
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier: RxCEMoLuuqcIajHHYsWpVSZBJdXDkXSyr5weONWN04o=
Subject key identifier: 2F:C0:11:FF:0D:4A:F8:87:08:DB:1C:56:7A:2A:E7:B9:14:C1:AE:4B
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 019FAA19D9B5ACB32AFFF175BE64B04D1FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number: E5
Signing time: Tue 28 Jul 2026 19:00:48 +0000
Manifest this update: Tue 28 Jul 2026 19:00:48 +0000
Manifest next update: Wed 29 Jul 2026 19:00:48 +0000
Files and hashes: 1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: 810WeX3cPlKXwiJbFN5z2uC75qsGlmm3apUy5IrYgKk=)
2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d9:b5:ac:b3:2a:ff:f1:75:be:64:b0:4d:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: Jul 28 19:00:48 2026 GMT
Not After : Jul 29 19:00:48 2026 GMT
Subject: CN=2fc011ff0d4af88708db1c567a2ae7b914c1ae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:5d:cd:1e:8b:21:22:84:14:fc:4e:f3:6f:
5e:7c:75:77:cc:e5:f3:a5:fb:2f:e5:88:e1:76:80:
4c:85:14:93:ff:c3:82:2d:0c:67:a0:a0:c1:fd:0c:
c1:90:88:44:dd:3f:12:72:71:75:0f:a2:81:8b:7f:
e2:2a:6e:2b:86:8e:08:5a:38:0d:8d:b4:86:66:ee:
49:6c:48:c1:f9:0e:ac:2b:13:19:45:b8:2b:c5:52:
f2:1d:df:6d:9d:3d:ee:19:1d:72:86:29:84:34:42:
7d:22:70:04:6b:ce:0d:45:96:f6:6b:2a:b4:ee:e1:
40:04:ae:d1:4d:b7:f1:d0:a9:03:e1:be:76:35:a0:
bc:5a:df:0a:a7:8e:63:fa:83:17:26:14:aa:6e:ea:
7b:42:d7:47:3e:a8:34:2a:84:88:60:c3:53:ea:cd:
c6:14:29:39:3a:f6:08:e4:d2:f3:50:a3:1d:dc:92:
cf:e1:76:c8:94:69:50:53:95:3a:23:44:15:00:76:
54:3f:47:5e:b6:35:b0:5d:f3:eb:b8:74:8f:1d:70:
f2:77:47:ba:dc:ec:b2:f3:4d:37:29:ec:1a:f5:7b:
c5:2a:63:d9:38:05:db:95:b6:f6:ba:88:d6:b4:e9:
8b:fc:ac:99:6a:c4:7e:f9:f1:ed:6b:37:6e:9a:cd:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:11:FF:0D:4A:F8:87:08:DB:1C:56:7A:2A:E7:B9:14:C1:AE:4B
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:66:2b:4f:80:af:64:c2:e7:5f:29:b5:7f:1e:e5:80:f2:
07:fe:88:f3:02:77:4c:6c:be:bc:bd:78:e2:6b:d8:57:24:60:
54:34:39:c6:94:ad:65:ed:80:a4:91:69:96:26:a3:da:77:2b:
42:61:89:44:aa:6f:e6:d4:ce:af:3a:11:7a:50:3b:19:14:ab:
ac:b8:19:10:85:c6:9c:9b:d0:81:37:58:ae:9f:02:69:64:7e:
57:51:9b:c9:13:1d:a1:54:fc:af:a1:fd:fe:cf:9a:7e:97:3d:
41:10:92:e0:98:57:f7:0f:9c:0d:da:d7:c6:af:eb:3d:e2:f3:
c1:c4:e3:b8:3e:07:e1:d0:8b:c6:92:ea:cb:e8:a1:87:32:43:
f8:5d:d2:28:9b:1c:43:1d:9b:49:fe:5c:87:fa:15:2f:80:96:
b7:15:c2:68:fe:b2:7c:5b:1c:f8:38:3a:b3:34:a9:4f:59:0e:
2d:13:55:cc:51:6e:fc:8d:eb:96:47:5b:03:02:3f:3c:ce:43:
fd:88:53:f5:65:e1:05:f0:95:6c:4e:31:ad:6e:a0:eb:3c:d3:
c2:05:8e:10:1f:cf:9f:e6:41:ca:07:d3:87:d8:8e:c6:ad:ae:
70:e3:00:12:81:63:5e:36:31:74:d7:73:c4:9f:96:de:d1:df:
15:01:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:33 2026 by rpki-client