Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: eOV5DzbUJQQBWmfx5J5Qy43m61Owmc7lE9EZzc8gVeo=
Subject key identifier: CD:1B:32:81:F3:23:3A:A9:A1:8B:4A:E8:50:2E:CE:B6:FD:53:1C:4C
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01A000CA326A8EA11A97644D0BDC523F7B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0B7C
Signing time: Fri 14 Aug 2026 15:00:46 +0000
Manifest this update: Fri 14 Aug 2026 15:00:46 +0000
Manifest next update: Sat 15 Aug 2026 15:00:46 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 7VjWZ9sSXDSG/NM1+v4asvjSFNgEURyHvOlY2xI9rvY=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:32:6a:8e:a1:1a:97:64:4d:0b:dc:52:3f:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Aug 14 15:00:46 2026 GMT
Not After : Aug 15 15:00:46 2026 GMT
Subject: CN=cd1b3281f3233aa9a18b4ae8502eceb6fd531c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:84:62:40:41:e9:8f:65:3d:20:39:c6:01:
ed:7a:cd:97:50:34:e9:87:5f:f9:35:5b:99:59:f7:
55:1b:65:92:43:a9:c6:a6:27:7a:cf:a2:e1:b1:03:
24:2e:04:75:2e:5d:f4:38:11:1b:67:60:0b:a5:0f:
23:ab:0f:82:6e:f2:55:57:15:5b:9e:f7:6d:4a:17:
95:7f:ca:a9:94:d0:33:e6:3f:51:cc:82:08:ed:6c:
7c:26:ed:2b:ae:48:a4:ef:d4:63:0e:51:86:44:27:
54:40:79:fd:68:73:d2:8b:5b:a8:66:32:1a:f0:3e:
55:26:b5:8c:01:7c:8e:5c:74:5b:68:14:02:90:2b:
0e:3c:85:99:b1:35:ca:ab:52:7f:36:d2:8a:bb:d3:
61:1f:57:0f:14:99:46:1a:d0:46:54:e1:f1:9c:d6:
cb:a2:6d:36:6a:b4:f1:54:3b:75:bb:da:f4:cc:27:
d5:15:ec:16:07:5a:67:60:5a:0e:23:01:c0:9d:f3:
ca:10:55:7f:6f:3e:83:4b:fb:55:69:2d:d6:e1:ee:
43:b7:cb:96:69:a5:80:d0:e9:c7:bf:71:e5:30:fa:
f8:5b:c4:b5:97:ce:d6:2e:96:1a:ea:f8:49:7b:ae:
e6:27:e1:f6:30:a6:d1:04:a1:42:47:f3:3e:7f:13:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:32:81:F3:23:3A:A9:A1:8B:4A:E8:50:2E:CE:B6:FD:53:1C:4C
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:56:eb:54:02:35:70:72:11:51:d9:a5:aa:53:7a:bd:21:18:
92:55:4d:29:8d:7c:b1:3a:2c:12:52:4e:1d:bc:d7:db:d1:8d:
1e:3b:e7:da:92:01:ca:88:7f:2e:78:f0:7f:15:e4:bc:c0:cc:
00:bb:2a:78:86:5f:4d:df:19:e7:d2:be:52:1d:26:b1:01:68:
ae:c5:22:a6:3e:a5:61:2a:15:2f:27:18:9a:77:8a:b8:0b:56:
25:19:ca:e4:cd:32:0f:b8:b3:60:72:0e:7f:04:09:61:1b:73:
07:46:2d:8c:ee:58:11:38:9c:87:73:24:1c:00:39:31:66:c2:
59:e0:73:16:b8:d0:96:a2:c2:0c:01:8f:66:13:ae:e0:03:60:
e7:84:fb:2e:f2:c1:88:f5:e4:50:b1:2b:c9:09:1d:a2:f5:f6:
00:34:a3:22:88:f4:da:64:b0:c1:25:97:7d:1e:30:7c:c4:83:
ef:67:84:eb:5e:43:9a:f0:e6:1d:4a:ad:d1:a3:4f:bc:f6:6e:
8c:b2:22:ef:46:73:18:93:78:6a:cc:da:87:f2:48:fd:b0:72:
92:fb:b5:54:fc:4b:92:54:6b:b6:e9:b9:8c:5a:a1:e8:30:cb:
d4:59:bf:cd:14:ef:ee:68:50:05:d5:39:d1:d2:f4:52:68:dc:
9e:1b:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:17 2026 by rpki-client