Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: ZfjzAYBjSRlBcBRK2sWLfyV1eJVWAaW54VCY5zOap+8=
Subject key identifier: A2:74:3F:8F:48:B3:42:0B:BC:E8:4B:0D:E5:81:1C:95:64:43:15:01
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019F189ED4F7E2D7751992736FDD81263D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 13:01:30 +0000
Manifest this update: Tue 30 Jun 2026 13:01:30 +0000
Manifest next update: Wed 01 Jul 2026 13:01:30 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: /ijV4dEg/imxlFMWy4FDfJPVIp+HHK3mNBuPBnVkp+Q=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d4:f7:e2:d7:75:19:92:73:6f:dd:81:26:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jun 30 13:01:30 2026 GMT
Not After : Jul 1 13:01:30 2026 GMT
Subject: CN=a2743f8f48b3420bbce84b0de5811c9564431501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:7d:fe:6f:a3:96:60:2d:a6:a5:ce:fa:2e:
af:d8:f5:8c:71:84:cc:35:00:7d:b9:ca:fc:6e:32:
d3:30:91:3b:5f:76:09:28:6c:83:e3:40:32:f9:7a:
b5:e1:f7:d9:ce:c4:54:38:af:fb:3e:a5:b8:13:ba:
c1:e5:7c:38:3f:5f:b0:be:2f:b0:ce:09:dd:ff:fa:
8b:3a:dc:63:04:dd:f3:d8:1e:74:0e:f6:42:30:7b:
bb:94:fb:35:66:b1:02:eb:98:87:5b:3b:86:12:ed:
5b:f5:b6:1b:56:3c:b6:52:54:fa:6b:9e:e5:1c:c3:
02:e4:f9:1a:ff:f7:6a:19:69:c8:e8:63:f5:88:7b:
70:7f:e8:e9:6a:35:90:ff:1c:53:1f:87:6a:cc:9e:
8c:86:0c:7a:48:9c:27:fb:f8:d4:fe:77:1c:b2:87:
e7:68:7b:3d:31:c1:35:3f:f4:14:01:2c:99:43:e7:
84:34:34:1d:b5:63:9f:70:ed:65:4c:9e:10:71:d8:
68:09:36:76:87:30:8d:59:8f:c4:9e:75:0d:71:a6:
c7:41:92:8f:52:72:e0:95:25:07:31:3f:7c:ef:16:
f1:03:74:9f:43:65:87:2b:d6:ed:46:9d:1a:76:1c:
90:16:3a:7a:f3:99:b0:a9:52:99:20:67:6e:73:e0:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:3F:8F:48:B3:42:0B:BC:E8:4B:0D:E5:81:1C:95:64:43:15:01
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:64:a0:82:02:90:7f:c5:79:b9:94:b0:c3:08:d0:e2:55:
d3:75:3f:02:b0:12:c9:36:81:3f:ad:a4:9a:d8:47:2a:36:d6:
28:b5:81:09:2c:db:d1:c3:9c:b7:53:5c:2c:96:c7:39:56:b1:
ea:d9:21:18:df:dd:2b:72:d6:ab:0f:88:17:64:8d:81:b9:e0:
05:e0:63:c2:98:f6:9a:e0:7f:a7:d8:5f:89:4a:b2:34:b2:07:
fd:ae:7f:66:62:b9:a2:93:67:de:7e:f2:1f:92:6e:54:b3:79:
47:c3:cb:fe:11:8c:d2:c4:38:b8:34:06:39:d7:3a:cc:a3:dc:
e7:d8:a6:5c:f3:14:27:27:ba:e0:af:58:82:de:b3:2c:51:87:
09:2b:1c:74:1b:92:58:ec:fc:e5:5f:3b:35:2b:49:7f:a1:be:
bb:54:8b:40:cf:58:0b:11:e6:b1:27:99:ec:93:df:ef:db:52:
1f:1d:7c:01:ea:fe:e0:ee:e7:71:22:ba:53:d4:e9:7b:4f:34:
24:67:59:99:17:98:a0:d2:73:ba:c2:50:47:f3:2c:c1:5e:b4:
0f:2f:b6:de:26:dc:e8:42:77:a7:83:15:a5:3f:67:90:01:2b:
c1:35:08:a5:63:c2:66:7c:aa:c6:71:3f:2e:68:18:14:3d:c7:
55:a8:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:50 2026 by rpki-client