
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier: FeNdloIKnJ8KsPkNOC/tVq+IaVJ6RAolK8FdFVqykf8=
Subject key identifier: 8E:BD:48:57:0B:CE:64:F9:69:CF:B1:D3:1B:4C:C5:37:31:D4:EE:23
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 01A08CB1DA2A715E287EE93286536336A0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number: 1737
Signing time: Thu 10 Sep 2026 19:01:00 +0000
Manifest this update: Thu 10 Sep 2026 19:01:00 +0000
Manifest next update: Fri 11 Sep 2026 19:01:00 +0000
Files and hashes: 1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: E+dNfjVXD+xETnSX4WJh6XwSxQdcBgHG1T8FGrbSKWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:da:2a:71:5e:28:7e:e9:32:86:53:63:36:a0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Sep 10 19:01:00 2026 GMT
Not After : Sep 11 19:01:00 2026 GMT
Subject: CN=8ebd48570bce64f969cfb1d31b4cc53731d4ee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:bc:b8:82:0c:85:99:73:64:55:04:e9:dd:
92:17:96:2d:1e:40:b5:a6:64:f5:26:f7:7f:4c:00:
93:c8:38:63:f6:9e:29:5d:e7:a0:8e:45:ad:0e:7e:
8d:a6:ae:7e:2c:12:1b:62:c3:49:85:ce:8f:07:51:
9c:cb:14:f5:41:f0:d2:73:49:e0:d4:0a:5d:df:3e:
5f:9a:dd:06:5d:2d:59:2a:bd:24:f6:a5:22:06:cf:
78:36:9e:6e:5c:3f:24:9d:4c:ad:40:b9:fa:dd:05:
11:fc:f8:97:b5:d6:b3:09:b5:c3:63:21:6d:e8:17:
ef:94:a6:ce:d3:66:c2:62:f6:e9:c6:6f:8d:cc:4e:
4c:32:46:d9:69:2c:22:01:12:6a:3c:9a:72:74:3f:
80:c0:fc:06:62:e1:f6:ed:74:16:ab:55:08:5a:5e:
51:a3:ac:d5:08:db:1d:99:fe:84:89:ba:aa:af:40:
c9:ff:61:83:f0:94:79:8b:9b:b3:c5:3d:86:67:31:
77:be:b0:68:92:11:3d:54:95:f4:f4:34:19:0c:6f:
1d:fb:52:d3:a7:92:92:70:21:99:84:c7:e4:0b:5d:
e6:69:05:03:1b:e9:0d:a5:02:35:25:51:cd:28:ab:
c0:b1:8e:73:21:7b:37:5d:0e:c5:0f:9a:21:bf:0d:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:48:57:0B:CE:64:F9:69:CF:B1:D3:1B:4C:C5:37:31:D4:EE:23
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:bb:58:3a:91:0a:65:dd:b9:fb:6b:06:a6:78:d8:42:63:
55:a6:4b:6f:9b:28:b1:f2:25:d3:c7:94:00:96:5e:ee:90:2b:
d0:0c:90:06:8a:e6:f2:7e:6a:3e:1b:08:20:a3:e5:4a:62:fe:
8d:cd:31:b0:d3:53:12:a1:66:cb:7b:71:bb:c6:f0:2c:45:ca:
38:61:52:11:89:5e:45:11:e8:8b:be:d0:97:c4:72:7d:f3:fc:
1a:dd:38:95:04:87:58:e9:85:2f:39:45:07:5d:fe:43:dc:1f:
08:da:4c:c2:2a:d5:bb:91:e3:58:b9:49:ea:df:0e:3a:c7:4a:
18:31:23:c5:1c:51:f1:9c:3e:fe:f1:ba:29:f4:f9:36:f9:e7:
8f:a7:2a:e9:41:4c:a2:d9:f5:ae:bf:f5:ca:00:39:dc:b4:05:
af:e3:bb:c2:ea:a9:9f:8d:13:08:c4:e4:96:18:f3:cc:78:93:
c0:61:0d:0e:23:fb:35:38:10:4e:57:49:9f:a2:fc:ce:a4:e4:
d2:bf:69:e7:22:0f:70:47:80:eb:b1:1a:92:c7:c5:1e:41:20:
3b:8b:78:1a:e4:de:bb:8c:0c:22:87:f5:32:45:7c:54:7d:24:
7d:4c:e8:82:25:a6:da:66:df:c9:a6:88:82:ec:99:bd:12:68:
ac:59:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:55:36 2026 by rpki-client