Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
File: tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft (raw, json)
Hash identifier: YbZKdLsvaPbwmARtJqdkPdDhqLnjoSFfHwuNCBLvhec=
Subject key identifier: 17:6C:E4:05:E8:AB:93:61:28:90:EA:65:18:47:BA:04:0A:6C:0E:64
Authority key identifier: B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
Certificate issuer: /CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Certificate serial: 01A08C7B9243E0E0C6405EA4C66A5B51645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:43 +0000
Manifest this update: Thu 10 Sep 2026 18:01:43 +0000
Manifest next update: Fri 11 Sep 2026 18:01:43 +0000
Files and hashes: 1: B6xDnv8HDCFywpfiB0UuCgZWVWw.roa (hash: WnSysYF5eL+I2hCfl+Xlu30Tuloa46LSgtcTfwUnQ6U=)
2: tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl (hash: /DudnqyrAQfxM1d33zoNA2y4v5ixrqFmt29U5Bk547A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:92:43:e0:e0:c6:40:5e:a4:c6:6a:5b:51:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Validity
Not Before: Sep 10 18:01:43 2026 GMT
Not After : Sep 11 18:01:43 2026 GMT
Subject: CN=176ce405e8ab93612890ea651847ba040a6c0e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:6a:84:9a:ae:20:df:6e:e4:15:48:0a:71:
b5:22:24:39:73:d1:14:64:ab:80:3e:8a:66:bd:b4:
0d:70:21:52:29:13:90:2b:39:9f:a3:7e:9a:8d:20:
af:36:d6:05:21:43:9a:85:ff:46:90:f0:bd:f3:71:
d7:f9:9d:97:18:bd:18:a9:07:c6:75:fa:b4:a0:61:
81:8e:b8:96:35:f8:60:db:6a:f6:1a:6e:a7:64:b9:
1c:ea:51:6d:1d:ad:ca:54:ca:22:6b:d0:b5:44:52:
d5:9b:1e:a8:8b:d9:e0:44:ab:2e:4a:65:d4:da:f2:
a5:48:28:6a:8f:43:01:0e:57:ea:a9:aa:fd:58:9e:
ce:ee:12:63:34:a2:64:30:ca:03:91:89:6d:08:73:
71:98:00:d4:71:ed:a0:4c:b8:14:3d:f6:06:06:7d:
b9:44:25:2d:b9:a9:9c:47:13:9b:54:95:b5:56:b4:
22:dd:26:3b:c4:0e:25:d5:69:31:b8:0f:3c:dc:73:
b8:9c:ba:07:66:ac:a5:f2:48:21:b8:90:be:98:42:
34:b0:a9:ea:33:7f:b3:92:d8:90:8b:1a:ea:c9:1f:
a3:be:99:db:58:38:5a:02:7e:6e:8b:66:07:76:e8:
60:a4:e9:be:2e:ff:2f:4a:e2:76:14:8e:54:13:d4:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:E4:05:E8:AB:93:61:28:90:EA:65:18:47:BA:04:0A:6C:0E:64
X509v3 Authority Key Identifier:
keyid:B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:0c:87:71:b1:74:19:d8:ae:ee:e9:f8:88:14:a1:05:65:
33:b7:5d:2f:b5:97:e7:16:fd:cd:f1:30:38:5a:33:72:2f:23:
ff:74:b6:f7:9d:3e:73:e5:06:cd:06:60:ef:08:02:b8:0b:3b:
6b:4a:36:3c:d9:04:7e:48:9a:9a:8d:d1:48:f2:4a:58:89:95:
bc:72:34:18:e2:5a:fe:5f:22:95:26:31:ab:d3:93:f1:22:bc:
7d:fe:5a:aa:c5:47:80:75:8e:2a:70:61:1c:19:e7:48:67:75:
ef:5a:69:09:42:52:c1:8b:61:3f:8e:6a:7b:b8:70:a8:85:9b:
6d:13:e9:9b:60:89:8a:e8:78:45:90:f8:41:56:40:c5:04:20:
f8:fb:14:c9:88:52:a8:ce:76:5a:7b:eb:48:df:c6:55:13:43:
bb:94:8d:de:cc:35:b8:43:ff:1e:6a:26:0d:1c:61:eb:5d:44:
63:fc:e4:9d:6f:1b:ce:97:ad:ec:96:4b:b6:d8:42:0f:a9:e5:
b9:9d:1f:9c:91:5d:0c:89:b7:18:51:6e:2f:d4:ef:91:3a:97:
b5:bc:5c:99:cc:1d:69:57:44:b2:31:7b:56:a2:ba:ac:04:ad:
7c:1f:0d:08:c2:29:23:77:ec:37:b4:58:28:c7:be:f1:e9:10:
e7:d3:91:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe5JD4ODGQF6kxmpbUWRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NGQ1ZDdhNzQ2Mzk2ZjI0Y2ZkOGQyMDBiZmQ1OTBmZDA4
OGVjYTgwHhcNMjYwOTEwMTgwMTQzWhcNMjYwOTExMTgwMTQzWjAzMTEwLwYDVQQD
EygxNzZjZTQwNWU4YWI5MzYxMjg5MGVhNjUxODQ3YmEwNDBhNmMwZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKxqhJquIN9u5BVICnG1IiQ5c9EU
ZKuAPopmvbQNcCFSKROQKzmfo36ajSCvNtYFIUOahf9GkPC983HX+Z2XGL0YqQfG
dfq0oGGBjriWNfhg22r2Gm6nZLkc6lFtHa3KVMoia9C1RFLVmx6oi9ngRKsuSmXU
2vKlSChqj0MBDlfqqar9WJ7O7hJjNKJkMMoDkYltCHNxmADUce2gTLgUPfYGBn25
RCUtuamcRxObVJW1VrQi3SY7xA4l1WkxuA883HO4nLoHZqyl8kghuJC+mEI0sKnq
M3+zktiQixrqyR+jvpnbWDhaAn5ui2YHduhgpOm+Lv8vSuJ2FI5UE9TlnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBds5AXoq5NhKJDqZRhHugQKbA5kMB8GA1UdIwQY
MBaAFLRNXXp0Y5byTP2NIAv9WQ/QiOyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEUxZGVuUmpsdkpNX1kwZ0NfMVpEOUNJN0tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt
N2E2MzU5MGEwNmJkLzEvdEUxZGVuUmpsdkpNX1kwZ0NfMVpEOUNJN0tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk
LzEvdEUxZGVuUmpsdkpNX1kwZ0NfMVpEOUNJN0tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6UMh3Gx
dBnYru7p+IgUoQVlM7ddL7WX5xb9zfEwOFozci8j/3S2950+c+UGzQZg7wgCuAs7
a0o2PNkEfkiamo3RSPJKWImVvHI0GOJa/l8ilSYxq9OT8SK8ff5aqsVHgHWOKnBh
HBnnSGd171ppCUJSwYthP45qe7hwqIWbbRPpm2CJiuh4RZD4QVZAxQQg+PsUyYhS
qM52WnvrSN/GVRNDu5SN3sw1uEP/HmomDRxh611EY/zknW8bzpet7JZLtthCD6nl
uZ0fnJFdDIm3GFFuL9TvkTqXtbxcmcwdaVdEsjF7VqK6rAStfB8NCMIpI3fsN7RY
KMe+8ekQ59OR5w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:26:26 2026 by rpki-client