Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: f1Z0ycLDGgXbyZkohbeZfL997bifLBaJarIiZuxwvHc=
Subject key identifier: DF:39:73:F6:0E:6A:75:51:ED:59:3F:0E:8C:07:73:56:49:B1:8F:82
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 019FA93DE908BA4EFEC13CDA82BF5F6DC1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 16F9
Signing time: Tue 28 Jul 2026 15:00:34 +0000
Manifest this update: Tue 28 Jul 2026 15:00:34 +0000
Manifest next update: Wed 29 Jul 2026 15:00:34 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: WykSRcSZ+ONhwQR2FkObKZ6lNfnr8TqKMAhxhzQ/ZWE=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e9:08:ba:4e:fe:c1:3c:da:82:bf:5f:6d:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Jul 28 15:00:34 2026 GMT
Not After : Jul 29 15:00:34 2026 GMT
Subject: CN=df3973f60e6a7551ed593f0e8c07735649b18f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:7e:81:92:2b:ec:4a:27:7f:3d:8e:f1:a7:
df:ef:f1:bd:31:72:17:1c:5d:b8:f5:ab:ad:74:94:
2c:55:8f:18:b2:84:ef:75:51:ec:c8:5f:a0:d3:1b:
fd:46:49:5b:14:7c:56:8f:1b:6c:b3:28:47:72:06:
85:76:18:c6:9b:33:06:05:fe:42:a9:f5:af:22:94:
fa:f1:be:7d:3d:1f:95:0e:2a:97:ac:ce:39:18:90:
c1:74:46:1e:2b:e3:66:47:fb:d5:c0:32:e0:b0:14:
d3:2d:97:98:16:2e:8b:2c:b1:44:25:c3:4c:aa:81:
fa:66:e6:01:b0:3f:01:4e:08:12:1f:11:e6:1d:15:
89:66:a6:27:06:87:73:0e:a6:53:3a:1a:b0:f5:20:
e4:a9:39:14:f0:e7:65:13:a0:05:0d:31:35:39:4e:
b6:29:9d:39:61:ae:f4:11:2c:4a:89:f0:b9:a3:b2:
e0:77:54:e4:ed:95:94:fb:4b:5b:ea:3a:d3:10:cb:
70:a7:ce:6d:1d:6d:b8:2b:e6:2d:10:8d:ad:75:02:
58:bf:c3:df:0b:59:78:f2:e1:d5:29:b0:f1:9d:87:
9d:2e:e5:24:25:99:f1:0d:8c:0a:fb:b1:fc:22:5a:
e5:d2:15:02:d4:3d:50:c8:83:af:4d:80:cb:b0:76:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:39:73:F6:0E:6A:75:51:ED:59:3F:0E:8C:07:73:56:49:B1:8F:82
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:cb:11:70:66:88:1a:df:78:a7:7f:54:c5:fc:8f:a1:70:
bb:de:da:ae:ac:0f:1e:f6:7f:ea:5e:3b:0c:60:11:0a:a3:28:
2c:b7:b9:83:53:de:22:d9:ba:51:22:81:5e:25:00:aa:c0:73:
fd:d7:48:83:09:19:6b:50:b3:e0:53:c2:06:f1:62:67:ec:49:
3b:77:8d:c3:79:3e:fb:90:28:2a:0f:a9:b4:d8:45:dc:18:60:
7b:59:60:7e:c9:96:42:72:3c:88:0f:8c:9e:aa:a1:38:fc:f7:
ef:11:0c:7b:ea:83:86:df:ad:ae:5a:43:72:83:09:bf:a4:70:
65:6f:17:25:b3:b0:e6:ee:98:4b:58:35:0a:7a:cb:1c:41:83:
07:af:53:f6:72:f7:19:43:cd:e9:d1:86:f0:c5:bb:54:88:c0:
91:63:c9:e5:ff:aa:1d:ac:30:6f:91:74:d0:e5:57:ca:73:9b:
58:53:cd:50:c6:64:d4:14:3f:0e:c3:d9:41:ea:6e:35:13:f4:
82:d6:93:02:ae:dd:36:04:19:e3:64:5a:d4:30:99:a8:5e:e6:
83:95:9a:e2:1f:4f:0b:7c:a1:19:f2:21:88:8b:d9:7b:91:85:
bf:f9:5f:23:58:2b:7d:5d:0b:f5:bb:b9:ba:52:4b:09:57:be:
73:db:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:56 2026 by rpki-client