Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: fknSvVqJzgmmAAh6YPdv4dWse2gCUXyKks9noslmwBg=
Subject key identifier: E1:D0:81:94:BF:BF:EE:F4:8A:7F:53:41:F6:8E:37:E9:78:2A:F8:CD
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019FAA50BC209088E07530CF5147C43139FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 06D2
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: tNu1FhBPHdYW7XmsI19vozmST+Nc9dMyeznp4ByzXkg=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bc:20:90:88:e0:75:30:cf:51:47:c4:31:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=e1d08194bfbfeef48a7f5341f68e37e9782af8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:33:ea:49:e7:07:d7:89:0c:41:2a:47:e5:
9a:3a:c8:48:bc:4e:55:c7:3b:dd:c4:75:9e:37:b2:
26:50:e3:6f:77:08:e0:5f:69:e5:8d:ee:f8:e5:ac:
3e:e9:b0:da:b7:6f:19:9f:9c:a4:ad:bd:ed:8b:4a:
37:af:c0:af:65:59:15:c3:a5:3d:38:a9:a6:49:29:
ca:a9:24:ed:38:9e:e3:df:0e:c0:c2:7f:5c:9a:2b:
bc:d6:69:49:19:53:ce:f3:47:98:50:c1:2d:20:ae:
d3:dc:e5:2b:8a:0a:d3:71:d8:74:90:10:1e:3c:d9:
8e:30:6f:96:40:f2:b4:d2:50:79:c9:bc:80:96:26:
fc:98:87:96:d2:b3:19:43:0f:98:b2:dd:75:32:de:
08:a3:9c:f0:0a:b5:1a:ed:b1:04:19:fb:6e:4a:d4:
e2:03:aa:73:4c:3f:92:32:9f:29:61:f7:03:9f:41:
3b:ed:4c:9e:4e:24:c7:73:76:0e:95:fc:aa:1e:4a:
5b:a7:f7:b7:93:09:94:c3:76:87:1e:84:46:c4:c1:
07:3d:a1:24:a5:24:a3:6a:cc:0c:fa:4c:b0:32:36:
b2:84:01:57:6e:22:d3:55:70:62:9a:c1:f8:a3:42:
31:54:e2:ff:42:53:b1:5b:38:29:63:a6:50:89:29:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:81:94:BF:BF:EE:F4:8A:7F:53:41:F6:8E:37:E9:78:2A:F8:CD
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:29:ae:33:ab:b4:2e:0d:d2:ea:42:04:a2:59:3e:a7:6e:dd:
b5:c2:79:ed:09:42:ed:8b:9d:ab:b0:21:7b:d2:6e:04:70:53:
99:1b:52:24:77:44:2c:c1:cf:75:fb:1f:a7:e2:15:e9:e1:ed:
3d:37:62:09:3e:62:28:64:70:8a:6a:6b:bf:1a:e5:d4:bf:c0:
33:0d:ad:fe:9f:38:28:c3:10:7e:13:f8:5f:ae:5a:ae:86:1d:
b9:dd:5b:c8:8b:e2:6a:e3:cf:1c:2b:11:c1:37:04:e5:3e:94:
e1:39:86:2f:3f:1c:2e:98:e0:98:d2:1d:cb:ab:b5:64:16:e7:
4d:5a:bc:3a:30:f0:cf:3b:d0:e6:b7:9e:9b:44:20:6a:bc:96:
22:4c:42:69:56:cd:cb:1b:10:42:de:4c:a3:fe:11:d4:b3:f9:
36:a2:e1:ae:09:8b:85:bc:b9:29:80:b9:77:21:6c:8a:1b:29:
f0:f8:3b:9d:72:26:aa:1b:4e:7d:0c:b9:06:30:7e:62:d1:70:
ed:79:4b:06:6f:9a:26:74:30:0c:55:e8:74:bd:15:6c:aa:57:
f6:7a:94:37:bf:1e:49:34:62:1a:40:d2:45:9c:e9:a1:72:79:
f7:b8:47:7a:74:c4:60:8c:6d:a2:6e:8e:2f:68:13:33:e0:c5:
e5:90:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:35 2026 by rpki-client