Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: nYS8NgoOSGbiGSyjHwT7P+m6e5BvLTE1Fgc8qPKTxqw=
Subject key identifier: F5:04:00:0B:D3:08:AB:57:9A:8C:4F:3B:D7:96:45:57:18:84:AE:69
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 01A08C43D2911A577277C0954DA39B0A111A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0ED9
Signing time: Thu 10 Sep 2026 17:00:50 +0000
Manifest this update: Thu 10 Sep 2026 17:00:50 +0000
Manifest next update: Fri 11 Sep 2026 17:00:50 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: uXTXb+gUsZ39M+q63jrBKBgSk/v26PDVOR3UuKBkWzk=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:d2:91:1a:57:72:77:c0:95:4d:a3:9b:0a:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Sep 10 17:00:50 2026 GMT
Not After : Sep 11 17:00:50 2026 GMT
Subject: CN=f504000bd308ab579a8c4f3bd79645571884ae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:b9:d8:01:0f:ff:f3:91:bb:2c:9a:ae:10:
71:ab:30:60:b7:b6:17:ed:6b:68:f6:27:cb:74:bf:
a1:1d:b8:94:2b:53:2b:bd:23:15:e2:6d:c9:36:79:
dc:46:e7:e5:b0:0f:d8:8a:1b:b4:1c:f1:7d:22:09:
96:50:84:8a:eb:83:dc:ff:e3:34:65:a2:6b:56:57:
bc:5b:23:78:0e:bc:0f:89:e9:99:6e:4a:db:cd:cc:
40:87:c5:57:8a:c9:51:42:8a:6e:e6:a4:f2:2f:d1:
44:35:b9:61:16:0c:49:99:af:0a:a7:af:83:2b:eb:
9e:11:65:71:70:e4:1d:58:64:79:54:ec:4e:f7:74:
0e:ec:4e:55:0a:9d:0c:1a:cb:2d:96:7f:ef:a7:6e:
0d:ff:31:98:96:54:b2:61:26:80:a8:9d:3e:8b:ff:
e6:30:97:ef:b0:3c:ef:5c:99:88:25:1f:be:49:1a:
d9:a9:f6:02:42:9b:b1:16:d2:ae:af:72:be:3d:78:
c4:74:67:ad:42:59:d0:5e:e5:ec:74:8e:a3:fd:2a:
73:9a:35:2d:1b:fe:25:44:9e:fd:da:d0:a1:76:0f:
b0:ed:c8:49:2d:f6:29:1e:82:50:b9:87:15:97:db:
15:d0:3f:a4:a5:cb:f4:15:07:b3:d7:75:db:39:54:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:00:0B:D3:08:AB:57:9A:8C:4F:3B:D7:96:45:57:18:84:AE:69
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:0a:2e:5e:42:ee:be:6f:f2:ad:4a:4f:ca:db:0b:19:cd:
6b:ac:65:69:4e:d2:a6:90:0e:5a:75:44:31:4c:46:2e:7c:30:
91:75:34:8f:fd:17:63:8e:09:20:39:cf:76:18:e0:b0:55:ca:
9e:8e:6e:b6:98:1a:e4:d5:05:96:bc:18:77:78:bd:a1:1b:08:
f9:79:e2:26:c9:63:d9:95:cd:66:56:b7:ed:59:76:82:e8:35:
ff:c0:2a:64:20:f4:22:f6:31:95:5b:ca:cd:f0:57:7a:90:de:
fa:fb:f7:fd:7e:c3:ed:7d:b8:22:86:8c:e9:0a:2b:eb:d2:11:
c1:4f:e2:a6:d0:52:bd:e4:de:95:ce:04:7e:d8:be:6f:15:3d:
71:0a:e0:e2:39:0e:c2:d1:93:a3:03:2b:f7:cc:57:c7:f8:5f:
59:d4:32:dd:c3:2a:da:a0:cd:3e:d4:46:e7:a0:37:c0:ef:03:
ef:7a:a5:75:79:5e:99:76:54:d2:b3:7b:c9:8f:76:b4:22:7f:
e0:8e:58:a8:02:bb:71:3d:43:98:fb:c1:de:9d:54:7d:ae:1a:
30:81:d5:00:f6:6c:75:0e:04:01:9b:97:a4:f3:bd:c4:8a:20:
dd:65:7a:98:7a:da:52:8d:8a:6d:e3:00:36:b4:f1:9d:fd:2b:
60:34:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:26 2026 by rpki-client