
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier: nezojsyDJjH0HQ3N0wkoZ/B+9Svd90/rIaadzlKdFr4=
Subject key identifier: 60:B1:28:96:2E:7D:DA:FF:09:59:6D:57:68:3A:97:CE:E6:59:13:05
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 019FABD1763A1C61FF6FC5B7D46B55BF81F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number: 178D
Signing time: Wed 29 Jul 2026 03:00:58 +0000
Manifest this update: Wed 29 Jul 2026 03:00:58 +0000
Manifest next update: Thu 30 Jul 2026 03:00:58 +0000
Files and hashes: 1: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: CRbFYEPn0JGTyi3Z2ZLTw7FMWN1REGvMa7Oo55NJFCs=)
2: BBH0-UEj_izZzjdumwxoDh9yCBo.roa (hash: 50KdJ5A5mJLrmaAuqmKloL7+FBLQEr6+0iywUZ44wnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:76:3a:1c:61:ff:6f:c5:b7:d4:6b:55:bf:81:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jul 29 03:00:58 2026 GMT
Not After : Jul 30 03:00:58 2026 GMT
Subject: CN=60b128962e7ddaff09596d57683a97cee6591305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:17:f3:c9:a8:fe:3e:bd:68:0f:5a:d8:d2:
98:c8:09:1b:49:4b:cc:ea:dc:b3:29:a0:7b:bc:56:
37:c7:63:3c:91:6a:98:1c:8a:fd:77:db:e4:b5:5a:
ea:bd:b1:38:6b:1d:22:7d:16:a0:a6:42:12:e6:82:
52:37:85:e9:81:12:6b:82:3b:ae:01:b4:ac:4f:78:
70:21:7c:e0:d6:32:d1:89:53:ef:95:6b:e8:08:a0:
d1:8b:ec:56:25:5f:14:60:62:25:58:df:67:13:33:
d2:7a:39:47:77:41:43:a6:90:c5:be:a5:7a:86:d6:
ca:b1:33:f3:a6:a4:c3:dc:b8:9a:a8:ce:cc:a4:16:
e8:04:c7:f5:eb:10:b6:17:ed:73:f9:0b:22:c5:01:
5f:1c:88:bf:ef:90:01:84:37:c6:b1:32:f9:73:6a:
32:6e:1a:61:c6:b6:f3:8f:ba:b8:b5:25:bf:a1:c0:
af:b6:e6:12:22:30:a5:0e:d5:b1:8e:25:2b:bc:f2:
f2:63:76:cc:99:a2:77:1c:f9:00:a0:d7:4d:9c:56:
9f:0b:5f:88:b5:c5:3d:19:e7:7b:3a:96:d6:06:5f:
21:51:fb:69:c6:27:af:b9:52:c9:e8:9c:f0:14:36:
db:a2:19:0b:c7:79:2c:55:c2:70:25:0d:71:39:e1:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:28:96:2E:7D:DA:FF:09:59:6D:57:68:3A:97:CE:E6:59:13:05
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:8f:56:0d:0e:3d:3d:7e:af:f2:b6:bf:f1:da:68:ff:a2:
46:f2:36:a0:14:b1:47:c3:dd:07:ce:99:e9:01:c7:b5:78:2b:
bd:57:c4:ce:e0:56:04:38:81:19:09:25:57:4f:01:2d:61:24:
db:11:c3:4c:d4:c3:5d:a0:13:39:b0:83:95:85:c3:0b:12:b5:
49:bb:eb:ef:98:a4:8b:c5:42:d8:43:5d:27:30:f1:a0:08:ec:
d1:24:f4:d3:c8:41:9f:38:f3:ce:4f:36:a2:3a:23:26:45:51:
63:1f:40:d2:c3:b4:28:aa:d8:ba:f9:79:d2:15:19:50:99:ad:
4a:d2:71:d5:6a:e4:24:de:33:9e:44:3c:45:73:cd:0f:ef:55:
7c:b4:a3:93:9c:71:8b:2c:a4:de:58:01:04:1e:00:cc:4a:49:
a1:e6:74:3b:d4:a1:db:ae:b5:96:a5:8e:65:f0:5c:66:bb:b5:
dd:bf:d7:e6:13:c3:65:a4:45:89:a0:43:0e:87:5d:3a:6f:96:
0e:cc:02:84:c6:4e:5a:0f:50:9d:c6:2d:bc:ba:88:bc:b7:40:
76:5b:61:6c:db:11:2f:32:77:de:80:d6:46:b0:e1:d7:61:4e:
72:dc:98:fa:a3:69:66:4d:48:eb:cd:ce:61:10:0b:0e:08:61:
3f:f0:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:36 2026 by rpki-client