Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 1nSNoUEroPRPYkNRDYPgsOipHDH1WNrSBveC1yYUoaY=
Subject key identifier: 2F:1C:45:87:99:A2:26:84:57:D6:58:84:08:51:7C:93:2D:C4:18:28
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019FAAF520A6B5240524B089DD4B3D58080D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 23:00:18 +0000
Manifest this update: Tue 28 Jul 2026 23:00:18 +0000
Manifest next update: Wed 29 Jul 2026 23:00:18 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: Am/mNNMJOj1ajLBthw0inJn/IL2AkfcXgGlDK1e+J74=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:20:a6:b5:24:05:24:b0:89:dd:4b:3d:58:08:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jul 28 23:00:18 2026 GMT
Not After : Jul 29 23:00:18 2026 GMT
Subject: CN=2f1c458799a2268457d6588408517c932dc41828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:a4:8e:a5:0e:1b:07:62:d7:00:d2:db:a0:
71:81:fd:53:8f:7a:2b:45:2d:e8:fe:b2:ff:f8:2e:
91:71:44:51:b9:97:b2:94:6a:9b:f9:9e:6e:71:46:
87:3c:e4:dd:65:57:84:fe:1c:ea:7c:f2:ce:f3:79:
8b:fd:70:9c:d3:03:99:47:e9:f9:f0:6d:61:2e:2d:
dd:62:3e:9f:df:0a:ef:70:d9:76:cb:7f:b3:d7:47:
e8:89:3e:ec:dc:1c:1e:41:4c:aa:86:50:c2:35:de:
a0:24:60:13:7d:3c:eb:32:3b:c6:94:24:25:aa:e3:
f4:46:47:a4:39:89:5d:eb:bd:1e:6e:a1:72:77:c1:
61:e1:25:d0:f1:ca:9e:80:c1:91:38:80:c8:4a:18:
c4:a5:c8:06:27:e6:b8:6c:b3:c3:cd:50:a3:1f:02:
d3:6b:b2:a9:85:98:58:0a:be:4f:25:8c:65:40:8e:
02:9a:2b:23:73:8a:fd:40:c8:21:12:91:69:1a:4b:
98:4a:de:4b:7d:50:2e:9a:bd:07:24:c0:b7:9d:5c:
37:9f:9d:36:50:68:b3:cf:79:e5:de:93:0d:29:b9:
27:aa:b5:2a:2c:99:e9:29:f4:c4:fa:17:f3:fb:20:
0b:28:d0:ef:8c:64:11:7a:ce:13:fd:7b:33:7f:23:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:45:87:99:A2:26:84:57:D6:58:84:08:51:7C:93:2D:C4:18:28
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:f4:3e:01:01:a8:6c:f4:c5:b5:71:a4:2a:00:8e:e5:31:
f3:22:8b:13:08:98:2a:62:3c:b6:c2:34:c3:af:9c:ea:f8:ea:
c7:bc:b1:af:33:a4:b1:44:05:bf:3d:86:11:3f:9c:07:0b:44:
8b:b6:13:a4:b5:04:4a:d4:b9:46:b2:ce:72:1d:d0:44:4c:12:
96:0f:93:be:4c:bf:5e:33:ab:1c:c2:43:47:88:90:fc:82:26:
5f:89:e2:ce:72:d2:dd:99:5c:c1:76:ba:43:9a:e8:53:9a:f5:
ac:47:ad:74:e1:ec:a3:06:bb:ba:d2:33:31:b6:06:b0:4c:35:
b6:d7:ea:f2:ef:ef:8e:a9:2b:50:e5:40:9d:69:70:57:2f:94:
ec:05:b9:46:ab:32:36:58:e7:7d:5e:b1:af:ef:6d:40:c6:6d:
a6:26:ab:04:2b:4f:28:8c:c7:70:c2:91:e5:1c:d6:81:4e:48:
48:b8:5d:1c:0e:a7:b5:06:2c:fb:29:eb:d8:3c:7f:da:1e:87:
d4:cc:7f:33:87:4d:67:2d:7d:69:46:4f:e4:1a:af:64:ab:07:
23:1e:03:49:39:1a:5b:aa:b7:62:5a:ad:6e:9f:4c:9c:f1:b8:
a5:95:fa:36:d4:8a:2c:f8:c4:72:88:91:fb:ae:6b:50:00:1f:
f0:34:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:14 2026 by rpki-client