Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: EtY6g1CkGvxco4M9MisLDsZJVUlrsbKKmGYjGtdSlRQ=
Subject key identifier: 8E:6D:51:E4:6F:C6:EA:93:02:60:C1:94:2B:61:4E:BC:E1:AE:51:3D
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019FA9E26EDC4A8D2E8BFC1F9D1FE540D627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1715
Signing time: Tue 28 Jul 2026 18:00:16 +0000
Manifest this update: Tue 28 Jul 2026 18:00:16 +0000
Manifest next update: Wed 29 Jul 2026 18:00:16 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: fR+vPmPTmPNHeZNyHXP5bVdbml/R1sziFH0zCYzfZdE=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:6e:dc:4a:8d:2e:8b:fc:1f:9d:1f:e5:40:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Jul 28 18:00:16 2026 GMT
Not After : Jul 29 18:00:16 2026 GMT
Subject: CN=8e6d51e46fc6ea930260c1942b614ebce1ae513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:6b:c5:6c:4f:1c:94:29:8c:8c:5b:26:b8:
c7:fc:87:d2:a6:a1:87:ce:f4:54:56:5f:00:3b:e6:
1d:cf:7c:29:18:2a:54:7e:78:28:ed:c2:58:4d:a2:
30:ff:df:23:b8:00:04:05:c5:00:b1:fd:19:db:0b:
9b:35:3c:ea:8d:7d:04:a6:4f:f3:b6:db:36:5a:b8:
d8:62:0b:48:8d:1e:82:3f:7e:b1:3f:40:fe:51:65:
7c:bf:51:36:51:06:78:36:73:22:5e:a3:19:d5:e3:
33:97:3a:68:4e:ae:34:f5:e6:af:ae:49:3a:0e:70:
07:50:63:dc:6e:2c:aa:60:f1:3c:ad:e1:72:74:f9:
3c:82:b9:49:2d:bf:71:ee:cd:a2:e4:27:02:a3:23:
4f:a5:47:ec:a7:f4:3d:5a:30:d1:e7:0b:a7:d7:9f:
0e:cb:78:ed:03:47:ef:7b:97:38:7d:20:a9:bf:62:
29:ad:a7:8d:d0:ee:fb:a2:9c:7f:b0:d9:0b:70:2a:
cb:e6:31:61:29:87:13:26:43:38:f8:6d:7f:ff:62:
3d:1e:b7:03:2f:05:c5:f5:ad:08:b9:82:6d:37:f6:
55:d6:31:1b:52:48:d0:1c:ee:24:4f:34:ec:20:71:
88:87:78:f5:d2:c3:2d:07:a1:b4:b5:64:fb:11:a3:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:51:E4:6F:C6:EA:93:02:60:C1:94:2B:61:4E:BC:E1:AE:51:3D
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:94:18:1c:f0:67:65:32:e5:05:74:e6:10:49:bb:d5:98:86:
7c:6f:ed:df:e7:b1:a5:ce:8c:c9:1c:cc:11:11:4e:84:03:16:
05:60:46:7b:37:c5:6e:df:1a:98:63:3c:2f:f6:94:f2:85:a0:
95:6e:f3:65:8a:da:9f:a9:40:a0:b4:47:61:ea:41:b2:69:a7:
db:4c:85:5d:05:f8:bc:2c:c5:82:03:c2:b1:0e:8c:38:4a:f9:
c2:4a:22:67:ce:f5:44:d1:23:0f:2b:ad:05:e5:c2:bf:b9:b1:
17:67:ad:08:12:ed:35:4b:42:48:d3:45:ca:8b:74:c4:8d:bb:
c2:88:50:ac:ff:4f:1d:0b:0d:88:e1:47:37:4b:7e:6e:9b:63:
af:ea:65:7b:c9:27:3a:da:03:9a:9e:f4:86:e4:f8:fc:73:a1:
30:d3:dd:d5:eb:03:2d:91:06:4b:ac:10:27:5b:2f:f2:75:e5:
88:1d:05:7c:3e:39:92:ce:73:e1:36:91:56:3e:ad:07:ce:e7:
f9:fb:3c:db:7f:1b:ac:60:94:76:03:16:fd:a5:d2:92:f8:8c:
9a:87:05:bc:ab:ea:6a:d3:4c:e1:a1:a3:e0:94:36:be:4f:d0:
35:82:ac:c0:18:cc:a7:9e:7c:44:c1:6d:85:6a:10:4d:70:52:
4b:16:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:17 2026 by rpki-client