Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: rMzY1L3+dJnEr2eX3VWNSww+e36bhYILVR+nqJ9lkOY=
Subject key identifier: 37:4D:3C:55:CB:02:C8:86:FC:83:D8:CD:C5:BF:7B:A9:DD:64:2A:D0
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019FA975B2726E403E5A2C54AFAFACC0BDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 041D
Signing time: Tue 28 Jul 2026 16:01:30 +0000
Manifest this update: Tue 28 Jul 2026 16:01:30 +0000
Manifest next update: Wed 29 Jul 2026 16:01:30 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: ompF/E5c4sgHdYEWCCAOMJGdE2M14y9KRVXnayej+20=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:b2:72:6e:40:3e:5a:2c:54:af:af:ac:c0:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Jul 28 16:01:30 2026 GMT
Not After : Jul 29 16:01:30 2026 GMT
Subject: CN=374d3c55cb02c886fc83d8cdc5bf7ba9dd642ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:19:fd:1e:b1:f3:89:42:8c:73:48:f8:49:
38:99:56:4f:ee:65:2d:bd:9d:a9:f6:11:75:75:2a:
e5:19:29:19:c1:73:f6:2a:15:5e:5f:83:e5:f5:21:
fe:ea:cb:67:1e:72:b9:46:51:17:93:26:e6:9c:3b:
50:2c:05:4c:74:fb:a3:9d:84:e0:31:ad:f9:5f:84:
05:60:aa:93:80:9b:d8:0a:9e:37:fc:60:01:94:f2:
89:cf:55:0d:eb:91:19:56:5f:d1:f1:8b:2a:72:51:
2d:e6:a1:cb:20:42:60:b6:a7:31:d3:7c:80:57:44:
a1:88:1c:db:5c:92:4d:fd:af:24:12:f7:f2:a6:73:
23:d0:22:5d:0c:b2:91:a2:8b:e8:3a:c3:20:b0:4a:
e7:4f:6a:51:bd:22:fa:6b:63:f0:ec:44:e8:a1:5f:
23:dd:93:9e:f7:7e:4f:8e:ad:7a:6f:e5:da:9f:54:
5c:fb:29:57:81:3f:5f:01:73:b3:33:e9:dd:49:aa:
67:d3:1a:56:ab:62:35:7d:55:9e:4d:f8:e2:83:c2:
9c:1e:c1:11:1c:f8:14:8f:17:69:34:47:d3:aa:a9:
f9:ff:a9:0a:ff:9c:ce:7e:b6:c1:4c:44:d2:59:b5:
ec:6f:f0:71:c4:c9:d9:b0:ed:2b:38:92:67:45:e7:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:3C:55:CB:02:C8:86:FC:83:D8:CD:C5:BF:7B:A9:DD:64:2A:D0
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:a1:a7:42:a3:48:f5:93:63:16:5a:27:63:98:c5:1a:bb:
1d:82:59:e5:ba:18:e3:d3:a1:07:a9:3e:bc:23:a8:ea:f5:01:
93:77:a4:7f:46:8e:6d:ac:00:2b:c1:04:f6:1a:24:58:14:4a:
78:93:dd:78:ca:2f:c9:62:22:36:cf:c6:b6:e1:92:4a:40:97:
97:3a:6f:df:7e:4e:39:55:8e:f6:c5:ab:0a:6d:25:39:75:1a:
7e:08:64:ca:22:3d:90:26:96:62:f6:2c:ae:b8:e4:a1:b2:3f:
d6:3e:7b:42:3c:9a:e0:4c:aa:68:df:eb:40:7e:8a:b4:fc:85:
73:64:49:3b:53:7a:db:75:02:ee:42:65:53:f8:4e:6e:63:3f:
62:e8:9d:8f:1a:28:87:5d:1c:74:4a:d2:5a:c2:70:37:9f:1d:
64:b2:22:e1:ba:7a:32:f6:52:b9:5a:01:a6:4e:d2:4c:a1:b0:
cf:10:aa:5a:e0:11:4e:13:bd:e7:56:d3:5c:a3:3c:32:a3:17:
4d:5f:d8:09:a2:8c:36:f0:a3:80:8b:6f:fd:93:8f:31:1a:12:
57:fd:71:be:23:bc:fa:c4:3b:08:43:3b:0b:6a:49:c2:0a:90:
93:f3:91:07:08:b4:9f:0e:e7:0a:42:06:dd:a7:0f:79:c0:dd:
88:1e:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:01 2026 by rpki-client