Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: wVvBmP3KoBB7ycg6RFOAnTgOHRfGMqBSz3B+NNlus10=
Subject key identifier: 08:A9:F5:C0:41:45:4F:D6:7A:7B:DE:18:F1:D9:CC:1B:F5:4A:62:0C
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019FA89A299CFE0ADD15AEFB61E2A8017FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 042E
Signing time: Tue 28 Jul 2026 12:01:43 +0000
Manifest this update: Tue 28 Jul 2026 12:01:43 +0000
Manifest next update: Wed 29 Jul 2026 12:01:43 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: fy2mFI2+V1/LSrUu+HzzRDXH/dFWXMPHEgSB+F16zm4=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:29:9c:fe:0a:dd:15:ae:fb:61:e2:a8:01:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Jul 28 12:01:43 2026 GMT
Not After : Jul 29 12:01:43 2026 GMT
Subject: CN=08a9f5c041454fd67a7bde18f1d9cc1bf54a620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:2e:4f:ba:8b:b6:10:ff:da:aa:9c:ff:0c:
3d:e3:da:a0:ab:6d:1b:23:76:46:3e:4c:dc:7c:16:
d9:22:92:f0:78:25:b8:12:76:f6:b8:48:83:22:15:
a2:37:d4:3c:77:9e:32:41:08:da:06:55:f5:e0:79:
35:d7:47:0d:2a:d6:81:50:b0:f9:d8:e6:8a:ea:db:
e0:aa:b2:ee:06:d2:e3:be:cb:0f:78:5e:82:55:33:
f0:c1:39:bc:40:e4:ec:79:30:81:be:35:55:51:ae:
1e:0b:a3:ab:60:d5:57:3a:0f:c8:67:9e:80:74:66:
2d:99:32:8b:70:b3:79:21:b9:99:f3:88:ff:3c:03:
b3:fc:23:ea:50:1c:03:39:87:2f:a0:28:ef:65:7e:
e8:d1:8c:5c:2a:69:5a:ae:e9:91:ff:1f:e4:3c:87:
35:f1:0b:6c:6e:b3:e9:4e:2d:d2:13:73:ad:ae:a0:
07:0e:c0:3e:5a:a7:53:f7:a7:85:40:2a:4f:4e:aa:
cc:44:af:f4:e3:ed:55:f1:8f:c9:7a:1f:9d:3b:bd:
dd:36:c0:9f:3a:4f:b3:e7:ce:9a:71:2b:63:f6:e7:
69:3e:28:d1:ef:b4:d7:0b:0a:95:21:4b:a4:56:90:
75:a0:d5:d3:75:02:f3:b1:a6:68:71:d0:cf:2b:1d:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:F5:C0:41:45:4F:D6:7A:7B:DE:18:F1:D9:CC:1B:F5:4A:62:0C
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:95:7a:76:68:e8:a5:71:a4:d6:08:c0:22:c6:b2:18:8b:
28:0d:9e:9c:21:51:0e:ce:3e:73:3a:ce:1b:68:e9:ee:4c:43:
7b:c5:a0:e8:06:35:ef:e4:8e:d7:36:b8:fd:0e:bf:98:cf:66:
3e:58:bd:11:73:39:87:29:ac:07:53:e4:7d:77:58:fa:b7:5c:
fd:10:04:dd:f9:f5:48:a3:e6:7c:7b:3d:29:6f:7d:22:7d:bd:
e8:54:2a:18:64:32:bc:72:77:d8:de:b4:72:21:31:69:88:6a:
8e:f6:9f:fc:04:27:de:2b:bb:4d:13:e0:28:30:9e:67:a8:04:
9b:fc:c4:d4:5a:4f:ca:c2:02:ad:4c:2b:d2:7f:bb:39:f3:f6:
54:d0:32:53:04:36:90:09:2d:f8:5d:d7:21:f0:54:85:c9:2f:
1e:51:69:13:53:50:8f:6e:65:58:55:9d:05:3f:55:aa:f7:ea:
da:1d:7e:67:64:eb:c0:5d:14:1c:d8:39:43:74:2c:84:24:9c:
b3:27:8c:19:94:34:38:d2:16:9a:f5:f1:e2:ed:f3:7d:58:dc:
e3:3a:ce:94:c8:33:c9:a6:d8:2b:3b:71:ed:99:06:cd:0f:a7:
f2:45:28:5a:3c:6c:e2:0a:40:49:c3:01:c5:3a:80:78:a2:e5:
c5:4c:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:18 2026 by rpki-client