Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: b8dGcziOnkju0SU0BN7ygUOW0oevX2GNwvybVMEDTu8=
Subject key identifier: E7:CF:7D:E8:93:E1:0E:EC:C2:A4:5F:88:EE:93:A1:11:FE:B3:A4:53
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019DA4F8B89D1B823190FBC1D7B13FB3D7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0323
Signing time: Sun 19 Apr 2026 09:00:56 +0000
Manifest this update: Sun 19 Apr 2026 09:00:56 +0000
Manifest next update: Mon 20 Apr 2026 09:00:56 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: GFCXYXHG6bbBdvVyICbqcgzYeIjnWFUt0CQ+MvO/XSA=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:b8:9d:1b:82:31:90:fb:c1:d7:b1:3f:b3:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Apr 19 09:00:56 2026 GMT
Not After : Apr 20 09:00:56 2026 GMT
Subject: CN=e7cf7de893e10eecc2a45f88ee93a111feb3a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:d4:75:16:76:1b:27:2c:3f:63:58:a7:10:
0d:57:26:e3:dd:c6:21:f2:29:0a:73:2e:de:c9:f9:
de:dc:9d:a8:ef:48:a1:85:a0:8e:a3:52:90:f7:52:
a0:d4:f4:11:8d:86:1f:f9:2e:41:a3:37:0e:d4:9c:
90:73:0e:c1:f4:7f:0d:bc:00:4b:4f:33:75:b3:17:
8d:95:ee:41:55:97:ba:58:3a:4a:8c:2e:88:d9:93:
72:ab:72:a2:e9:86:87:4f:9a:e5:75:f2:6d:9f:76:
09:b1:9b:94:6a:4e:6f:cc:51:1d:da:84:54:0e:0f:
d0:66:56:ef:09:97:6c:08:9a:14:e6:a8:0b:51:29:
50:52:f4:38:fd:7e:eb:c8:a5:93:7f:b4:ef:58:70:
bd:66:f0:7b:69:14:c2:5b:f0:53:29:41:db:3c:1c:
56:8a:02:e8:91:3b:49:e4:a2:d0:ff:41:5b:d5:54:
fa:f6:3b:dc:41:42:c2:bd:8a:9e:c5:42:25:7c:3a:
25:05:d2:56:f6:96:98:0f:79:75:cd:83:3c:95:61:
96:c9:3c:68:fc:d8:04:3a:6f:5b:c1:dc:de:15:9c:
ef:f7:33:3a:5d:9e:14:f2:97:c1:e5:6e:f3:52:22:
99:f5:39:21:a7:fd:a7:ff:6b:95:0b:28:9b:89:68:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:7D:E8:93:E1:0E:EC:C2:A4:5F:88:EE:93:A1:11:FE:B3:A4:53
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:af:ba:7d:0c:2b:9e:60:54:9d:d0:7f:c8:4d:02:46:6f:
3d:04:61:63:4b:c9:16:89:d4:db:69:1d:7a:63:8f:f9:c6:56:
fd:dc:46:7d:92:55:ad:29:3e:e4:15:05:39:58:ec:d9:c8:0c:
4a:22:e7:fa:05:8b:31:72:9c:68:49:9d:9c:95:75:a4:d5:6a:
7f:9b:b8:78:b8:2e:2a:a1:1a:23:79:ee:c5:92:fa:50:7d:e7:
44:bb:06:ef:e7:14:c9:9c:63:26:19:d1:09:59:ef:06:89:26:
2c:31:43:97:3a:ef:8e:e6:0b:b7:07:51:b5:77:e9:43:3c:69:
c1:c3:e1:ea:c8:5c:f7:bd:87:51:3d:cc:3a:7f:bb:69:13:9b:
89:47:6e:f7:82:47:d5:40:8b:68:e9:a7:9e:15:18:8f:fb:9c:
22:14:41:aa:ce:58:4d:e3:ed:18:78:94:60:ff:6e:a2:29:46:
84:2f:75:58:9f:53:0b:16:55:80:83:2b:dd:d6:d3:e2:7d:39:
74:4f:e5:97:e5:3b:4c:a5:ed:a6:86:6f:30:63:97:02:d0:6c:
f0:0a:f5:c4:f6:f2:e4:00:dd:72:ed:02:b4:54:7c:86:9a:ee:
e2:82:fc:6e:69:ca:de:7e:43:94:13:10:f3:68:15:84:af:9a:
3e:d5:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:50 2026 by rpki-client