
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
File: 9nBodmrYwI61UovBquRS_UAQt28.mft (raw, json)
Hash identifier: aRp/PZhe3QrNTT4WK6Bgw5yauYs1+6gY84lnc3BGsWU=
Subject key identifier: DD:B0:BD:65:64:ED:71:A2:D4:C4:11:CE:1E:8D:F4:DF:3B:B9:51:95
Authority key identifier: F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
Certificate issuer: /CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Certificate serial: 019FA898EF017373F7F35D1CCDF6BD550410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:22 +0000
Manifest this update: Tue 28 Jul 2026 12:00:22 +0000
Manifest next update: Wed 29 Jul 2026 12:00:22 +0000
Files and hashes: 1: 9nBodmrYwI61UovBquRS_UAQt28.crl (hash: VbN4YmqSBMy1qs9iXGcr6mZeF49gLUKQQKJzQME9uBs=)
2: NIKDJQF8JbqfVTqA1noObiOx-Eo.asa (hash: UMnWgAWLwENoUzr9jwUQCzxce2UUZVyb7ZrbelUcUro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:ef:01:73:73:f7:f3:5d:1c:cd:f6:bd:55:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Validity
Not Before: Jul 28 12:00:22 2026 GMT
Not After : Jul 29 12:00:22 2026 GMT
Subject: CN=ddb0bd6564ed71a2d4c411ce1e8df4df3bb95195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:ae:3d:bd:31:50:40:a3:72:b0:b1:08:1a:
40:8a:3a:34:13:d8:74:e7:e8:d4:d0:7e:7d:2a:5d:
31:17:09:f8:51:52:b5:fa:b1:b2:68:05:50:f5:70:
e2:30:7f:5c:38:ce:54:b0:70:b5:ee:b3:e7:d6:1b:
29:9a:65:23:c3:7c:cb:ad:b3:75:fd:07:ed:03:26:
67:18:68:a5:30:28:b0:ef:4c:dc:18:3e:a1:5e:8b:
51:40:73:8a:03:3a:c7:7d:db:5a:08:e4:3b:6f:6d:
b3:e4:3c:b0:04:55:01:cd:24:a1:fc:57:a0:7a:d5:
ad:2c:51:cc:6a:04:49:14:90:15:5a:f9:a3:3b:52:
e5:71:72:8b:04:f5:0a:e2:1a:97:fd:0e:be:89:53:
3e:05:01:de:58:55:f6:f6:a1:12:8e:b9:86:33:56:
08:72:e4:ad:be:8a:99:7d:c2:cb:e0:5c:9e:6e:10:
de:1a:97:d0:b7:3a:00:18:f4:7a:fe:f3:04:39:a9:
fb:c0:d0:bd:f9:ae:85:1a:90:49:b4:a6:23:82:61:
2b:b2:2a:6e:2d:c5:45:68:a4:16:19:23:d5:a9:60:
9c:a4:02:52:42:6d:db:b2:e9:b3:c3:8c:da:53:39:
38:f8:ed:1a:25:4b:78:d3:be:86:67:45:c3:73:f8:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:BD:65:64:ED:71:A2:D4:C4:11:CE:1E:8D:F4:DF:3B:B9:51:95
X509v3 Authority Key Identifier:
keyid:F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:d9:e2:c9:6d:10:71:2f:b0:3e:bb:76:b0:8a:5b:ea:bb:
5d:1f:70:05:f2:af:20:c9:ba:b6:3f:82:1a:49:3d:16:99:40:
c8:6b:57:55:5e:db:5b:0a:56:97:b4:47:aa:af:cd:10:2a:23:
