Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: lplyb8wxbC3+A5X72LC+s+JP0WD6ASm49WfvOEMkd0o=
Subject key identifier: D8:F2:BA:D3:C9:5D:02:4B:4F:5A:70:D3:E4:EC:B2:8D:54:46:36:C5
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019FA7F4A6BBA83837F605C50676D8F811DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0B4E
Signing time: Tue 28 Jul 2026 09:00:56 +0000
Manifest this update: Tue 28 Jul 2026 09:00:56 +0000
Manifest next update: Wed 29 Jul 2026 09:00:56 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 4qL4Oqli5dL9ySLWyIEMU8z0DZT6x/Esl/yyMo7hL1w=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:a6:bb:a8:38:37:f6:05:c5:06:76:d8:f8:11:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jul 28 09:00:56 2026 GMT
Not After : Jul 29 09:00:56 2026 GMT
Subject: CN=d8f2bad3c95d024b4f5a70d3e4ecb28d544636c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:92:e4:9f:e2:ec:34:05:d6:b4:00:1e:d7:
77:59:8d:ed:a8:90:91:26:2f:a5:d3:a9:78:8b:d5:
9c:f5:06:83:15:e5:a0:e7:4c:6a:c0:10:98:e9:4c:
05:4a:0f:56:d2:d9:b4:e7:ae:a9:8c:83:3a:f8:4c:
da:05:ce:b9:b2:da:1f:71:9e:20:77:39:b0:cf:59:
cb:99:a9:26:98:c1:e6:45:32:4c:da:42:77:27:6c:
69:a8:1d:42:63:5b:18:71:d9:f6:e9:bd:e4:6d:04:
05:37:e5:8f:ad:f3:35:ec:22:1b:79:f7:db:cd:51:
e5:56:31:8e:ba:99:d7:5e:87:4e:79:a9:4e:43:85:
45:7f:25:9c:66:38:f7:93:24:4a:55:82:c9:8f:9d:
a2:ad:1e:9c:8d:41:ea:fa:36:ee:55:f6:24:72:ca:
99:78:09:c0:19:af:ca:8a:6d:fb:2b:84:7e:b8:72:
52:c6:3e:8b:e7:a5:2f:b5:6e:4e:8c:64:68:8e:c6:
e4:17:63:ad:73:c1:65:07:09:33:a7:9a:88:17:ee:
76:8f:b6:aa:b4:11:20:79:d2:13:0e:89:5d:a1:55:
a6:3f:58:d4:32:48:71:69:db:c2:ca:db:15:b7:8c:
8a:e9:37:36:dd:2a:6d:df:58:02:97:5b:11:3a:66:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:BA:D3:C9:5D:02:4B:4F:5A:70:D3:E4:EC:B2:8D:54:46:36:C5
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:9c:0f:d2:87:2b:c5:19:d1:af:e9:ce:26:6f:5c:ab:43:
d7:77:1c:ee:f8:b5:c6:02:f3:89:c3:bf:bf:a6:c6:2e:35:1e:
dc:7f:12:f2:85:71:9b:85:2c:cf:88:c3:67:fc:bc:49:ee:6e:
5e:80:3e:53:a9:27:be:2e:54:cd:b4:50:e8:63:94:a3:9b:9e:
de:c0:8e:43:af:b1:f3:19:af:ea:81:41:17:23:a8:c3:49:2f:
12:e0:61:44:da:5d:64:34:d6:73:23:47:74:eb:2c:ec:32:16:
c2:cf:f7:d0:f4:b3:c9:be:dc:13:72:f8:23:04:19:89:8c:fa:
34:1d:8e:86:1c:3f:2e:6a:68:7e:d7:53:97:b3:59:fa:40:7b:
e7:b9:49:37:a1:91:27:77:a6:f8:c4:9d:70:e1:23:b7:73:4e:
cc:7e:e4:90:e5:04:1c:cf:36:d1:cf:33:8f:fc:c9:cd:c6:10:
2c:9c:25:0d:de:f9:dd:c3:2a:e6:81:04:64:98:17:73:e0:7d:
76:37:b2:68:41:78:12:16:69:ff:70:f9:0e:7a:7c:2f:12:2f:
a4:d3:1d:8f:a8:6a:19:94:d6:75:bc:6c:47:df:5a:a6:72:fe:
1f:d4:8a:d7:2f:3e:36:63:e6:97:02:0e:87:dc:68:8c:f1:79:
f2:12:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:28 2026 by rpki-client