Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: R9qREcmNgGFNB2IKqIvCCj9syorMRDa1zkDXlwwKZVs=
Subject key identifier: 00:34:DD:46:D5:BC:59:9D:B4:C6:30:B5:FF:8B:B7:1D:AB:BF:2E:40
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019FAB6337F048F75C1055465DF22DAFBB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0608
Signing time: Wed 29 Jul 2026 01:00:34 +0000
Manifest this update: Wed 29 Jul 2026 01:00:34 +0000
Manifest next update: Thu 30 Jul 2026 01:00:34 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: hKGJLc/PellW5rxAmd3Q4njg29C25RH3Aqyl+pgNDTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:37:f0:48:f7:5c:10:55:46:5d:f2:2d:af:bb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Jul 29 01:00:34 2026 GMT
Not After : Jul 30 01:00:34 2026 GMT
Subject: CN=0034dd46d5bc599db4c630b5ff8bb71dabbf2e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ae:d9:2b:c0:21:7e:5f:5d:83:d2:47:57:
32:14:7b:7f:cd:56:d3:4f:d9:4b:1e:1d:d2:36:5e:
dd:a7:cc:2c:41:c5:05:5e:4f:c5:96:45:d9:88:26:
a3:1c:81:e2:a6:ad:db:9e:54:c9:52:31:98:fe:bb:
b3:20:58:83:d2:27:80:f7:b2:87:7e:c5:e4:9b:48:
ea:ac:ab:87:32:d8:f7:0c:f0:48:29:96:6f:0c:9c:
3a:52:02:82:db:05:2f:bc:60:dd:84:76:1c:3c:1a:
54:f5:19:7c:8f:3a:ea:6f:66:f4:d7:22:29:36:62:
09:d8:6b:00:a5:a8:41:d8:5b:13:ef:54:9f:b3:bb:
a3:90:f3:9c:31:b1:6a:b0:cc:4a:12:ee:72:d1:ff:
df:69:ec:dc:21:3b:33:50:a8:f2:e0:34:63:ac:23:
f0:0a:32:6c:98:41:ba:e1:5a:de:05:d7:fa:bb:2b:
18:a1:61:43:a4:b5:84:f9:4e:7f:38:13:2a:05:29:
61:7e:e8:a8:ff:ac:7c:52:87:a0:2b:8a:b3:d5:0e:
a6:b7:3b:6b:b9:a5:3c:18:d6:88:24:2f:0e:08:15:
ff:ba:40:79:7d:a0:2d:d3:e0:ce:8b:5e:1b:4e:3d:
d3:cd:85:49:65:e1:e1:65:99:cc:a0:e4:b3:c9:74:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:DD:46:D5:BC:59:9D:B4:C6:30:B5:FF:8B:B7:1D:AB:BF:2E:40
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3f:42:fb:24:7d:63:04:0d:ab:eb:dc:ff:e6:fc:c0:7b:54:
46:91:c5:93:17:68:30:06:f3:cd:a0:27:bb:16:d2:a9:2f:75:
2f:56:6d:b6:d7:31:de:e3:f7:82:cb:c5:53:71:38:68:1d:ad:
db:00:15:4a:1c:74:13:fd:46:d9:a7:14:b4:69:25:02:d5:e1:
44:14:67:ba:6b:d6:00:5a:1d:9e:43:ca:4d:a1:96:13:e0:b2:
77:db:77:3a:15:83:84:d5:aa:d0:70:49:c5:b2:8c:14:96:44:
9f:b2:f7:8c:bb:28:43:2e:b9:b1:a0:ec:69:41:b6:eb:b9:9c:
3c:87:e7:51:6a:90:af:6f:e6:b6:55:63:a4:3c:77:71:18:16:
01:89:12:cf:bd:17:e7:92:aa:fc:f0:4d:90:fc:bd:d7:f8:7a:
5c:9a:39:66:e6:7d:b9:71:13:ce:83:ca:1e:06:4d:e4:e7:2a:
ea:af:ca:52:b8:fe:dc:7b:75:67:fa:a0:e9:65:ff:f9:c2:5a:
fb:ae:32:cd:ae:07:b1:aa:6e:ab:88:30:57:b2:99:d0:75:dc:
45:ea:1b:d9:f0:2a:eb:56:ae:b9:89:9c:05:e5:1d:96:f4:14:
26:29:f4:2c:97:ae:9d:46:79:53:ba:0f:ea:5f:d8:95:b2:27:
28:54:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:59 2026 by rpki-client