Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
File: 071kNvoORRSIST9pLHbb_fZUo9U.mft (raw, json)
Hash identifier: MfzdkQ+W3E7tTc/0jvquDlLf/t4C0ablIQ6SHeCw/Go=
Subject key identifier: 5D:09:70:C0:A9:82:96:7F:1C:F3:D1:AE:2A:58:E9:91:41:12:8D:6C
Authority key identifier: D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5
Certificate issuer: /CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
Certificate serial: 01A0404E0FC271BE8E083B6686BBE910728C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:52 +0000
Manifest this update: Wed 26 Aug 2026 23:00:52 +0000
Manifest next update: Thu 27 Aug 2026 23:00:52 +0000
Files and hashes: 1: 071kNvoORRSIST9pLHbb_fZUo9U.crl (hash: sLokPQIQxF3XZUCqnLkcspRZaJ1T712IEussM9+g5m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:0f:c2:71:be:8e:08:3b:66:86:bb:e9:10:72:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
Validity
Not Before: Aug 26 23:00:52 2026 GMT
Not After : Aug 27 23:00:52 2026 GMT
Subject: CN=5d0970c0a982967f1cf3d1ae2a58e99141128d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:f1:ad:dc:c1:48:ad:7d:88:a8:db:eb:5b:
a4:fb:e8:61:2c:06:f5:ac:70:9f:4a:58:8e:08:f0:
69:3e:d7:79:ab:16:31:ea:ae:86:21:3c:cc:c0:5a:
db:0e:cd:0e:49:f0:3e:65:70:dd:22:d7:7b:d0:0f:
71:23:48:ae:90:5b:2a:84:c5:d8:2b:40:05:f3:af:
50:71:39:83:0f:a8:0e:85:4b:cd:17:9a:c0:c7:38:
da:29:a4:f7:48:de:b0:06:b9:44:99:28:63:50:54:
f9:00:b0:6c:24:34:3b:af:2c:56:a7:7e:34:d7:83:
4b:37:99:df:9e:65:21:0c:a4:2f:ee:fa:fc:e1:ca:
16:06:75:9d:86:0b:71:70:db:e8:e1:2e:29:c2:c3:
23:96:4a:f3:6e:0b:2f:5e:5e:d4:1f:e7:10:32:76:
79:5d:02:73:ee:ef:59:dc:8a:a9:d4:82:e4:d0:ef:
40:a2:1b:ba:84:36:98:c7:10:9e:33:3c:1d:4d:86:
f0:8e:ac:9d:cf:c4:0f:26:e7:94:2f:0f:72:9c:d0:
6d:ea:8d:b6:ad:ff:86:e3:fb:48:48:f3:04:cb:73:
cf:71:0b:03:8a:1f:5f:f4:b3:86:04:73:7d:93:f6:
2a:2f:20:91:ef:ce:cb:fe:ce:07:4f:a8:48:85:87:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:70:C0:A9:82:96:7F:1C:F3:D1:AE:2A:58:E9:91:41:12:8D:6C
X509v3 Authority Key Identifier:
keyid:D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:fb:3f:a2:d8:37:70:e1:24:8f:cb:e9:fe:91:c4:66:a3:
a3:9a:26:64:48:44:44:1e:b3:54:cf:cd:6b:6e:ba:1d:f1:35:
60:11:08:3f:17:90:25:96:bc:47:41:ba:b5:18:da:8b:d9:de:
32:f3:d9:11:3a:d3:78:f9:4b:a4:d2:26:74:8a:c5:6d:4c:ef:
46:9d:87:c4:cc:a9:8a:f5:c8:c4:a8:5e:85:f6:39:06:b0:41:
81:2f:88:a9:7c:b1:46:be:0d:a1:f2:f3:7c:a6:72:e5:2e:df:
0f:55:95:ef:02:6f:8b:69:18:84:74:bf:5f:3c:aa:fb:58:f6:
16:64:ab:91:25:b5:49:7d:f2:6a:f3:fe:b9:03:f8:de:20:50:
e5:df:42:e6:68:a2:cb:ab:35:0d:21:0b:b9:2f:fa:b6:90:e1:
ba:df:2f:30:f3:9e:db:ab:1d:68:c0:b0:e8:bd:5c:b4:b0:ed:
b7:35:fc:50:ac:f5:9c:91:6b:36:51:5b:2e:c5:30:b2:e9:2a:
6b:3e:29:a3:0d:66:38:38:b8:25:d3:e8:d1:03:40:5d:23:e9:
66:4d:6e:2a:5f:1b:68:30:ab:d7:80:5d:70:47:6f:92:e1:2d:
17:35:d9:28:12:60:2b:30:c2:5f:51:40:7a:bc:7a:46:e2:45:
2b:fe:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:47:02 2026 by rpki-client