Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: lYoQG2QCDNmFuQJ693PRy2Ji3wSg4vp/YNs+guGo1Iw=
Subject key identifier: 44:05:76:D1:97:94:2E:A9:DA:8E:D8:F8:95:E2:29:34:FA:80:8E:74
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 01A08AFA9C7C1F73423FC5CD59C06BF0866E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0D3E
Signing time: Thu 10 Sep 2026 11:01:14 +0000
Manifest this update: Thu 10 Sep 2026 11:01:14 +0000
Manifest next update: Fri 11 Sep 2026 11:01:14 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: r9RM8MiLh9qNXLPgcQy3pGvL7NSNGuO/mTWNpV00Ky8=)
2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:9c:7c:1f:73:42:3f:c5:cd:59:c0:6b:f0:86:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Sep 10 11:01:14 2026 GMT
Not After : Sep 11 11:01:14 2026 GMT
Subject: CN=440576d197942ea9da8ed8f895e22934fa808e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:e7:14:f1:57:e9:ef:3a:14:d0:98:cf:de:
6c:cb:15:2c:97:3b:36:b7:9d:2c:17:9c:36:fd:cf:
1a:94:1f:47:3e:f8:18:d3:58:3c:0d:b9:31:51:79:
b5:e1:45:58:14:36:f1:cd:9e:ae:79:51:1e:c4:fb:
54:0c:6c:b7:98:ea:4b:d3:d1:8d:dc:71:2e:68:00:
3d:bb:ed:eb:b7:d0:01:a4:9f:49:34:5c:5c:18:52:
0f:0d:ae:69:59:6c:6c:0e:cd:7a:9a:d6:90:27:90:
d8:c7:db:43:34:9a:dd:1c:77:59:9c:c6:1b:d5:28:
14:6d:70:46:92:73:23:ba:da:89:ef:79:89:a5:39:
38:62:02:86:a5:89:52:33:5c:a5:e6:ac:76:1d:6c:
bb:e6:f9:9d:b4:f2:8d:86:37:e3:43:58:af:66:cf:
87:18:12:db:7e:21:60:9c:4e:d9:1e:03:fb:1f:23:
61:fb:51:2a:57:30:cc:3f:a4:08:3a:2c:3b:2d:75:
71:dc:2b:f7:55:00:42:35:56:14:ba:1e:d7:95:d0:
07:c8:1c:01:7b:29:b2:5b:64:68:ae:23:09:f6:12:
2a:06:74:b9:ad:35:40:7d:b0:1b:4b:34:6f:d7:2a:
b5:40:56:db:86:1b:61:64:aa:1b:74:ca:18:74:58:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:76:D1:97:94:2E:A9:DA:8E:D8:F8:95:E2:29:34:FA:80:8E:74
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:ea:9d:1d:5c:49:35:0e:47:67:6b:18:dc:15:18:d8:f9:
0e:92:7b:25:1f:bd:1a:3c:f1:bc:b9:35:2c:e1:dd:1c:62:8f:
9c:9f:59:dc:1a:9f:73:53:b0:ac:ab:7a:b7:76:52:96:ad:1e:
73:9c:8f:e9:34:b6:b1:07:1a:cd:c5:aa:2a:91:62:8b:8c:7e:
3b:35:69:a9:97:29:94:b1:fc:6b:a6:80:06:63:d1:49:49:6f:
25:ae:46:64:cf:18:bd:f0:e2:5a:fe:91:73:26:17:e1:6d:67:
b8:5e:e6:50:e4:8a:3b:15:18:b2:e5:d6:29:df:65:35:02:0f:
df:2a:cd:5f:38:60:65:2e:21:76:69:35:30:a5:0e:bd:67:cf:
ba:42:7e:be:49:f2:a1:7d:c8:81:bc:73:ea:6f:18:6f:61:05:
d5:4c:69:10:e3:95:ab:98:e8:c3:5d:61:fa:50:ba:13:ea:5a:
e4:ea:25:32:31:1a:42:79:db:b4:fe:5f:80:5c:11:3a:e0:db:
9c:17:86:20:4e:ea:8d:e1:83:34:5a:32:3c:38:c7:bc:c9:a6:
7e:b5:24:ee:fc:91:57:91:b3:2d:1c:34:ae:65:a1:09:5c:be:
d3:ae:84:b6:9b:24:b0:f4:f9:a5:5d:53:9a:f6:92:39:b3:06:
cf:51:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:15 2026 by rpki-client