Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: PsC9VeaIwqnd5U6tROWeAPcXOPUe02gGonMk02aD3Mc=
Subject key identifier: 3B:60:1C:A2:FD:E1:49:D3:75:42:9A:EC:B8:94:7F:8E:9C:60:2E:72
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 01A08A8D55BDC342D5114130668B34144EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 088C
Signing time: Thu 10 Sep 2026 09:01:53 +0000
Manifest this update: Thu 10 Sep 2026 09:01:53 +0000
Manifest next update: Fri 11 Sep 2026 09:01:53 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: weYzhIL+6tFkDxHmLrOrB4GFsBcVGlOuR12x/cLfwA8=)
2: Of6AglNJHlgcluYUlIjfioWiCKI.roa (hash: sDgKEq0ut0vUDDCpX/3A3ZadxIlIok7qphOucEB2uLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:55:bd:c3:42:d5:11:41:30:66:8b:34:14:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Sep 10 09:01:53 2026 GMT
Not After : Sep 11 09:01:53 2026 GMT
Subject: CN=3b601ca2fde149d375429aecb8947f8e9c602e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:36:a3:ef:bd:af:a8:2d:b3:61:0a:7b:54:
0e:57:9b:26:2a:3c:e8:a7:a7:05:60:48:76:98:e9:
c2:05:01:80:90:e9:a1:a3:9a:b4:9d:8f:cd:eb:33:
c5:a8:70:42:18:bc:ab:45:fb:49:ef:53:58:75:0f:
e6:2c:e0:6d:38:12:34:08:b4:08:59:f2:83:31:7e:
cf:67:97:27:a3:9f:f5:17:5b:b7:5c:bd:5d:bb:17:
12:5d:5c:33:77:2e:35:d0:f4:2d:e7:36:10:b3:0a:
44:ed:4e:7f:17:9d:5e:be:f4:32:56:27:58:7b:29:
94:0c:02:4b:e7:a0:21:a2:0b:ff:b4:ba:08:31:65:
ca:c8:82:78:d5:d5:07:28:8d:83:81:07:d7:a2:5d:
f3:cf:ee:08:cc:bc:0b:1a:f4:1e:d6:0a:a9:29:86:
65:a0:4b:9c:f2:f7:de:7c:ae:19:8c:e3:05:d5:79:
b6:d1:26:0f:35:08:e7:bf:4d:12:1b:f0:8a:da:75:
1d:7b:c4:02:84:54:ae:a8:53:98:45:ae:a6:6e:a6:
08:0f:a8:39:b7:37:a4:dc:98:98:92:53:6c:a6:52:
e4:ed:eb:26:99:28:02:23:6c:05:fd:fc:94:b2:ff:
18:ec:6b:3a:3c:37:0d:68:be:4c:43:dd:58:84:74:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:1C:A2:FD:E1:49:D3:75:42:9A:EC:B8:94:7F:8E:9C:60:2E:72
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0e:1f:ac:cc:e5:7f:70:7c:21:1e:31:65:52:ca:e4:da:48:
4d:df:18:bd:29:e3:45:b5:ec:bd:1d:1c:e1:5e:6e:1a:f8:71:
38:10:72:10:74:20:75:a3:c7:76:7d:ab:db:ff:58:48:f0:12:
a6:83:0c:4a:4f:27:88:0a:ea:08:e0:2a:48:bc:2d:2b:47:39:
99:03:cf:8c:03:c5:30:e0:f2:a3:a6:a6:fe:0e:67:ff:98:2c:
93:3a:42:73:92:77:b9:62:56:91:a2:43:ed:77:02:75:c2:db:
e9:7f:43:a8:f0:c0:96:58:25:9c:50:c2:f7:ce:56:fa:ed:27:
b1:ad:68:cb:92:51:77:58:41:e2:79:10:0d:9c:90:68:0f:42:
c1:45:65:87:df:55:aa:8b:0a:7a:08:f6:f5:67:26:0d:7c:61:
70:ae:86:8f:14:46:2f:c5:01:e9:80:dc:59:ed:90:c7:83:a8:
58:59:10:63:d2:12:e4:0a:05:dc:ff:67:59:b3:49:af:10:e7:
45:70:b4:d0:9a:0a:7b:a4:a3:28:ec:51:08:11:ca:03:72:0e:
ac:77:98:f5:29:ef:06:63:9c:08:c8:7d:6b:cf:f6:a6:4b:50:
58:0c:34:05:5d:e7:37:a7:3c:a0:a6:d8:f8:23:80:4e:aa:3c:
62:5d:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:16:09 2026 by rpki-client