Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: KHx2E5fO4gFee+Nv0i28+OBKkxQAuVifiuDLp4VkkEc=
Subject key identifier: 4D:77:6B:03:AD:27:68:97:69:BC:D7:60:F3:C7:57:3A:2F:65:BA:0B
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 01A10693601DF6F92A95051A7E884043DFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0B98
Signing time: Sun 04 Oct 2026 11:01:24 +0000
Manifest this update: Sun 04 Oct 2026 11:01:24 +0000
Manifest next update: Mon 05 Oct 2026 11:01:24 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: MUTlLDCVJWc7GZfQfDGCbBTkyLmGZ+lj01lEzs8ZYEs=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:60:1d:f6:f9:2a:95:05:1a:7e:88:40:43:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Oct 4 11:01:24 2026 GMT
Not After : Oct 5 11:01:24 2026 GMT
Subject: CN=4d776b03ad27689769bcd760f3c7573a2f65ba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:c5:c4:9e:03:e8:4d:e2:cd:d1:47:62:31:
85:77:14:0c:ee:55:a7:f3:67:6a:61:31:0a:22:22:
6e:fe:ab:d8:0e:61:5d:02:8b:8d:d6:c0:f0:d1:de:
33:7a:ae:14:a5:12:36:4e:04:24:b2:13:de:06:3b:
4c:f2:70:6b:4c:f1:fc:b7:55:af:2e:4c:ad:58:95:
c2:21:15:c8:3a:5a:38:ef:bd:48:42:d4:b2:7c:b6:
85:b2:99:e1:8b:84:d2:e5:08:e1:68:95:5a:10:56:
61:67:fe:9d:2f:29:24:30:8c:a5:ff:1c:6d:cd:b4:
77:5c:e8:e7:03:82:15:5b:c6:e7:9f:ef:10:f1:fe:
c8:1d:ae:4e:00:fe:84:a2:24:18:e0:7e:c9:77:ed:
81:c9:49:bb:19:40:96:a5:f4:85:25:77:38:44:ea:
e4:d0:3e:1a:65:22:17:0b:08:87:13:35:7b:65:9d:
e6:bd:13:47:7e:58:12:16:84:11:20:ba:72:ea:dd:
90:0b:69:be:20:91:1e:22:61:ab:09:48:f4:34:6b:
aa:bc:20:46:fc:0e:80:51:9c:79:de:cf:c0:9c:54:
4d:bf:ca:62:6e:6d:a2:53:13:d5:fb:53:30:52:7a:
3e:79:37:5f:30:a9:b2:0d:d8:1f:fb:32:07:d7:8b:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:6B:03:AD:27:68:97:69:BC:D7:60:F3:C7:57:3A:2F:65:BA:0B
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:72:d6:12:72:c0:d2:ae:0e:2a:c3:9b:e3:f0:84:e8:fb:
56:d8:53:1e:84:68:d6:1f:f0:b0:a2:b7:41:04:d5:13:5f:cd:
d7:4d:6f:a7:6a:e0:6c:f9:3e:93:a6:f1:bc:b7:70:f7:03:b2:
58:5c:aa:e7:f9:73:5f:67:be:e4:9e:9f:18:6d:63:e5:22:67:
23:6b:8e:4a:02:c7:08:a8:04:30:7a:5f:c3:d6:05:36:73:d6:
e8:1e:a3:c3:99:f3:b9:5e:cf:a4:4f:61:22:e9:85:50:c4:85:
ea:98:d8:8f:f2:13:60:58:77:78:89:e1:f5:1a:98:5b:90:24:
b7:9b:9b:9f:04:11:b0:33:0b:b5:8b:54:ca:2d:d8:30:e3:92:
ed:98:6c:43:24:79:60:67:79:84:ea:93:8d:83:2e:a4:21:80:
9b:5b:4b:cd:fa:1c:4d:09:3f:c4:c8:93:fc:0c:57:0d:25:a6:
eb:14:be:5a:08:05:9a:dc:3e:88:64:fe:26:cc:38:fc:22:af:
fa:69:02:87:7a:de:e9:31:20:22:67:e3:4c:7e:aa:fa:76:a0:
a6:66:a4:a4:36:f3:ca:52:16:c6:34:50:35:3a:6b:ca:bb:47:
71:07:0a:b7:e7:3b:b3:4e:b4:30:52:1f:62:68:b7:bb:c0:64:
25:4b:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:42:03 2026 by rpki-client