Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: 4TA2d7ZJMNXpBvwzefLCQeBOj9fYjnVttq/DXGrQ930=
Subject key identifier: 69:78:E4:65:DB:1A:71:E1:26:2C:4B:42:24:2A:88:07:EA:AF:E1:D9
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019E20FFDEEDC725EA759636F24DDD6FF2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0A18
Signing time: Wed 13 May 2026 11:01:40 +0000
Manifest this update: Wed 13 May 2026 11:01:40 +0000
Manifest next update: Thu 14 May 2026 11:01:40 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: dmVGEgdyJuEfaJ4iIeAXlW4kE/W4MA9TBgmojoqyvRA=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:de:ed:c7:25:ea:75:96:36:f2:4d:dd:6f:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: May 13 11:01:40 2026 GMT
Not After : May 14 11:01:40 2026 GMT
Subject: CN=6978e465db1a71e1262c4b42242a8807eaafe1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:d9:c8:b1:df:40:57:b8:c1:a9:55:60:8c:
4c:0b:8a:e6:9c:04:79:8b:9c:29:5d:83:9d:31:78:
35:50:5d:d7:7b:cf:c6:a5:2f:f3:29:1a:bd:dc:32:
2b:9e:28:85:6e:ce:61:db:43:5f:88:98:26:b1:fa:
c0:c5:f4:41:1c:1c:b4:50:6d:eb:6b:d6:3f:a1:17:
1c:47:87:27:47:6d:76:87:40:e9:13:98:29:da:84:
93:16:23:dd:6f:38:5a:5f:98:63:46:20:1c:ef:5b:
e9:a5:e8:eb:24:2c:92:a0:62:6e:43:81:44:ef:9c:
0d:d9:e8:63:72:c1:e0:a1:38:d1:11:70:d1:ca:ae:
a2:a8:1b:2c:c7:6f:e2:43:bc:5a:61:89:b5:1f:0c:
b7:43:3c:7d:1a:59:21:cb:28:f6:40:7e:9e:1d:ac:
da:43:24:3b:9a:8d:23:e3:c5:d0:de:9b:aa:5c:95:
dd:bd:db:65:9a:c2:ee:13:0a:b8:fa:d9:7f:51:bb:
bd:62:04:86:f1:42:b4:5f:1f:21:81:82:c8:e7:5b:
6a:d0:56:50:48:10:0e:75:49:db:ed:d7:c2:ff:48:
16:27:4a:b4:9b:fb:01:d7:f1:ed:e4:49:53:14:99:
8e:64:e2:9c:9a:de:ad:22:f1:99:67:42:65:71:a4:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:E4:65:DB:1A:71:E1:26:2C:4B:42:24:2A:88:07:EA:AF:E1:D9
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:36:cd:6b:63:f3:82:5d:0b:ff:2a:82:72:9a:0e:1c:70:f2:
49:02:bd:81:4c:93:3d:f5:df:bf:c1:4a:9d:eb:d6:22:1c:0a:
65:b5:a6:b9:ed:ee:e0:57:ec:8e:68:2f:8e:d8:86:1d:47:27:
26:69:75:63:81:df:c2:de:4a:e3:be:7c:9e:51:d5:9d:6e:33:
5c:8c:6d:f6:74:87:cb:dc:17:e1:ae:fa:46:b7:dd:f0:b5:c7:
ef:70:cd:05:ac:c1:88:01:a0:63:08:ec:e6:5c:c0:d7:dd:ab:
31:d3:35:53:43:1a:3f:2e:43:a7:06:8c:af:6f:38:f4:1c:28:
b7:ee:22:a0:7c:65:ae:c8:d8:f1:6f:20:d1:b3:bc:48:9c:1f:
13:af:9c:54:39:42:8b:73:1c:3c:48:5e:fe:06:73:51:cc:c4:
9d:a1:7f:fc:70:8c:20:e1:22:ab:46:ee:3f:da:c5:47:96:e4:
1a:e8:ca:de:69:df:5a:83:d1:0d:f8:98:9d:ed:ce:3d:85:0d:
8f:37:d9:20:f6:36:24:ac:6f:52:53:60:35:64:a4:01:ca:6d:
19:af:b8:2a:07:40:f7:db:95:f5:b5:33:1d:9d:a9:11:56:a8:
3d:38:1e:9c:f3:d3:54:43:93:e5:a6:74:33:53:34:af:cd:d7:
5b:29:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:50 2026 by rpki-client