Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: Y0IiG7kNI9WMA3d1rLAdMspsxp0+q/jz8J3xmmXT7TI=
Subject key identifier: 07:CF:69:1C:5C:49:30:6E:1C:49:D4:49:C3:73:FC:0F:35:E0:C6:83
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019FAABE906281F7A4916DF189462AC8AC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0DFD
Signing time: Tue 28 Jul 2026 22:00:43 +0000
Manifest this update: Tue 28 Jul 2026 22:00:43 +0000
Manifest next update: Wed 29 Jul 2026 22:00:43 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: /Ia/1JC0mLiHtnUasFvc1yGQv0UYROkpnJcKK9lp+E4=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:90:62:81:f7:a4:91:6d:f1:89:46:2a:c8:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jul 28 22:00:43 2026 GMT
Not After : Jul 29 22:00:43 2026 GMT
Subject: CN=07cf691c5c49306e1c49d449c373fc0f35e0c683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:f7:82:1d:f6:07:13:71:bc:78:a7:03:81:
f6:da:4e:5e:40:d2:f5:e3:98:eb:00:e7:3a:67:7e:
c9:68:7c:ed:99:4d:a9:d5:89:36:ea:d7:52:5b:57:
71:1d:11:9e:d9:7e:1d:8c:24:f5:c4:13:74:b4:d6:
fb:2a:44:43:7a:b4:e2:ca:26:4c:44:be:90:d7:72:
1c:8d:82:94:86:1e:b4:ba:8d:48:76:4a:46:6c:7b:
84:0b:1c:0e:f2:b1:db:42:56:47:d3:5c:db:7c:e0:
64:44:51:41:9c:85:84:db:e3:e1:e7:79:0e:e2:0c:
5d:30:0b:90:f1:81:38:30:a3:5d:0b:79:57:e2:72:
54:fa:ce:08:71:0f:ea:a2:28:b1:4b:38:08:9a:41:
f6:87:6a:3c:4b:e2:46:2c:7b:7b:e4:9f:5c:40:2e:
ea:82:13:e0:0f:ff:14:c5:27:3e:22:d2:73:49:da:
9c:e9:d4:14:b3:54:2b:6a:93:ca:79:ad:97:4e:6a:
c6:a3:7c:28:7d:eb:6f:4e:1e:96:5b:7f:42:6a:31:
e9:78:7c:42:82:c2:d8:97:46:10:18:48:5c:d2:77:
03:aa:7c:52:a6:f3:3e:b6:78:3e:77:bd:b7:cb:1d:
5b:f2:8d:52:68:aa:b4:b1:88:e9:10:27:c9:e9:0b:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:69:1C:5C:49:30:6E:1C:49:D4:49:C3:73:FC:0F:35:E0:C6:83
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:6a:3e:e1:35:45:a0:56:60:15:17:b0:a0:65:6a:af:76:
0a:d5:8d:f0:ac:0e:33:25:6b:3c:43:cb:f8:a1:62:7b:86:ff:
4e:c3:d9:22:4b:eb:6b:61:36:07:4e:84:9c:a2:26:00:f4:c7:
03:68:1b:e0:41:8d:79:76:88:29:e0:58:04:90:c2:88:25:66:
13:eb:02:8c:74:63:91:fd:79:c0:3c:0e:92:2d:b4:21:f0:6b:
c9:d2:ce:01:37:a1:0b:b6:c2:86:34:52:ea:9f:13:46:b1:ee:
e2:03:b0:89:ed:42:e2:e1:81:6c:38:c2:60:ed:f1:0f:e1:40:
96:b1:11:d8:14:2c:3b:18:18:56:86:7f:0b:ba:dd:0b:49:21:
02:a8:bd:a2:f1:7f:e7:fd:79:ad:a6:3e:84:35:d6:55:49:fc:
82:f0:f0:eb:08:41:d0:42:42:37:db:3f:22:20:99:06:a0:b0:
cb:15:e4:f3:8f:11:35:0f:6b:09:18:c5:e2:40:f9:24:4c:f4:
f3:47:7b:8e:e6:b7:06:c2:b9:87:5e:55:06:ed:f0:51:28:e1:
4d:da:94:5e:ed:c8:de:37:44:0e:4d:cf:81:6b:02:16:07:32:
3a:96:83:d9:54:b7:df:26:b1:c3:02:03:07:c1:60:d4:03:02:
f0:dd:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:36 2026 by rpki-client