Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: RESWexcTphB7aLMsAKGwQRyAmy5XAMHXTqT7XWuu9L0=
Subject key identifier: 30:D3:62:8F:51:1C:AA:3F:63:C8:BB:B5:68:97:9F:9E:4D:FC:3D:CC
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 01A08C0D902C4F5938A2C5B40DB765A3A9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0E8C
Signing time: Thu 10 Sep 2026 16:01:34 +0000
Manifest this update: Thu 10 Sep 2026 16:01:34 +0000
Manifest next update: Fri 11 Sep 2026 16:01:34 +0000
Files and hashes: 1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: rBv+kjti8U+waBI808i9zfHn/WUo6qsdMQLPEw6E8o8=)
4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:90:2c:4f:59:38:a2:c5:b4:0d:b7:65:a3:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Sep 10 16:01:34 2026 GMT
Not After : Sep 11 16:01:34 2026 GMT
Subject: CN=30d3628f511caa3f63c8bbb568979f9e4dfc3dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:cd:7b:a7:48:cf:6c:e3:42:81:c8:84:35:
95:01:a4:23:b8:9f:6f:a8:09:1f:3f:74:04:2b:16:
05:bb:ad:ca:62:2e:63:08:f1:fa:02:f6:23:a0:bb:
69:6a:03:f1:49:cf:8d:eb:df:ed:c0:b7:d4:a0:1b:
17:08:90:09:46:fe:0c:01:e0:e7:0b:2b:16:44:cc:
74:68:27:f9:ab:13:25:1d:c2:44:27:73:ba:3c:63:
57:3c:dd:51:ee:8c:fc:4b:80:cc:fb:d5:f1:30:28:
cc:ae:3b:6c:e1:a3:9f:93:cb:8f:f0:08:58:16:aa:
30:80:26:13:99:ef:57:24:5b:7b:4d:a3:f8:a8:99:
24:08:b3:cc:a4:51:ce:9a:a4:d0:bc:b5:83:6b:31:
dc:70:aa:e2:94:aa:a0:7b:1c:a7:87:c5:c1:a2:a5:
06:af:89:89:d6:4a:87:cc:b2:e6:e6:14:28:d0:c1:
4f:47:35:a9:1d:1d:c2:18:ae:91:19:1b:33:bb:27:
8c:81:fc:dd:5d:c1:c6:a5:5e:a9:01:bd:35:24:2a:
b2:2a:ce:a7:ae:70:00:f7:03:02:fd:5d:ec:7f:ac:
68:16:ac:85:c1:c3:2f:c6:47:ea:83:94:6a:29:f9:
84:dc:a6:87:d4:fe:43:75:ef:3f:36:b1:a3:81:2a:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D3:62:8F:51:1C:AA:3F:63:C8:BB:B5:68:97:9F:9E:4D:FC:3D:CC
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:51:52:d0:34:1d:8f:fc:ae:85:f5:c8:ba:d1:57:3a:20:ee:
cb:5f:50:d1:4b:6c:1c:1b:0c:6e:5c:aa:8f:86:59:3f:ae:4e:
63:7c:7f:80:68:24:54:85:86:b9:bd:61:28:77:4c:a1:3f:74:
ff:72:de:0f:37:93:cc:df:15:c2:9d:71:bb:63:bf:a3:88:42:
bb:b7:f9:dc:d7:96:e8:2a:11:c3:15:b9:72:91:ef:a2:ce:f3:
b8:0c:a9:d4:01:27:c4:0a:2b:5c:b0:31:61:35:5d:e8:e4:7f:
4e:f1:9b:f2:ac:c1:05:98:64:04:6b:d6:ea:96:f8:10:6b:2e:
a2:51:3c:fe:7d:6f:15:95:42:6e:fb:c1:05:b7:d0:34:e6:cb:
f3:df:a7:94:1e:b5:5b:12:76:c4:45:98:2d:e6:93:3d:4f:13:
9f:86:bb:7b:1a:c1:cf:3d:d5:f4:6a:24:e2:1b:d7:0c:25:59:
97:82:87:c0:a4:58:09:1f:0b:8a:41:a3:70:ee:b0:a5:0e:bf:
06:7c:b9:4f:44:39:7c:fe:e4:53:91:df:8d:cd:e7:c0:38:e5:
10:35:7f:4b:0c:74:98:7e:2e:04:88:39:a5:c7:29:16:aa:e3:
54:3d:95:bb:94:6e:dd:23:f2:96:3a:80:4a:4a:e0:9d:76:f6:
41:51:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:49 2026 by rpki-client