Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: mCrXHrHeXs6BFSaKzidzw9j7Dbj+zC2m7h2Hd+vThgc=
Subject key identifier: 36:43:0C:7B:62:62:86:D0:5D:16:7E:10:CC:65:41:68:B3:67:BC:94
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019F83E7CB206CE31697C468811F1AD7FEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 041B
Signing time: Tue 21 Jul 2026 09:00:33 +0000
Manifest this update: Tue 21 Jul 2026 09:00:33 +0000
Manifest next update: Wed 22 Jul 2026 09:00:33 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: UVeCObcN/gHwMfOHFA1b58JHX2dCK/fU7oO7RN+321M=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:cb:20:6c:e3:16:97:c4:68:81:1f:1a:d7:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Jul 21 09:00:33 2026 GMT
Not After : Jul 22 09:00:33 2026 GMT
Subject: CN=36430c7b626286d05d167e10cc654168b367bc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:0c:32:1b:32:3b:78:c0:fe:1c:17:8d:49:
94:65:69:8c:5c:3f:08:80:49:50:0e:5f:9c:70:c4:
73:56:0d:44:23:a4:b0:bc:b5:b7:e6:6d:e3:0b:61:
6b:d0:35:8f:a8:8e:f8:a4:62:f9:5d:9b:7f:44:db:
7a:1f:ff:b9:fe:c7:f1:cd:7d:47:03:41:10:c2:84:
60:6e:4d:1b:6b:33:9d:e4:6c:33:cf:09:f6:a3:4f:
d0:29:fa:67:d1:a0:16:c1:50:06:e1:03:21:2b:19:
68:81:75:14:ec:ca:ed:63:e7:56:23:14:00:06:35:
b0:1e:21:20:11:73:a6:e0:2d:05:f9:83:5a:29:70:
34:aa:af:fa:3f:c5:ed:89:eb:56:68:11:16:0a:30:
e0:24:63:ab:0a:8a:cc:2b:d7:f4:6c:db:16:0b:5d:
82:d8:c4:b9:99:2a:91:ed:6f:91:5f:7d:5c:aa:33:
ac:f4:f7:a8:3a:8a:18:e7:3a:93:28:24:44:83:20:
6f:96:4e:c4:7d:df:67:92:f5:98:d7:da:f4:6c:f7:
79:85:90:0e:f1:f0:db:97:18:74:60:20:a7:45:12:
01:fe:cd:6c:6e:5a:52:7c:07:6f:20:6e:63:db:29:
a5:6f:23:be:98:a6:63:03:31:26:d8:06:0f:2c:7f:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:0C:7B:62:62:86:D0:5D:16:7E:10:CC:65:41:68:B3:67:BC:94
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2b:01:c9:24:a1:27:64:e9:7f:8d:c7:48:6b:40:bc:e6:18:
5d:3b:98:d1:6a:7a:a3:02:48:30:e8:27:03:f8:47:44:d1:64:
c6:80:99:ab:9c:66:15:2a:c9:b9:c6:b5:06:4f:b4:19:01:b2:
30:df:f2:71:26:13:e7:f4:b5:00:f4:71:a6:b7:0c:a4:bc:03:
d5:d7:10:15:c4:99:0a:b6:5e:f0:68:10:25:8d:aa:40:2f:3e:
fb:fa:f5:fc:08:bf:f5:cf:13:9d:35:03:6a:9e:b0:78:d7:f2:
05:16:64:b3:79:3e:0f:14:c7:8a:e9:fd:eb:e3:5f:d6:2d:a0:
fa:bd:57:c7:e4:2d:37:cf:d7:8c:3d:bf:a9:91:e9:c8:78:12:
53:0e:98:18:b5:a4:14:3c:ab:66:b7:3e:76:0b:32:44:c4:ea:
b0:c7:5e:f7:8c:02:8b:05:d9:a4:44:b2:b4:ca:59:b7:ba:31:
c7:cb:77:8e:64:93:eb:33:b2:df:d0:bb:20:6a:7d:31:85:9c:
3c:18:94:c3:41:e9:ec:5f:0e:9a:e9:c7:8f:e1:cc:54:0a:c4:
8e:52:5b:d8:d9:ca:0e:a9:ff:1f:c0:24:a8:0e:c3:85:0e:db:
22:01:a5:7f:67:aa:07:63:b2:1c:14:5d:83:2d:87:64:01:ee:
35:76:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:22 2026 by rpki-client