Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: ahe4HDuFYqdgFd8ravTjyXGY+L8omuxyaLOR2hCJLYo=
Subject key identifier: 9C:8D:1D:96:36:D1:45:9E:DF:4C:7A:F0:6D:42:F2:86:E9:C4:36:24
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 01A0404E1ED8A1578042227F9DEA0E4EDD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 0431
Signing time: Wed 26 Aug 2026 23:00:56 +0000
Manifest this update: Wed 26 Aug 2026 23:00:56 +0000
Manifest next update: Thu 27 Aug 2026 23:00:56 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: BlfcypdHwcMdH99CmAoxqPIkFHBtiDwvDGIfYc7wgks=)
2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:1e:d8:a1:57:80:42:22:7f:9d:ea:0e:4e:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Aug 26 23:00:56 2026 GMT
Not After : Aug 27 23:00:56 2026 GMT
Subject: CN=9c8d1d9636d1459edf4c7af06d42f286e9c43624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:7e:ee:02:a4:7e:bc:e0:b6:4b:94:d8:c2:
d2:d1:b5:33:70:0c:2c:ef:87:d7:ca:6d:c4:9a:56:
82:b1:2a:d3:13:25:14:2b:33:59:b9:4d:73:16:ec:
f2:c6:71:b6:58:3f:b1:2b:ef:e0:88:90:df:0f:57:
5b:c6:74:8e:b5:03:cc:04:cc:2a:e3:8f:1c:4e:a2:
74:be:da:b8:9a:59:cc:00:96:21:2a:20:1b:a4:2a:
90:98:ab:10:52:7b:17:e1:96:8b:f5:c0:60:e8:72:
fe:96:6d:db:3b:99:d4:94:50:63:27:2e:7c:27:0e:
e9:6b:84:97:59:0e:26:0c:27:71:9f:22:26:c7:22:
61:47:78:c4:86:dd:f2:c5:1a:d9:f2:24:d9:66:f1:
19:c0:45:97:b2:e0:63:e0:c3:57:50:56:2b:84:54:
d8:16:b5:b0:a6:2c:ae:c5:2d:3a:11:bc:8f:54:84:
b6:69:b9:c9:9b:c4:60:be:a5:f4:0b:0a:3c:13:15:
93:a6:3b:f8:d9:ed:14:8b:0c:8a:01:b8:aa:31:6f:
27:fc:03:4a:3f:8e:a9:01:a3:8b:dc:45:19:db:10:
2c:24:cf:97:0d:99:ec:af:bf:0d:3a:5e:1d:e0:7a:
2c:a1:0a:9d:ab:a6:fd:6d:f0:a1:cb:2b:73:56:e9:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:1D:96:36:D1:45:9E:DF:4C:7A:F0:6D:42:F2:86:E9:C4:36:24
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:49:35:1e:0e:77:d5:3f:db:e4:31:13:ca:e7:d4:3a:18:
47:fa:a4:d2:28:51:67:fe:82:0a:13:84:df:2b:ee:ae:39:1b:
1c:11:2b:9d:94:c6:b6:30:6a:6e:d2:9f:c8:31:48:09:13:72:
fd:7f:04:a0:1d:df:18:58:a2:ee:fb:14:bd:7b:e1:c2:b8:1d:
f1:fb:bf:a8:bd:51:b4:6d:2f:95:15:8f:28:72:98:e2:32:54:
03:b5:e3:28:6f:90:13:a7:72:fe:38:a1:25:d0:bd:92:7e:9f:
d0:a7:72:b1:a5:96:cc:d6:5f:0f:d0:8e:d2:67:c9:32:5e:4d:
12:e2:b8:bd:ce:0b:f0:89:69:bd:f0:af:f8:de:2e:23:01:e9:
7d:6f:9a:ae:56:27:e4:d8:c1:c5:01:64:f6:27:b9:5c:09:dd:
c4:66:8f:96:0c:b6:62:d3:54:7a:fa:76:9e:2d:03:ef:d5:d9:
42:2f:c9:1b:a3:0d:6f:55:a4:cf:0f:29:06:80:74:31:50:40:
eb:b0:9d:ac:fd:d5:c1:b9:1e:17:4b:8d:c8:f5:5f:47:f1:32:
6e:59:5f:10:9b:c7:b2:5f:08:9c:f7:f1:b6:50:dd:c7:7c:79:
60:0c:69:02:bf:4a:8e:51:ba:fb:e0:94:ef:66:42:97:24:2c:
35:bc:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:54 2026 by rpki-client