Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: UvUUN9vSN9ZF1g7dB25mM3cHQaEdZMRQ0Y4BI8j1qHM=
Subject key identifier: 97:D8:20:3C:11:2F:0E:7B:00:46:0B:D5:CD:02:9D:2A:D9:24:14:95
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019FA8621FA743D775CBA040B50ED5687375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0F4D
Signing time: Tue 28 Jul 2026 11:00:30 +0000
Manifest this update: Tue 28 Jul 2026 11:00:30 +0000
Manifest next update: Wed 29 Jul 2026 11:00:30 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: dROfHHeljXffewYDFcv9QL8M1x/bM0G2ehBHyR5O530=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:1f:a7:43:d7:75:cb:a0:40:b5:0e:d5:68:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Jul 28 11:00:30 2026 GMT
Not After : Jul 29 11:00:30 2026 GMT
Subject: CN=97d8203c112f0e7b00460bd5cd029d2ad9241495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:2a:f2:02:9c:d9:e7:7b:ce:fa:cb:4d:ca:
93:d3:6d:be:b7:9d:92:37:af:96:3b:44:23:b6:8a:
7c:60:8b:5a:00:0b:93:b5:be:8d:81:b3:09:25:26:
9a:8a:3f:04:22:d9:1f:4b:d0:a0:78:c1:d1:b0:ed:
64:17:65:f3:84:12:27:f2:49:5a:ee:a0:0c:bf:97:
d7:d1:01:6f:41:f1:16:49:34:5d:a4:c5:71:a6:29:
99:09:54:58:a0:92:57:56:66:63:72:06:7f:25:79:
c4:e8:94:59:0b:24:85:5d:87:ad:bb:a2:1a:e2:ae:
14:3b:44:29:3b:dd:7a:a2:85:43:e6:d0:b5:58:fb:
82:e8:a0:3e:ff:ce:e3:23:3f:8f:32:aa:40:af:51:
1c:7b:4c:06:40:38:79:ab:6c:ff:cf:be:0a:77:43:
1e:00:e1:23:81:92:54:0f:ec:a9:ec:4e:4c:05:eb:
f9:23:0b:94:1b:db:a5:e3:2d:41:68:a7:d3:01:9f:
8b:27:4e:da:43:cd:ea:a2:b4:a5:ed:1a:bf:6a:b2:
3f:11:dc:c4:d8:a3:8c:c2:f8:7d:33:19:d8:9f:bf:
fe:55:4e:fb:45:84:c7:f9:6a:3a:b7:3d:eb:fb:8a:
48:dc:c4:8e:c9:7c:bc:2a:50:66:90:32:db:a7:d9:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:20:3C:11:2F:0E:7B:00:46:0B:D5:CD:02:9D:2A:D9:24:14:95
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:06:ba:03:ce:af:d0:0a:4c:aa:04:d9:fd:d3:83:5e:cf:
85:22:78:1f:9d:90:b3:3f:dc:b7:b2:91:5a:c3:9a:d6:1a:06:
da:48:db:71:ea:af:cd:e9:ba:d9:b4:b0:3e:a9:94:73:4f:68:
0b:d2:6c:21:29:8d:29:de:43:85:b1:f0:57:9b:5a:04:f2:fa:
d5:68:ea:a5:07:ab:ae:fd:24:df:a8:66:f3:c7:52:ce:db:51:
4d:cb:f5:d3:c4:09:48:08:03:1f:84:40:fd:be:b1:8f:04:91:
5b:a4:02:cc:eb:f9:30:46:23:fe:38:e9:4f:cb:61:f8:75:70:
a0:31:2d:84:71:51:59:c5:56:3b:3e:12:cf:43:e5:a2:37:a5:
c0:29:a5:bd:3c:4c:71:ff:e3:2f:d2:a6:43:1a:13:68:18:9b:
c5:af:27:23:8c:a6:41:cb:df:77:cc:77:3a:02:ad:d3:c4:57:
b7:cb:a6:fb:60:93:4a:05:1c:57:01:af:1a:4b:b9:db:85:05:
38:d2:a3:8d:66:c8:e6:1e:31:ce:a6:15:5c:e8:af:ac:cd:a9:
0b:36:34:85:8c:79:cc:85:fc:66:11:1b:d5:69:80:30:0c:01:
50:bc:28:cb:2f:15:c4:b3:9e:dd:66:d0:9f:49:75:bb:fb:54:
a2:01:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:08 2026 by rpki-client