Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: JZUNtPuaSgggqrPooYqgHlbkpSLdPwCqIAGWgErGeBo=
Subject key identifier: 60:9D:60:E2:9A:03:14:5A:D4:17:EC:D0:8C:EC:97:3B:0C:26:A5:4C
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 019FAE650484255CFBB15964ED0CBA13F563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 15:01:23 +0000
Manifest this update: Wed 29 Jul 2026 15:01:23 +0000
Manifest next update: Thu 30 Jul 2026 15:01:23 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: G4l+Yi1ZVyrtUp72Q/CKfarJcAGE5B5ju0ONdU+ozl0=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:04:84:25:5c:fb:b1:59:64:ed:0c:ba:13:f5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Jul 29 15:01:23 2026 GMT
Not After : Jul 30 15:01:23 2026 GMT
Subject: CN=609d60e29a03145ad417ecd08cec973b0c26a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:ce:ed:17:0b:13:e2:49:a0:c9:6b:86:46:
89:39:8b:89:e9:62:29:cb:8c:da:0f:b6:2b:5d:ad:
06:1b:c1:a5:61:8c:fc:08:ac:52:dd:7b:56:b3:24:
ca:ce:63:5d:a3:fb:71:b3:59:4e:d5:73:7f:fa:0d:
ba:78:a5:9a:01:fb:ec:4d:38:2b:5e:5a:5d:13:b1:
70:3c:6c:5d:25:35:cb:f1:16:43:b8:1e:13:d9:c6:
61:a8:77:26:1f:ef:7c:b7:3f:59:11:a2:61:7f:f0:
57:27:6b:30:4b:43:38:d1:6d:ca:2b:1c:d2:97:76:
bb:e0:11:fe:e7:02:e4:93:08:e6:50:78:8b:d4:7c:
94:55:ed:95:13:7e:8b:4a:ee:45:72:99:9e:4f:98:
91:e2:ee:92:d0:fa:61:ab:af:7a:99:eb:0c:2d:3a:
57:68:ed:72:4c:1e:4a:5e:cb:ec:66:fa:35:5c:75:
c5:b7:4a:3b:ad:82:b1:eb:73:30:06:16:b0:a2:74:
a6:c4:58:8c:1b:82:61:01:8b:1b:e5:9f:9e:ab:e6:
a9:af:a4:58:bf:d1:97:b3:74:42:fc:af:9c:e0:33:
8a:0e:0a:c2:eb:06:34:26:44:9a:72:d2:24:7f:e8:
0d:7e:e1:e6:15:84:d0:a4:03:6b:fe:0f:71:c0:f1:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:60:E2:9A:03:14:5A:D4:17:EC:D0:8C:EC:97:3B:0C:26:A5:4C
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:bd:76:4b:49:cc:cc:9e:5a:7a:73:d1:39:00:05:dd:57:
01:18:89:6c:f2:b8:76:b3:6f:d5:4e:a0:fc:49:d1:b4:f0:e5:
9d:1c:4e:0e:d0:b8:bd:6e:c0:7a:c3:5f:bf:ca:27:d6:d9:d7:
6d:a3:8b:c5:b1:6e:87:ec:0f:ee:6e:44:f1:ec:dd:5c:ba:5e:
16:8d:5f:65:70:de:d1:ca:5b:e4:a1:86:df:44:a3:a3:d0:5c:
ba:d7:70:62:0c:83:6d:b4:2f:2d:52:57:df:5a:5b:ba:c6:85:
f1:c9:1f:c1:62:a6:59:4b:fd:e7:d5:af:de:32:fc:39:e7:4b:
1a:9b:d5:e7:0d:2c:2a:d6:72:8d:fa:df:6c:d9:57:09:ca:5c:
81:4c:cd:09:47:21:b7:39:c8:ca:07:f3:e6:3e:70:dc:e4:72:
60:b2:84:59:a5:2a:be:bd:6b:7e:36:d2:e2:c8:c0:c8:d9:5c:
7e:4f:bf:d6:60:fb:6a:ce:4c:87:bf:cc:8b:f5:c9:c2:c2:9e:
9b:d0:ef:93:9f:14:ad:0a:79:fc:b2:e5:0c:62:d8:1a:ac:c7:
4a:91:ad:d9:b6:e1:dd:f6:e2:3f:7a:69:56:51:6b:01:8e:c8:
e8:08:5f:f1:f0:9c:94:3c:64:e7:22:48:92:4b:af:82:c3:05:
90:cd:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:21:00 2026 by rpki-client