Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: b4x2W8gFlaUSJobopN03RMRcUUzXNEhPRVyFPzCjDfc=
Subject key identifier: 9E:C2:1A:82:F0:34:6E:1C:85:6A:3B:F9:35:FA:A3:AD:F0:2A:75:3E
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 01A08D569AE10F569A1D094BCC2F02DBD3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 016E
Signing time: Thu 10 Sep 2026 22:00:58 +0000
Manifest this update: Thu 10 Sep 2026 22:00:58 +0000
Manifest next update: Fri 11 Sep 2026 22:00:58 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: xHNRtTE8YlbWNlqiVH9qmM3Yz380yMurHJugkx14+Y4=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:9a:e1:0f:56:9a:1d:09:4b:cc:2f:02:db:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Sep 10 22:00:58 2026 GMT
Not After : Sep 11 22:00:58 2026 GMT
Subject: CN=9ec21a82f0346e1c856a3bf935faa3adf02a753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:aa:b8:dc:c1:e1:db:04:46:4d:2c:cd:0a:
bd:5d:55:2a:b8:97:01:90:be:93:87:47:2e:7f:f3:
ea:66:a5:86:9e:ff:22:e9:00:f4:5d:68:5d:9a:b8:
72:8f:64:f7:23:91:ca:09:c8:34:38:3e:04:ab:c7:
0e:d2:f5:6c:7a:0b:c2:58:a5:72:5e:78:4e:bd:67:
7c:01:37:6e:93:e4:4b:58:44:06:ee:51:b5:ad:75:
9b:1c:dd:a3:4a:21:1a:9c:ee:c4:fa:37:70:da:d3:
91:b1:c7:76:80:f5:4b:df:c6:a3:7b:c7:82:38:83:
72:b9:16:f4:b4:b3:ab:7d:16:d1:52:be:bf:3e:02:
1d:da:59:a3:a6:9a:c2:25:1b:83:25:71:d1:97:b4:
44:79:0d:48:53:52:66:84:cf:bf:41:e3:d2:65:0c:
38:ae:9e:2b:0f:0b:0c:eb:7e:41:e6:21:a7:b1:a7:
7b:b2:06:c4:5c:38:d3:b2:2a:c7:ac:cd:23:f7:f0:
d8:99:31:eb:87:44:84:3e:20:de:da:4e:c8:f7:03:
9b:4e:f6:61:81:b8:be:42:fc:52:29:da:4f:82:0a:
a2:6d:d1:60:93:61:40:17:69:6f:7f:5c:8b:5c:24:
bc:6e:9b:2f:5e:58:4e:9d:b1:b4:94:33:85:ad:c1:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:1A:82:F0:34:6E:1C:85:6A:3B:F9:35:FA:A3:AD:F0:2A:75:3E
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:47:c5:59:a2:15:27:86:2b:89:43:18:ef:cf:2c:c3:0d:
3a:bf:73:84:6f:8e:3c:68:13:f6:94:23:2e:b5:7d:fc:81:a1:
e2:1b:a0:9a:70:fa:e1:d6:96:eb:ad:41:21:10:7d:13:ec:1a:
26:fe:ec:b0:01:68:34:ae:28:00:ad:54:bd:9d:70:3d:82:55:
65:cf:28:03:0d:7e:d5:15:7f:28:0f:38:78:43:a6:d4:c5:1a:
4f:ca:e2:d6:76:7e:14:c5:2b:75:c7:1e:eb:80:7c:84:05:cf:
f7:19:00:e8:35:af:33:d4:05:28:a0:a9:35:c2:28:06:65:d9:
27:07:5e:d6:f4:ba:32:88:cb:c5:02:c3:c4:b3:f4:f5:15:21:
90:ee:ba:b2:75:7c:e0:fb:fd:b7:e2:b8:a2:7f:54:cc:d5:73:
e4:00:fb:b8:70:2c:3f:42:a5:f5:ce:c5:54:1f:2e:28:90:95:
a5:d8:ed:0c:b8:2a:cc:6c:10:e2:9a:95:ea:73:b8:38:4d:e4:
d3:cb:2a:28:95:78:47:5a:86:2c:39:49:90:b1:6f:ab:9c:35:
c6:a7:c4:bd:00:9e:6f:ea:6b:79:ab:33:c4:65:29:98:03:1d:
1d:f5:e3:8c:ea:2e:be:b9:2b:b9:ee:fe:b6:0c:9f:1b:f9:9b:
a0:67:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:50 2026 by rpki-client