Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: hT1Iott2jMqKvzal4//g+Zv8odRD9pTmRf8FZUaZGLk=
Subject key identifier: DA:88:DB:7B:FE:01:98:5F:0A:AF:7A:5C:FE:21:DE:49:43:1E:7C:76
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019FA90716B64FFD5FDA91CD0BF0C34722B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0A37
Signing time: Tue 28 Jul 2026 14:00:41 +0000
Manifest this update: Tue 28 Jul 2026 14:00:41 +0000
Manifest next update: Wed 29 Jul 2026 14:00:41 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: e5Zx1FZhhyV+5+Xp1RWQRXlwdL3Ja+f9eX9OVMJqPd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:16:b6:4f:fd:5f:da:91:cd:0b:f0:c3:47:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Jul 28 14:00:41 2026 GMT
Not After : Jul 29 14:00:41 2026 GMT
Subject: CN=da88db7bfe01985f0aaf7a5cfe21de49431e7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:fb:45:94:79:4e:66:01:ab:23:8f:5d:a0:
ba:b3:79:1d:88:3f:0c:6d:a4:3c:21:55:72:1f:19:
bc:36:59:c4:f0:42:7a:b1:e4:d2:d8:d4:3e:cc:aa:
18:99:6d:49:58:fb:93:54:bd:ef:3b:ce:55:cf:3c:
f7:16:6e:b1:86:64:9f:d1:8a:2e:1e:62:7d:28:8e:
99:52:c6:57:20:31:a8:e1:4a:4f:80:2e:4d:8b:c5:
e3:cc:57:3a:e4:2d:ad:a4:cd:d7:50:5c:b6:14:88:
5d:fe:85:9b:ee:19:a3:b6:4d:e5:10:d6:dd:8d:03:
29:6f:54:82:ad:12:0d:59:45:4d:46:df:a4:cb:39:
7c:aa:66:d3:be:e8:01:1d:8e:af:5b:5a:34:a4:2d:
de:6f:f7:9e:b1:c9:fd:66:65:29:97:df:98:e3:17:
fc:9c:37:28:3d:37:57:54:93:19:65:ec:d2:54:dc:
83:bf:1c:44:78:31:ea:7a:f3:b5:45:88:d1:c5:15:
14:89:b1:fc:e1:33:27:c0:76:bc:c8:02:8a:48:08:
a0:3b:c1:98:c2:81:47:db:51:d9:1e:d9:1a:11:88:
47:63:b7:c7:88:dc:c1:d9:f6:75:9e:80:c6:37:db:
65:c9:57:26:09:a5:0e:ee:48:c9:97:a9:da:2f:f7:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:88:DB:7B:FE:01:98:5F:0A:AF:7A:5C:FE:21:DE:49:43:1E:7C:76
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:3c:36:91:3e:fb:46:3e:fa:63:5b:f3:98:d2:cc:7a:c2:
56:d2:1d:9e:5b:5a:50:b9:b7:29:e6:d3:d1:28:d6:6a:b0:59:
37:8f:8b:9a:1a:d3:33:72:20:a5:aa:2c:57:01:8d:91:d7:53:
c2:52:7c:4e:56:8f:f7:69:35:52:4f:c3:25:3a:d5:3f:ae:3f:
1e:8a:19:d5:9d:22:f6:1b:cf:3c:f3:dc:a7:b9:dc:e8:f0:05:
7e:03:ee:c9:14:6a:ac:1c:b2:8f:33:5f:b1:99:ad:3e:f4:e6:
b9:14:38:df:0c:53:84:69:a4:ee:58:d3:48:6e:b9:22:b5:06:
4d:e6:bf:3a:a3:04:8b:84:97:fd:ef:de:d8:f7:54:0b:83:1d:
cb:86:5c:72:54:98:d9:c7:56:eb:d6:4c:66:b3:c9:ca:ae:25:
e2:e9:55:66:29:f5:cf:95:9c:6e:8f:89:e8:e9:dc:20:a1:7d:
98:c5:c6:f4:38:f6:08:d8:1b:0a:19:57:51:7e:bb:8b:fe:2b:
70:a6:d7:62:b1:be:23:67:85:4d:2c:98:56:ec:31:ef:09:f3:
e9:b2:77:b9:81:a7:a1:a0:84:ba:2a:d7:84:47:97:c3:5b:b6:
9f:37:f3:2f:98:2e:56:0e:83:fe:e8:be:dc:fd:9d:51:25:10:
11:39:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:18 2026 by rpki-client