:bd:25:14:2b:23:f1:
ee:c0:4b:91:cf:b9:00:8c:be:ba:09:9f:ed:ad:59:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:F8:AB:1D:D7:AE:D5:C1:75:B0:28:7C:A3:B9:06:8C:80:30:4C
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:75:3a:d8:2e:d3:42:9f:5c:de:b4:b0:13:2b:25:81:66:52:
29:2f:1b:23:32:77:10:a4:02:7a:1c:67:aa:04:9b:aa:56:1b:
97:1c:8d:17:44:6a:80:55:0d:83:23:43:dd:4a:24:38:c7:b0:
29:c6:24:05:ca:13:d2:a1:52:ae:31:8d:02:63:b0:d2:20:60:
a8:eb:f0:cf:86:d6:68:c0:33:3d:f6:b9:28:e6:f2:e8:30:03:
84:85:ae:48:58:57:37:3d:fd:63:63:5e:a5:3a:dc:a6:42:6e:
14:a1:24:28:6f:86:b3:28:bb:62:89:6a:8d:f0:97:ff:0e:fa:
6d:61:6f:6e:a0:93:05:91:bf:ee:2e:14:b3:6d:4f:6c:6f:c7:
a6:f9:3d:9a:ac:c0:48:be:5f:49:53:b7:9c:8e:03:af:18:23:
9c:e0:2e:c3:a2:c9:cf:fc:fe:1d:52:3d:78:78:37:0f:21:d5:
10:69:1a:7b:83:b7:96:57:c2:d0:a1:34:eb:4a:2c:08:b4:40:
8f:6a:a9:89:df:16:7e:06:0f:cd:b7:20:5b:51:29:ef:60:e5:
c9:16:95:ee:f7:f0:e5:a2:29:42:a3:a6:f4:0f:72:4f:47:8c:
51:7c:ea:f2:f3:7c:20:bf:5a:1a:fb:14:6c:86:13:6f:39:b2:
73:61:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:44:23 2026 by rpki-client