Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File: 9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier: /POnUIS3M1kNBva8vxXKdGQYW5uKDNrdsRlMm8QITJ4=
Subject key identifier: DA:BF:41:8D:6D:02:4E:D2:39:7D:6E:38:A6:F8:7F:07:03:BE:66:0C
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer: /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial: 41A2CD3D438E6B7C03EA9FC151BAEA196E1BE244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number: 0103
Signing time: Tue 28 Jul 2026 11:23:22 +0000
Manifest this update: Tue 28 Jul 2026 11:18:22 +0000
Manifest next update: Wed 29 Jul 2026 11:59:22 +0000
Files and hashes: 1: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
2: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: A+7ge93yao23E9B1v9TLNgtGVz4ygnDogrHWDuR2VJ8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a2:cd:3d:43:8e:6b:7c:03:ea:9f:c1:51:ba:ea:19:6e:1b:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Validity
Not Before: Jul 28 11:18:22 2026 GMT
Not After : Jul 29 11:59:22 2026 GMT
Subject: CN=DABF418D6D024ED2397D6E38A6F87F0703BE660C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:0f:4b:e4:5c:9f:d3:12:5d:bf:60:38:e1:
c6:2b:35:e7:8a:2c:23:c3:d5:f7:76:fb:54:67:2b:
ba:dd:48:31:d7:b9:d6:9f:eb:3b:a6:db:37:58:e6:
43:e9:81:9b:5a:7c:d7:e6:8b:70:12:3a:cc:c8:ea:
12:b9:5b:c7:63:ba:fb:2c:f9:81:22:8a:31:7a:63:
7d:32:7b:14:28:7c:0f:00:1a:15:06:f1:c3:9c:31:
9e:14:b1:8a:d2:3f:61:2e:ff:50:a7:94:b5:ba:45:
dc:1b:66:db:9f:a0:3b:90:a1:89:26:ca:26:b5:c7:
b8:a7:d5:3c:82:44:1e:ea:f4:de:09:27:01:80:e6:
b2:5d:99:0b:21:b4:3b:e0:2f:60:24:c3:91:57:4c:
9c:1a:a2:80:f0:74:82:49:81:33:40:11:51:95:49:
05:f7:6a:aa:8c:9c:1d:7f:c5:41:d7:fd:64:ac:b3:
98:91:38:8a:8c:4d:a1:0a:e6:fb:10:96:7f:f9:21:
bc:25:25:57:49:69:4a:3a:89:07:d4:f5:04:be:00:
17:3a:54:bd:98:31:5b:25:72:75:42:6a:13:80:ad:
2a:5a:03:bf:9f:6e:90:dc:60:fa:3f:1b:d7:7c:48:
c8:de:f5:f2:c6:30:3a:a7:3c:49:76:7b:fd:16:93:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:41:8D:6D:02:4E:D2:39:7D:6E:38:A6:F8:7F:07:03:BE:66:0C
X509v3 Authority Key Identifier:
keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:a0:77:47:9f:38:aa:42:86:0e:59:ba:21:9c:e9:b4:b9:
38:7f:25:c6:7b:2d:ec:4b:fe:b3:41:72:d0:1b:e0:ae:c3:28:
7c:c8:cd:dc:30:fa:41:39:24:dc:54:4e:1a:1a:b4:e6:86:f9:
a2:33:a0:44:cf:78:a8:1b:ab:67:e0:cf:bf:3f:73:c4:58:6e:
54:54:f2:19:e9:c3:02:35:d3:fc:4d:ad:c0:79:b8:e9:99:25:
1d:ff:4c:39:02:a0:89:d1:63:bd:4a:67:39:f8:ee:f2:6c:38:
e1:e3:9a:bd:c4:68:1f:ea:08:13:f1:51:a7:dd:68:9b:8d:69:
98:30:df:50:a1:99:30:7c:95:96:89:5e:40:b7:30:41:7d:b8:
4c:c5:87:f7:f8:f1:e1:a0:e0:82:53:8b:1f:8f:be:ac:84:18:
0c:5c:e6:ef:b4:e7:09:80:6a:d8:71:f1:d6:fd:c1:0a:04:a2:
83:22:fd:0d:9f:14:c0:e4:b0:32:3c:01:f8:d2:0e:f4:9f:29:
2e:7a:e7:26:a0:cf:2d:73:2a:76:bd:bb:47:6d:1e:43:bf:8d:
fd:c5:49:4c:93:ba:d6:59:26:b7:2a:8a:7a:54:2f:41:80:3b:
56:31:e2:f3:0b:25:4e:35:64:2a:37:1c:9e:98:7f:4c:11:fe:
84:64:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:58 2026 by rpki-client