
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File: 26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier: HrkBMgV4//y6Lsyv7f8cHBvZFfXFg4k35d8arFxYI7U=
Subject key identifier: 4E:86:A6:25:AE:B2:18:D0:5F:97:AE:70:E4:60:CA:EC:43:A9:FA:75
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 01992D46F92DB9E668DC4C9FA6AA3909B18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number: 167F
Signing time: Tue 09 Sep 2025 07:00:49 +0000
Manifest this update: Tue 09 Sep 2025 07:00:49 +0000
Manifest next update: Wed 10 Sep 2025 07:00:49 +0000
Files and hashes: 1: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: n/mLcbI63Emfx3EzSLr7AaGk24Hm/HupFeImssyT8KU=)
2: 7j4WA3ysp1rOkVmQlKAKuU1wD8E.roa (hash: 50o1sY9mxiaVzB3RiC3eXccX8VD4SmfGqHVWyBgG97Q=)
3: HZK1nXmWN-rO-mSEBWdam8_Ekw8.roa (hash: 7EEOHKjjtUzUNB//SlEOoxLrukB2bXMqrOoSHuBhLss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:f9:2d:b9:e6:68:dc:4c:9f:a6:aa:39:09:b1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Sep 9 07:00:49 2025 GMT
Not After : Sep 10 07:00:49 2025 GMT
Subject: CN=4e86a625aeb218d05f97ae70e460caec43a9fa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:e8:66:e8:11:e9:5b:03:f4:65:d3:53:34:
22:c3:78:82:4b:64:a8:db:75:86:f8:3d:9b:02:f7:
f8:1b:34:6b:09:ad:b1:5a:cc:73:aa:19:c7:58:65:
aa:af:7e:52:89:89:fe:f1:a6:99:e9:82:d5:b7:e1:
fd:47:45:9c:47:8c:de:e0:cd:ea:bf:39:58:20:c9:
ca:1a:0f:7e:e4:7c:22:3b:40:94:51:7c:cf:7d:9a:
f0:12:fb:a7:f3:4a:6e:41:ee:03:c6:d5:c1:f2:e1:
ad:bd:26:6f:0f:e4:eb:1c:91:ae:11:a9:90:dd:ea:
80:22:74:44:d9:e2:96:74:54:c1:55:8f:75:0d:59:
a7:63:78:28:f4:cd:62:82:95:6d:53:9a:3d:67:ba:
36:e4:fe:33:d8:1f:9b:6a:22:d7:7a:d3:5c:09:2c:
0a:78:10:8b:44:41:5d:49:31:4e:73:eb:99:0a:51:
82:3a:43:85:4a:2a:59:57:55:e7:28:01:0d:11:98:
32:e5:26:8c:81:3b:49:dc:59:89:f7:30:cd:60:11:
13:b1:d0:5b:7c:f4:6a:4e:e8:dd:c8:34:f6:8c:ec:
39:58:66:0b:f7:1e:8f:68:73:34:93:4a:b1:ad:0a:
0e:68:eb:e8:2d:71:08:89:d5:d9:29:88:35:80:c9:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:A6:25:AE:B2:18:D0:5F:97:AE:70:E4:60:CA:EC:43:A9:FA:75
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:06:ee:62:86:63:41:ec:4c:a8:81:67:bf:7a:bc:af:b0:4f:
04:80:19:63:c7:e7:27:fb:b8:57:60:58:1d:9e:50:d9:8d:b4:
57:47:8e:be:d2:0e:5b:ce:26:da:32:01:0f:9a:f0:33:bc:77:
98:3a:2c:9c:a3:68:2f:18:cd:3f:c8:c4:21:90:1e:ae:0c:1e:
55:21:93:56:89:dc:bc:b9:90:cc:74:da:e9:90:4e:40:49:8e:
dc:7c:43:19:6f:47:dd:52:8c:18:d4:f5:8d:21:90:fb:ae:57:
09:e4:30:38:92:fa:fd:05:0a:53:33:e2:6f:e3:6c:8f:09:e7:
a6:3e:45:fb:33:47:b1:6e:d3:2a:08:18:1d:2a:40:ae:01:ab:
df:f5:7f:d8:af:40:b8:93:75:f2:f7:6b:8d:25:b0:86:b5:3f:
48:3b:61:16:d8:e7:18:a1:83:af:05:48:6c:c9:e2:df:4a:f5:
78:a9:58:b1:9f:7e:df:88:b3:9c:5b:c8:28:5a:ca:03:f9:86:
43:eb:4b:fd:44:09:df:ae:dc:5d:0b:a7:3c:58:c8:2e:dd:5c:
ba:e1:6e:96:c6:1d:67:95:c3:9f:ea:8b:cd:8e:17:d2:31:e1:
2c:c2:d6:36:c8:98:c3:ae:76:1c:a4:66:08:4a:e3:1f:b6:75:
7a:82:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:41:53 2025 by rpki-client