Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: hRQaSYuYOvVPHF9TkpjFaMPEiQID+rNczAIEE2qDTcQ=
Subject key identifier: 4F:02:24:A2:40:E8:E0:92:5E:16:29:56:39:D1:CA:F5:03:BD:4F:D7
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01A08D1FFDBB6F8172CD48B21B854DDC6FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 21:01:18 +0000
Manifest this update: Thu 10 Sep 2026 21:01:18 +0000
Manifest next update: Fri 11 Sep 2026 21:01:18 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: G6DZlDRxijw+Lw9rUPD84RwrkY2Eov7y61ekDTqPB64=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:fd:bb:6f:81:72:cd:48:b2:1b:85:4d:dc:6f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Sep 10 21:01:18 2026 GMT
Not After : Sep 11 21:01:18 2026 GMT
Subject: CN=4f0224a240e8e0925e16295639d1caf503bd4fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:36:26:a6:57:8b:f6:fc:d8:44:c4:f0:48:
f3:9e:69:bc:f8:f7:25:74:05:2a:ac:68:f3:17:1f:
a1:6e:b4:8e:d8:45:ed:8a:7a:2c:f2:6a:55:26:e5:
f0:e8:e2:5e:7c:e9:5b:5c:9e:b1:f7:12:a2:c6:a5:
be:9a:87:ba:c7:64:e9:ae:63:98:e4:6e:d5:0d:3c:
3c:56:ae:73:cb:c5:ff:fd:c7:43:f4:67:ca:ec:cb:
4a:f8:01:99:8c:f9:ec:6d:7a:7d:e9:62:02:c6:45:
d4:ef:b1:5f:cb:83:7b:7b:c2:72:54:e0:c6:45:b2:
bd:7a:45:fb:9a:2d:f5:d9:8b:3e:2a:4c:3f:a2:5f:
a5:17:15:38:a8:a9:92:f4:fd:86:6b:80:80:86:d3:
7f:1e:4c:2d:60:51:a5:08:3a:e3:42:57:29:be:e0:
f7:16:b9:3b:bf:20:54:26:4d:63:f0:64:6d:6b:a3:
66:ae:15:50:f5:60:7a:bb:22:b7:40:48:ca:1a:3a:
af:31:b2:04:db:c4:34:07:b7:d2:50:c9:81:1e:f4:
24:2c:ed:f8:d3:d2:4d:cd:63:38:9f:ff:4e:06:ae:
a7:37:4e:51:e5:7a:d7:17:f9:25:f0:88:50:cf:ec:
5f:80:1c:f0:68:bd:72:02:b9:cd:0e:77:81:41:84:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:24:A2:40:E8:E0:92:5E:16:29:56:39:D1:CA:F5:03:BD:4F:D7
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c3:28:8d:4f:92:63:b0:8d:f1:b2:55:25:e6:d2:71:63:57:
5a:cd:99:63:60:19:76:41:3b:75:0c:b7:e5:1b:c3:76:8f:fc:
a2:bd:9b:19:69:b9:9b:cd:2b:0b:7b:08:2a:09:fa:5c:8b:d2:
e6:87:83:ad:1f:17:84:33:6e:db:30:21:58:4b:a8:c2:bc:92:
dc:4f:95:b5:45:8b:7a:42:10:8f:c5:cb:2e:e0:f4:1c:69:cb:
48:0f:30:10:4b:57:4c:28:d8:e5:2e:46:f7:ec:d0:65:05:9b:
53:16:dc:12:81:f8:3f:1a:62:6c:0e:18:97:6e:e3:40:63:12:
d5:ec:79:04:f0:e3:7d:b8:9b:1b:f5:f1:56:5d:c7:ba:f3:d5:
90:86:12:3e:54:9b:96:fc:e9:c8:3c:15:8e:c1:d9:47:bd:82:
1d:f9:7a:68:0c:ce:a7:5f:6c:3d:41:d2:10:2d:2f:06:11:98:
ae:9c:56:30:17:5b:34:cc:85:8a:90:87:22:78:b9:33:4d:a8:
07:07:37:83:16:e4:28:4f:4f:e9:aa:b4:24:8c:cc:c1:7a:e3:
53:3e:71:19:b5:d1:6e:05:1c:e8:25:52:0e:0e:fe:6d:a2:3a:
7e:23:4e:7f:5b:2f:a4:93:ea:3b:ac:d6:1d:c6:90:26:35:ca:
af:c0:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:11:41 2026 by rpki-client