Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: xEGe5diumsI5SUWNBGbHo/wt3mGqrXqP3WiYbnUaKw4=
Subject key identifier: 3B:A7:C3:BE:C9:B8:2B:1A:E1:9A:70:23:21:05:15:8F:9D:13:97:ED
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019FAAF621918BDD5E1947F2E579CE41A19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 134C
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: KtdtnkhykT1o7Qavm4WzooOn9tbg+RzzhdMRXqVz8v8=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:21:91:8b:dd:5e:19:47:f2:e5:79:ce:41:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=3ba7c3bec9b82b1ae19a70232105158f9d1397ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:1a:08:aa:de:1d:50:3b:2a:30:bd:f1:64:
a6:96:41:fb:60:60:94:12:21:50:54:bd:fb:53:31:
8f:00:24:d3:12:36:b7:e2:4c:61:37:a8:85:de:7c:
27:f9:a0:e9:3b:12:2b:50:f9:87:b0:fa:80:b0:a9:
0b:8e:bc:e3:4a:d8:0a:f1:c8:1d:01:eb:53:fc:8b:
af:06:a4:0e:a8:29:aa:57:d8:14:81:a2:ea:a4:d5:
23:3d:2d:99:ac:2e:2a:25:a4:f2:24:26:1f:24:9e:
45:b0:40:4a:6d:b9:08:16:8f:79:54:0e:14:b4:44:
85:ad:3a:12:5c:f0:c8:ec:0b:31:d2:f1:0a:9d:83:
6f:a4:69:b2:d7:ef:91:08:a9:88:94:72:a9:1b:7b:
f6:c2:9a:a8:36:0d:41:da:73:5f:a5:45:3f:57:71:
c2:9d:74:bc:38:4f:8b:e4:ad:2d:5a:7e:1e:9b:3a:
fb:37:aa:57:d4:64:ae:28:1f:ef:95:78:aa:fc:bd:
5e:c5:46:5e:4d:0e:89:45:c4:9e:8c:fb:c4:20:3f:
70:9b:10:34:16:5b:01:28:04:d2:70:82:3e:79:e2:
bf:04:e7:42:42:e6:6d:66:06:b9:2e:9e:36:a3:75:
6e:af:23:ba:34:1e:26:1e:c7:45:1c:51:71:65:c4:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:C3:BE:C9:B8:2B:1A:E1:9A:70:23:21:05:15:8F:9D:13:97:ED
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b8:8f:21:08:80:b2:17:21:43:21:aa:52:2f:50:73:23:37:
50:53:4c:b1:4d:e2:ad:aa:e6:0d:ab:0a:82:26:b6:77:91:b1:
8f:3a:ce:9d:48:e4:08:8e:6f:35:cf:96:d3:58:cd:dc:ef:00:
4b:a1:31:29:5c:9a:98:7e:e1:ee:9e:a8:06:46:89:23:11:6a:
e7:80:f8:d1:20:e5:5a:fe:20:cb:0e:5f:d7:6b:ac:bb:28:fd:
85:2e:98:1f:47:ed:82:06:ae:43:89:f4:91:7a:f9:3f:aa:f9:
09:bd:2e:aa:c9:99:cc:d8:39:83:ca:44:47:7e:9d:5f:96:cd:
5b:1c:21:91:e2:cc:73:f3:32:32:43:36:a8:89:a3:cc:07:37:
d3:e8:d2:8b:c0:8c:a5:07:1d:cc:49:33:cf:38:07:1f:be:af:
7f:e0:bf:b7:e3:bd:d6:50:33:bf:b8:52:0c:a9:e8:00:19:23:
b5:b5:c9:10:9f:46:a9:a6:6f:ac:f7:70:6e:ba:4d:9d:f9:e9:
9a:0f:14:42:0c:82:7e:c6:f9:91:1c:24:19:6d:db:98:c9:af:
59:3f:63:65:89:b5:7a:b1:bc:1f:2d:9c:4a:37:38:7b:90:dd:
c2:58:62:0c:10:10:6a:4e:ee:58:7b:20:8c:7d:1b:92:bc:b7:
b8:fc:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:09 2026 by rpki-client