Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: IHQLd0uta6Oj+6JcRs5obRQI9bdgeB/Pvb5RSQl2TSo=
Subject key identifier: A1:1C:7D:1F:8B:A1:E1:11:26:CA:D2:AB:C9:0D:22:FA:B2:49:07:C5
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 01A08BD5DA55B178F1C2868FCDD832A77AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 13AF
Signing time: Thu 10 Sep 2026 15:00:43 +0000
Manifest this update: Thu 10 Sep 2026 15:00:43 +0000
Manifest next update: Fri 11 Sep 2026 15:00:43 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: /TRHYPeruhcib6CqCdEDG/2p2mbtigkkBxyZ3t8ROwA=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:da:55:b1:78:f1:c2:86:8f:cd:d8:32:a7:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Sep 10 15:00:43 2026 GMT
Not After : Sep 11 15:00:43 2026 GMT
Subject: CN=a11c7d1f8ba1e11126cad2abc90d22fab24907c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:b0:41:84:1f:6a:bd:de:44:13:e7:b8:bc:
16:56:26:3d:1b:3f:08:80:f2:7a:4d:08:02:c1:1f:
48:5c:99:14:87:72:32:72:16:96:15:be:69:43:e4:
42:28:db:b6:8c:86:5c:87:2a:9f:7e:9e:ae:e7:ab:
93:b6:ae:e8:39:f4:72:6e:6e:d1:75:2c:c8:cb:4e:
a0:d9:03:55:e4:a7:d2:72:f7:ec:85:43:cc:71:df:
c2:16:f5:6a:bc:0d:d2:91:1b:16:ef:74:dc:a4:ba:
b7:35:f2:96:fd:fc:f8:e5:07:79:62:ba:c2:09:a5:
2c:5b:62:ae:dd:e0:15:7d:7e:66:ac:6e:c6:27:76:
11:92:91:b0:54:0c:d5:7e:54:6d:4b:d4:8a:05:31:
2d:91:7f:b5:fc:ef:9c:f6:48:96:86:6b:ef:6a:d9:
d6:08:fa:d4:47:3b:6a:ac:fe:e5:18:d7:75:f0:15:
3f:8a:a0:29:8d:93:82:b7:fb:f7:e0:62:44:71:d6:
1d:ad:61:b6:bc:4e:e3:66:40:87:1a:77:d5:a3:9b:
7a:fa:29:0d:1f:6e:cc:55:db:ee:7b:30:3f:0c:c1:
b3:82:f1:7c:da:32:b9:2e:6d:48:28:e0:9a:f3:15:
a4:30:82:49:dc:4e:f0:c1:36:e0:47:1f:a6:24:12:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:7D:1F:8B:A1:E1:11:26:CA:D2:AB:C9:0D:22:FA:B2:49:07:C5
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:a8:e2:a1:b2:66:5d:d0:b3:36:7c:da:6b:f4:bb:67:af:
fb:72:83:bd:76:7e:4c:bf:c0:43:9a:ce:c6:5b:4f:4a:ba:f5:
85:9d:56:ad:96:ef:6a:6e:28:e2:87:07:e6:38:81:e1:e3:24:
d2:3c:1b:9b:26:24:ae:7f:5b:6b:4d:47:d4:86:d6:1f:ce:15:
5d:e1:0c:6d:5e:de:81:e5:a2:21:c1:3a:60:25:fe:d1:42:62:
bb:8b:5c:b8:02:e6:8e:3f:f0:77:15:93:1e:9e:3a:d6:13:8b:
15:da:0f:6f:c8:56:2b:8b:9d:88:ed:2c:9a:99:e8:da:87:66:
79:66:92:61:bb:e5:ea:4e:9d:c5:f6:51:94:a1:a2:64:40:04:
45:2e:b3:f5:79:4d:68:5c:4c:ac:57:d8:2e:3f:c5:75:d3:c3:
15:c0:89:19:92:a6:d2:35:db:a0:ff:89:47:70:da:dc:19:b8:
bd:36:c8:90:41:2b:10:c0:dd:30:7d:c4:1a:be:70:f4:dd:ed:
7c:91:c5:24:c7:a5:0b:0b:9d:c5:eb:fb:15:72:7c:bd:bd:34:
19:8f:79:00:46:38:53:d7:e0:02:16:6b:8d:54:79:8d:fe:12:
37:0b:57:ac:b1:79:32:ef:d6:b5:28:fc:9c:12:fd:fe:45:de:
15:7d:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:11 2026 by rpki-client