66:68:d2:17:df:c4:f0:a1:d4:aa:5f:fd:c8:5e:69:8d:47:2f:
ed:d1:a3:dc:63:3e:43:0e:d4:2c:47:40:a3:1f:76:d3:3f:a5:
10:4b:7a:b0:5b:65:88:11:b3:c6:0a:d2:0b:39:f6:2a:d6:05:
31:ef:bb:e1:c2:bd:0f:79:6b:b7:ce:03:d7:d9:df:30:eb:17:
00:6a:bc:15:23:00:bf:23:f1:0b:a4:09:e2:00:46:eb:87:0d:
0d:56:3a:e1:2b:94:9a:ff:83:89:4f:12:1e:8b:cc:73:14:ac:
02:1a:ec:70:cf:ae:ee:89:9c:25:5a:18:75:50:a1:39:d2:f8:
13:ee:cb:f5:0d:09:43:4d:9f:1a:2c:ed:1e:7b:bd:8e:c5:05:
ec:45:eb:0c:b4:21:8a:de:07:37:e6:af:01:f8:c1:fc:de:aa:
c9:0a:5a:e5:32:ee:5e:f5:e0:05:f9:e4:47:a6:bc:ef:a8:53:
05:0b:fd:8b:54:20:ba:23:9c:fd:e8:23:73:df:59:a3:f0:79:
36:07:cf:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omO8Bc3P3810czfa9VQQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzA2ODc2NmFkOGMwOGViNTUyOGJjMWFhZTQ1MmZkNDAx
MGI3NmYwHhcNMjYwNzI4MTIwMDIyWhcNMjYwNzI5MTIwMDIyWjAzMTEwLwYDVQQD
EyhkZGIwYmQ2NTY0ZWQ3MWEyZDRjNDExY2UxZThkZjRkZjNiYjk1MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMOuPb0xUECjcrCxCBpAijo0E9h0
5+jU0H59Kl0xFwn4UVK1+rGyaAVQ9XDiMH9cOM5UsHC17rPn1hspmmUjw3zLrbN1
/QftAyZnGGilMCiw70zcGD6hXotRQHOKAzrHfdtaCOQ7b22z5DywBFUBzSSh/Feg
etWtLFHMagRJFJAVWvmjO1LlcXKLBPUK4hqX/Q6+iVM+BQHeWFX29qESjrmGM1YI
cuStvoqZfcLL4FyebhDeGpfQtzoAGPR6/vMEOan7wNC9+a6FGpBJtKYjgmErsipu
LcVFaKQWGSPVqWCcpAJSQm3bsumzw4zaUzk4+O0aJUt4076GZ0XDc/hQtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2wvWVk7XGi1MQRzh6N9N87uVGVMB8GA1UdIwQY
MBaAFPZwaHZq2MCOtVKLwarkUv1AELdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5Cb2Rtcll3STYxVW92QnF1UlNfVUFRdDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lNjc1NWYtNGExYS00ZTEwLWFlMzUt
ZjQ5Nzg0YzQ3ODkzLzEvOW5Cb2Rtcll3STYxVW92QnF1UlNfVUFRdDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9lNjc1NWYtNGExYS00ZTEwLWFlMzUtZjQ5Nzg0YzQ3ODkz
LzEvOW5Cb2Rtcll3STYxVW92QnF1UlNfVUFRdDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdnZ4slt
EHEvsD67drCKW+q7XR9wBfKvIMm6tj+CGkk9FplAyGtXVV7bWwpWl7RHqq/NECoj
ZmjSF9/E8KHUql/9yF5pjUcv7dGj3GM+Qw7ULEdAox920z+lEEt6sFtliBGzxgrS
Czn2KtYFMe+74cK9D3lrt84D19nfMOsXAGq8FSMAvyPxC6QJ4gBG64cNDVY64SuU
mv+DiU8SHovMcxSsAhrscM+u7omcJVoYdVChOdL4E+7L9Q0JQ02fGiztHnu9jsUF
7EXrDLQhit4HN+avAfjB/N6qyQpa5TLuXvXgBfnkR6a876hTBQv9i1QguiOc/egj
c99Zo/B5NgfP5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:54:30 2026 by rpki-client