Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.mft (raw, json)
Hash identifier: qDfuWxQ/BZAbV7+ybZYeF5gCMlRUwvmAGkj7zGqevho=
Subject key identifier: 36:6A:14:48:26:29:F7:9E:DB:DA:CD:F9:8F:A5:9D:82:02:57:E1:74
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 01A099FFCA87467F1E667E293E70A027279A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
Manifest number: C9
Signing time: Sun 13 Sep 2026 09:01:12 +0000
Manifest this update: Sun 13 Sep 2026 09:01:12 +0000
Manifest next update: Mon 14 Sep 2026 09:01:12 +0000
Files and hashes: 1: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (hash: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=)
2: rDxbVWwAUfY7zKUE6u6YM20K6n0.crl (hash: n/bXw9oZlbak+cSOcnbyvmXuCkjHSVqFQeD1/HwC8nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:ff:ca:87:46:7f:1e:66:7e:29:3e:70:a0:27:27:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Sep 13 09:01:12 2026 GMT
Not After : Sep 14 09:01:12 2026 GMT
Subject: CN=366a14482629f79edbdacdf98fa59d820257e174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:7a:2f:a6:57:7c:de:a3:30:ff:45:42:0e:
b2:9a:e6:c4:d8:e6:5f:ae:d8:df:a9:1b:d3:2f:67:
f7:a2:3f:d4:a9:93:ed:4e:4f:47:93:bd:39:e4:24:
99:ab:1f:af:ad:85:fa:c0:85:e7:04:5a:c9:09:08:
55:49:f3:32:b8:93:a6:04:ad:15:7f:41:21:66:34:
82:c1:5f:01:d6:c0:b2:07:2f:f4:a2:5e:8b:6e:a8:
5f:de:d5:86:a0:86:33:4f:3e:58:5a:f6:d1:59:66:
ad:b6:29:d5:00:b5:41:07:4e:98:3f:68:68:7d:c3:
f3:83:64:a1:4a:d3:bf:1d:e4:9a:97:76:9d:eb:85:
6f:5c:b3:2a:a9:66:33:35:f7:c8:c2:14:e4:1c:bf:
f5:69:97:03:70:30:9f:c8:08:ec:29:15:ca:fd:a0:
f0:e4:4c:fc:09:24:ce:30:18:87:58:25:a2:ff:0c:
00:56:30:85:e0:b7:a7:3f:6f:c8:66:cb:e9:6e:b8:
6c:3c:ed:50:bb:40:2f:bb:95:54:97:19:c5:d7:dd:
f7:14:df:c7:83:93:5b:7b:10:a1:e6:cd:ef:7f:58:
1e:49:e7:9c:14:e3:fd:01:7a:4f:4e:3d:fd:bf:1f:
6d:39:05:af:22:eb:a3:97:a2:da:0f:a1:b7:85:82:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:14:48:26:29:F7:9E:DB:DA:CD:F9:8F:A5:9D:82:02:57:E1:74
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:31:15:8c:ba:1f:85:15:f6:9c:bd:6c:20:ec:69:be:49:34:
b4:90:56:c0:a7:26:84:80:5d:1a:41:84:66:32:da:03:ec:3d:
79:02:c0:95:1b:a5:c6:e4:5f:3f:1f:80:c6:45:db:8c:92:94:
d0:99:2e:0d:e4:b0:0b:f9:39:da:26:62:8c:8b:ba:51:8f:20:
46:ff:e8:32:2b:2b:9d:f9:f6:eb:73:e8:07:4b:9b:41:ee:73:
e3:18:53:f5:60:2e:57:48:bd:31:b2:dd:f7:a9:73:f8:62:28:
70:2c:2a:0c:bc:e6:44:c2:21:77:6c:bb:b8:98:c8:11:1d:9b:
3b:67:ed:af:54:f5:b6:29:64:5e:b1:0a:3a:40:ba:4e:74:49:
de:e0:33:0a:20:53:d6:49:5e:8d:32:ab:1a:01:8b:f4:de:d2:
59:06:42:91:30:d6:fa:ea:db:a4:ce:3a:e9:4b:17:91:8e:05:
be:c3:9b:f4:81:eb:a6:1f:1f:20:d4:f0:eb:7e:aa:8c:ba:a8:
af:8e:16:ef:f9:e0:32:b3:59:d4:4c:73:d6:36:c3:d8:53:6e:
23:f4:f8:36:2e:c9:e5:11:45:81:82:76:fc:e9:f7:a2:ad:28:
d5:70:19:ea:7e:5d:01:40:64:4b:af:72:0c:a0:a2:6e:a2:a4:
a8:1c:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:37:44 2026 by rpki-client