Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: tZjXwlNt+mDG/NecjKQ+4JzbQJRerfkezmIr0K4Uk0w=
Subject key identifier: 3B:8B:91:FE:91:5B:33:D4:3F:75:9E:BE:2D:FA:CE:DD:EE:89:0C:D6
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019FAA50638C7A5F6318FC23070F9BEA0B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 10B4
Signing time: Tue 28 Jul 2026 20:00:22 +0000
Manifest this update: Tue 28 Jul 2026 20:00:22 +0000
Manifest next update: Wed 29 Jul 2026 20:00:22 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: bfAg5yxAJiwAc5JBiDviQL/OFv2R+DiC6haxajt5/ak=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:63:8c:7a:5f:63:18:fc:23:07:0f:9b:ea:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jul 28 20:00:22 2026 GMT
Not After : Jul 29 20:00:22 2026 GMT
Subject: CN=3b8b91fe915b33d43f759ebe2dfaceddee890cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:d3:3d:76:fe:e3:83:ed:21:f7:9e:ea:2a:
f7:12:11:3e:3c:61:f6:53:44:59:b1:ec:2f:08:e6:
57:c1:c2:c6:71:60:43:a9:61:f5:7a:46:74:87:06:
ec:c5:ad:e7:42:64:b4:6e:a4:f3:f6:4c:1b:71:ca:
a6:f6:1d:9e:08:69:18:18:03:61:93:32:d5:b3:99:
a9:51:56:9e:8f:64:25:e1:68:ca:7e:97:54:a8:02:
59:44:3c:4b:14:c5:73:a3:9d:23:a8:b2:67:50:8a:
7b:b9:85:fe:5f:07:44:66:cd:f7:25:45:7b:0e:b9:
6f:5f:e3:f7:e7:12:6b:04:ae:27:d9:9c:02:33:6f:
2d:26:57:33:1f:68:18:3c:2a:e9:8a:36:5b:5a:2b:
a3:d0:26:a1:ea:83:c2:1f:d1:10:b3:c0:b7:04:aa:
91:02:7b:84:53:af:dc:89:f5:ed:04:51:28:98:a4:
27:d6:c1:8b:ad:6b:a1:05:3c:23:4c:e2:e6:0c:84:
48:c5:d0:ea:ab:eb:5e:a1:55:5c:a7:e1:71:49:43:
e0:0c:28:cb:82:86:ec:dc:ad:db:d6:74:d9:39:2d:
30:b9:04:63:8e:57:56:5c:63:35:38:d0:a1:50:0c:
4b:fa:e9:08:c7:cc:33:05:4a:46:5a:30:42:78:a9:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:91:FE:91:5B:33:D4:3F:75:9E:BE:2D:FA:CE:DD:EE:89:0C:D6
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:32:8b:95:ed:1c:21:eb:c7:ae:95:b1:67:cd:73:37:15:6c:
27:41:78:0a:dd:29:75:23:3b:c7:1e:1b:5e:a3:73:5c:f2:20:
4b:82:de:6c:b6:82:57:a1:75:67:89:af:d2:a9:e2:b1:63:b1:
2b:ed:c5:9a:e4:fe:d9:34:22:be:03:86:39:d3:10:14:fd:a8:
9e:89:12:03:da:3c:82:cc:3e:34:75:17:92:bc:5d:e2:ac:6f:
fa:bf:93:8b:1e:98:c2:b8:37:ad:e4:4b:f1:97:de:58:a1:c3:
25:17:c5:29:eb:d4:a8:7a:ae:f7:37:7b:4e:a1:5a:cb:0d:d4:
a5:7b:37:2e:80:81:12:ce:3b:61:17:a8:73:e4:58:31:27:42:
5d:ee:c1:3b:b2:68:16:10:1c:2b:7d:79:f3:6b:1e:21:a2:02:
4c:70:6b:55:da:e1:34:d7:85:bb:cd:c3:3a:ff:02:a0:b5:4c:
15:f9:1d:a7:2b:9a:c7:40:a7:10:ce:5c:74:d2:b6:3d:58:45:
4f:c1:a7:58:fe:ce:37:98:a9:67:ec:5f:a9:14:78:1a:af:3f:
62:71:c3:07:1d:21:78:93:78:6a:c1:dd:a9:71:ef:73:ce:78:
4f:7f:b4:6b:c7:21:25:fd:90:98:fa:ef:96:2c:4a:fe:e1:da:
18:26:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:20 2026 by rpki-client