Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: sO/BlS1xbpJZ4jSugmiPsBqIKFwJGC8ddWKH7ax3Ptw=
Subject key identifier: 68:38:60:17:47:81:C3:85:12:94:E4:F5:23:1B:96:AD:03:25:84:22
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 01A0024B34EB0236482751E978028AA092D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 09B7
Signing time: Fri 14 Aug 2026 22:01:18 +0000
Manifest this update: Fri 14 Aug 2026 22:01:18 +0000
Manifest next update: Sat 15 Aug 2026 22:01:18 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: bjizjkidJCDTZyqVlXr5D1ObQLUqqp9mneM+BBtmTUc=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:34:eb:02:36:48:27:51:e9:78:02:8a:a0:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Aug 14 22:01:18 2026 GMT
Not After : Aug 15 22:01:18 2026 GMT
Subject: CN=683860174781c3851294e4f5231b96ad03258422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:3c:54:66:0b:5c:aa:f5:33:05:6b:77:08:
9a:7d:83:93:77:b9:3d:3a:02:cc:6d:4e:24:8a:07:
ce:52:4a:1f:e9:b0:42:a4:e8:5c:a2:5c:3d:34:ec:
59:64:a9:cf:81:1f:d2:33:9a:94:76:75:e8:c8:e4:
90:c9:0c:24:bd:7d:71:73:65:d7:68:d6:65:c9:5d:
f7:7c:ce:e4:89:c3:91:9f:06:e5:1d:71:bc:90:1c:
22:82:a9:e2:b7:97:1f:d0:61:53:bc:51:8a:69:4a:
2b:9b:76:93:47:f7:27:19:59:c5:10:c2:5d:9e:8b:
06:90:69:c3:7b:ab:c8:01:6d:79:65:b8:83:7c:4b:
b4:ec:7f:4e:08:60:56:1e:89:66:39:d7:b4:e4:e1:
ed:0c:52:94:29:81:6c:ff:c6:71:20:ae:ba:af:8b:
2d:63:a6:3f:13:05:4b:ef:86:82:b9:ed:01:fa:35:
0c:cd:9a:96:1d:0f:31:53:c8:b9:58:5a:29:83:8e:
52:a3:a0:98:cf:80:4d:5b:eb:37:86:9d:b3:64:4f:
bb:06:65:5d:cf:c9:e6:d1:ae:3a:08:32:4b:a6:38:
4a:3d:9e:f1:44:6a:c1:bd:14:a6:03:ce:50:cd:f4:
08:03:87:f5:a8:de:df:9a:84:c6:ad:50:26:b1:21:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:60:17:47:81:C3:85:12:94:E4:F5:23:1B:96:AD:03:25:84:22
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:db:64:93:9d:86:eb:b8:e2:99:d6:fb:82:92:4f:76:f0:de:
d8:d3:fa:28:64:c1:34:49:2f:9d:d6:da:6e:b8:bb:e2:f7:ae:
70:27:28:6a:f8:a6:85:d1:80:3c:a8:17:da:d9:3e:46:c5:04:
f3:a6:ad:09:68:65:12:ce:c0:73:ee:2b:9b:0d:da:88:7a:96:
12:05:02:26:6c:67:dd:84:73:b7:cc:c0:a1:bb:97:59:66:00:
6d:7c:7b:36:f8:23:2d:30:c6:b9:0d:8c:3b:17:66:f3:6c:3e:
94:49:72:81:ae:d8:d7:ad:c2:b2:a1:53:12:b4:f8:4d:ce:9b:
2e:9e:e7:19:70:49:d6:25:93:6f:d1:29:24:4b:69:6c:d0:25:
09:bb:ac:fe:af:0f:e8:93:25:b0:65:02:e8:2e:b9:d2:1a:89:
30:2a:26:d2:d1:f2:e2:b8:72:13:ce:be:6f:b7:ad:1e:63:24:
2a:2f:53:85:ed:f1:e8:3f:ce:91:00:66:f7:be:ff:b8:af:46:
96:87:0d:6d:3f:5b:77:ec:21:07:1d:c2:63:ad:39:96:ce:26:
c0:16:b8:df:3d:bf:86:b2:aa:87:ac:5d:bb:6a:6c:e8:46:a5:
d3:d9:05:22:e0:4a:b1:d2:69:b4:b8:3e:2d:94:4d:e3:a2:29:
8a:09:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:36 2026 by rpki-client