Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: i5ob4H5UW8d8w5p45is0tEaxkChUANRrpTietj8oPs0=
Subject key identifier: E4:03:97:FE:31:AC:74:1F:59:93:08:90:E3:68:70:BE:6C:66:19:8B
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 019FAA875D46F7E15A5FC6561E5ED72B3A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 098B
Signing time: Tue 28 Jul 2026 21:00:25 +0000
Manifest this update: Tue 28 Jul 2026 21:00:25 +0000
Manifest next update: Wed 29 Jul 2026 21:00:25 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: 3d7k+BfoHg6Y/Yutz4k28J2LvoCmPs6znmqqXGliYLk=)
2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:5d:46:f7:e1:5a:5f:c6:56:1e:5e:d7:2b:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Jul 28 21:00:25 2026 GMT
Not After : Jul 29 21:00:25 2026 GMT
Subject: CN=e40397fe31ac741f59930890e36870be6c66198b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:29:8e:c0:9f:c0:da:d3:6d:7e:a6:3b:31:
e6:e3:e7:b3:f6:50:c0:7e:7c:80:00:a2:1e:a0:d5:
45:2f:b0:31:c3:40:35:42:b0:95:31:12:41:78:a4:
dd:1f:26:55:c1:9d:26:5e:66:f8:28:15:85:24:e3:
56:06:71:3c:d6:0a:41:e6:48:83:ae:fb:62:57:02:
31:54:04:8a:d2:14:a0:81:57:db:c6:54:65:e1:b0:
47:b4:f3:6b:e1:d5:9c:03:80:d0:6f:f1:24:d9:9a:
a0:e2:3d:70:20:06:7f:70:b1:75:b2:85:bb:94:d0:
4f:cb:db:d1:ae:ff:51:9a:bf:c1:64:b1:76:ea:9b:
96:49:c7:84:ec:9d:b7:26:a9:12:f7:d5:2c:65:13:
1f:c1:bd:62:b5:84:bf:38:ea:75:90:71:00:bf:6e:
ed:7e:a7:db:40:c0:3b:60:99:2f:7f:dc:38:ed:d6:
32:f1:82:af:38:5a:d2:5a:6d:b7:5f:68:85:ae:09:
2e:91:8a:5b:98:92:73:a6:0f:dd:a3:07:f1:ea:e3:
7f:0f:ac:8c:e8:1c:5a:7a:58:54:fa:cb:23:a5:0b:
62:70:a8:90:8c:7d:0b:62:71:98:c4:3b:de:3b:3f:
db:57:3a:90:e5:82:30:a7:12:94:73:9d:9b:ca:85:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:97:FE:31:AC:74:1F:59:93:08:90:E3:68:70:BE:6C:66:19:8B
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:c9:c8:49:1b:ac:d6:17:26:55:a7:36:f8:3c:8a:a4:f9:
b7:8b:3b:7e:c3:5b:94:30:59:68:70:a7:a5:09:2e:0c:37:bc:
ca:f5:18:30:e5:44:0c:0b:b2:7a:99:ee:74:6c:0f:c1:6b:92:
55:84:b2:e7:11:84:cf:2a:17:25:8c:55:18:9e:99:5a:49:59:
cf:fa:3e:2f:80:95:a7:45:c6:25:41:e3:33:6f:11:d1:a1:44:
4d:30:7b:53:ed:6c:36:3d:d1:27:5e:04:4c:96:8a:fa:07:fc:
ee:c0:d3:70:84:11:61:b2:ad:0f:30:8d:cb:13:55:bc:e1:b6:
8b:1f:1f:c1:25:83:98:95:4f:f8:3a:62:8d:33:24:24:f1:02:
86:f6:13:6a:12:98:ad:fe:30:2b:18:05:a2:db:b2:0f:6a:43:
88:12:20:12:8c:66:37:0f:14:5e:5a:d7:7d:9b:a1:f1:93:c0:
c4:59:3e:27:5a:6b:4e:49:aa:e8:d1:f3:b1:9f:c9:1e:f7:51:
f3:9c:79:af:da:d2:68:ed:9a:40:15:b3:10:2c:fa:00:f6:55:
6f:ce:e7:19:8d:76:b5:ce:78:59:ec:45:c6:b3:24:d2:1f:1c:
17:4a:e2:6f:eb:09:36:26:10:dc:96:15:87:b1:2f:47:70:13:
c7:54:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:44 2026 by rpki-client