Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: zVBm8yVs1hFRZtNdFZCYsv79I/xkV+ULIO2NKeCwvPQ=
Subject key identifier: 1C:9B:59:5C:C6:12:2E:A2:75:B6:59:57:18:84:F2:B6:30:A9:8A:0E
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019F292584E1B77FFA81BA30843EE2ADEB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 1209
Signing time: Fri 03 Jul 2026 18:02:32 +0000
Manifest this update: Fri 03 Jul 2026 18:02:32 +0000
Manifest next update: Sat 04 Jul 2026 18:02:32 +0000
Files and hashes: 1: OmEUp-3epX_KUifqGg6OagsyLUI.roa (hash: wX4E8X9J3RZD1t+7aNfaKdNYFXjEujR+Op2mKH/JxaE=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: u45QuzJwIVur+G9VGmESfpjvVq5N6DXug5Uz4MaUU1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:25:84:e1:b7:7f:fa:81:ba:30:84:3e:e2:ad:eb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jul 3 18:02:32 2026 GMT
Not After : Jul 4 18:02:32 2026 GMT
Subject: CN=1c9b595cc6122ea275b659571884f2b630a98a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:87:ce:6f:34:6d:d2:97:b2:79:5e:08:b5:
f8:80:97:82:cb:34:55:51:af:35:a1:a3:52:70:1c:
02:9e:1b:5e:ef:fe:c0:05:f1:1e:76:b6:63:d4:2a:
f7:19:e4:e9:ee:12:bd:4c:e2:99:1c:5b:df:5c:b6:
4a:d3:b8:a0:a0:68:27:aa:1f:a8:a7:92:8b:bd:89:
ca:be:46:c7:fe:e8:82:d2:0b:cf:c7:f0:43:1b:20:
4c:32:6b:db:90:04:d8:39:18:e0:ee:b9:75:f6:1c:
4b:06:7a:78:ae:a5:94:72:c3:cc:44:be:64:4b:9b:
a5:46:a9:14:db:5e:4b:15:c8:12:92:03:00:42:a3:
77:5c:ac:45:03:e6:79:d6:c1:48:b0:3b:4a:ba:ff:
e3:48:f7:51:a1:86:d0:26:a5:93:bd:56:9a:44:4b:
e1:95:cf:54:a8:65:55:41:bb:4a:93:cf:9c:5f:35:
c9:4e:bf:26:fb:09:ea:5c:d1:25:39:18:1e:e0:91:
da:4c:53:e4:9f:a2:a9:d6:2a:5b:c5:d7:4a:9e:bb:
13:eb:a2:a5:74:e7:d4:64:fa:67:b7:32:5d:e2:81:
6f:65:00:b9:40:ba:e8:63:3d:d3:0f:dd:e0:7a:c5:
db:0b:db:de:c2:fe:07:96:08:8d:10:ec:e1:d2:fd:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:59:5C:C6:12:2E:A2:75:B6:59:57:18:84:F2:B6:30:A9:8A:0E
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:58:4a:88:07:77:6d:00:0d:fc:4a:a6:90:39:40:51:37:
5a:b2:dc:9f:7f:01:e4:48:8e:80:07:6b:4d:13:57:9b:7c:e2:
9e:1b:70:74:92:f1:27:1f:15:b7:e6:cf:9b:b3:60:79:a1:ea:
32:5c:37:22:43:32:6f:ee:8d:08:c9:45:fa:1d:e8:49:27:fe:
25:52:2e:7c:a2:1a:79:e1:ea:15:a1:bc:91:3a:21:14:61:0b:
af:7a:9d:67:9b:26:63:4f:a8:91:7a:57:74:e1:b8:c6:6d:1e:
3f:f6:2e:6a:a3:45:ab:f1:c1:34:f5:6d:93:de:69:44:06:25:
bd:e3:6f:b2:67:e1:d5:58:93:22:6d:9b:c3:79:6e:77:9a:6b:
9e:e0:4b:37:d9:c2:21:bd:b2:42:f4:e4:78:52:37:3f:35:4e:
7f:1e:e9:d7:32:6c:9c:14:76:7d:f5:41:35:04:ed:8c:2c:e4:
43:cb:e3:7f:4c:61:68:5a:36:11:1d:b1:10:db:8a:6c:46:ba:
41:a4:56:13:11:52:4a:03:e7:63:77:66:b4:db:06:d1:81:62:
ce:29:06:df:74:36:50:f8:a2:c1:26:ba:f7:00:29:b4:77:7b:
b3:50:cf:15:63:1e:a7:88:d5:60:bb:30:f9:07:0e:92:42:65:
c9:d0:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:41 2026 by rpki-client