Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: EIGyhYAPwsKTVvx2RkM21C9/vPWUPjV8BxCaeq+GTnc=
Subject key identifier: BB:E5:7F:D8:62:32:7A:E1:EC:9D:95:74:62:C9:A4:98:DE:52:2C:7E
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019FA82BB17C1BDA512F53D8F3A44C7E5EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 10:01:03 +0000
Manifest this update: Tue 28 Jul 2026 10:01:03 +0000
Manifest next update: Wed 29 Jul 2026 10:01:03 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: 6t5MVHCuYubYMc9vF1/FLZG8MB2lFZkuMnbsOpZE2Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b1:7c:1b:da:51:2f:53:d8:f3:a4:4c:7e:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Jul 28 10:01:03 2026 GMT
Not After : Jul 29 10:01:03 2026 GMT
Subject: CN=bbe57fd862327ae1ec9d957462c9a498de522c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:14:b6:b0:57:da:e7:bc:d5:3d:fe:f6:9e:
0c:b7:77:38:cc:0d:0f:76:6e:dd:dc:19:52:33:39:
57:65:57:5b:5b:b9:73:56:e8:f9:5f:b6:45:87:50:
78:57:22:2b:a9:23:59:1a:7a:47:c1:00:d0:71:f5:
65:21:87:3e:61:f5:8e:e1:ef:6d:e3:72:50:03:ea:
8e:bd:96:bd:4c:c4:eb:bd:2a:79:a6:ef:7d:47:ce:
a7:ba:a1:35:80:1a:38:d8:64:b1:ec:e1:7b:4b:55:
ca:db:a0:b5:0b:a1:c5:32:41:c4:66:a2:71:e6:5a:
20:cc:dd:1d:53:e3:06:24:88:11:2b:88:f9:a1:22:
f0:b9:51:e8:5b:7d:d2:79:ad:f9:91:65:ce:ab:49:
04:1d:fc:af:6c:24:0f:cb:1c:cf:1f:59:4c:16:34:
4e:cf:b9:0a:4a:97:03:dd:14:56:c2:f7:13:7f:05:
d0:ef:68:a5:10:ab:ee:92:8e:c7:b9:95:23:1e:96:
f0:30:71:42:ef:1c:b9:c0:69:e7:b6:18:f2:73:97:
d5:87:ca:c2:30:dd:75:82:35:bd:4c:37:6d:37:37:
46:ed:e8:42:9f:d9:82:38:c0:0a:1f:d3:2f:ef:5a:
8e:e9:89:a8:d8:d8:d3:5d:01:30:c7:6b:4a:41:a8:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:7F:D8:62:32:7A:E1:EC:9D:95:74:62:C9:A4:98:DE:52:2C:7E
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f8:7a:37:95:88:8c:4b:99:74:e5:48:37:f7:50:5a:8f:0a:
2b:be:32:d5:f3:e3:d8:0b:07:51:da:88:08:5e:57:a0:27:e1:
8c:63:43:a8:70:6c:3a:e1:57:1f:cd:9a:21:bd:47:88:30:59:
75:0c:26:1a:6b:c5:83:b0:e2:7d:b6:36:ac:bb:ca:66:51:be:
b7:a6:ca:7e:64:79:cb:b1:c0:1b:98:57:2f:0b:77:08:44:43:
8c:bb:22:f4:af:80:02:fa:62:e3:3c:d4:fb:35:71:70:0a:b8:
12:b0:00:0d:e8:85:5b:c3:56:b9:bc:50:9a:0c:43:ac:f1:df:
02:c2:f7:9c:8e:59:1d:29:f0:93:65:a6:0a:dd:89:96:6d:f7:
af:b4:77:29:2e:5c:8f:20:48:7e:a1:fd:56:6e:c6:62:fc:c6:
84:b3:bf:62:ec:26:a9:57:68:24:93:81:64:d2:3f:74:6d:ee:
a5:c2:5c:11:5b:d0:96:19:85:b6:21:92:db:0a:81:95:1e:9b:
1e:73:c5:6b:d4:67:b1:b3:92:12:f4:0b:37:f4:1b:85:84:e2:
a3:6d:ec:42:9a:2b:ee:3d:5d:3b:f7:30:32:73:53:89:ea:cd:
38:91:5e:aa:67:9e:7e:32:fe:c0:56:da:86:f7:16:08:af:e1:
0f:fc:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:47 2026 by rpki-client