Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: oo3U00TRo0kxL/llSLqZ/rjFyNsgL8+PNkrGJv43724=
Subject key identifier: 1C:D9:C2:F8:B7:EF:E8:06:2C:31:32:DA:1D:8E:A9:FA:1C:A7:47:BF
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019F841E76F1FC8D52C2CB3532EB765582A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0E9F
Signing time: Tue 21 Jul 2026 10:00:16 +0000
Manifest this update: Tue 21 Jul 2026 10:00:16 +0000
Manifest next update: Wed 22 Jul 2026 10:00:16 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: c0weJyoSsP7VubG9y+lpRCwF3sGDQgqhSYiYy4fytX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:76:f1:fc:8d:52:c2:cb:35:32:eb:76:55:82:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jul 21 10:00:16 2026 GMT
Not After : Jul 22 10:00:16 2026 GMT
Subject: CN=1cd9c2f8b7efe8062c3132da1d8ea9fa1ca747bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:53:2b:70:e5:e2:58:d2:65:b9:af:c3:a3:
3e:2e:4e:ad:a2:7d:88:25:20:6e:4c:49:21:43:15:
f3:ac:1d:5e:7d:b9:18:1d:83:c0:88:45:c4:a0:4f:
95:93:bf:e0:64:c3:24:c2:57:e1:4a:2a:0e:ca:d2:
b0:72:3c:2e:a9:40:22:d1:f4:36:a7:29:85:58:9b:
c5:5e:17:46:43:57:d6:e6:38:9c:0f:11:12:82:5e:
4b:52:fc:9a:39:0f:dd:ca:af:74:83:0d:b9:d6:4f:
93:71:c7:2c:ba:ff:4b:59:e8:2d:6b:44:00:5b:54:
16:3a:34:64:12:2d:67:c8:dd:c1:d6:a5:77:a2:c5:
03:0b:d1:ed:91:6f:17:c2:95:ac:65:36:b0:90:d2:
09:8e:a4:5b:6e:7a:96:ec:6b:87:1e:2d:be:3d:ab:
b2:b0:53:74:03:8a:a8:a1:0a:61:c3:7a:81:f4:6c:
e0:54:cc:d8:a5:08:a5:de:e2:a6:39:b2:db:f0:85:
39:1f:02:05:12:f8:84:d3:a9:44:67:c5:d7:28:99:
20:eb:a7:c6:dc:1c:85:f4:1b:0c:f1:c8:a3:41:89:
a4:15:29:47:e9:38:f0:1b:5f:d4:ee:38:fb:1d:67:
e5:74:c2:08:26:58:19:e3:27:20:7b:00:e5:71:da:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:C2:F8:B7:EF:E8:06:2C:31:32:DA:1D:8E:A9:FA:1C:A7:47:BF
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0e:5c:56:e4:2b:ce:bf:7a:8c:78:ce:50:95:8d:85:92:1a:
c2:46:c7:86:a1:86:59:c0:5b:1c:8d:1c:8f:5f:0a:80:9b:fd:
9b:f3:91:f0:50:ef:9a:76:99:df:40:1e:a4:38:ac:68:cd:fe:
da:71:7c:bb:7a:1f:44:08:81:9f:77:10:50:d9:be:96:7d:dd:
49:66:18:ad:e4:bc:c3:47:2b:a8:25:1e:89:2a:4f:68:d5:6b:
4f:e1:9c:13:9a:2b:e6:85:8b:60:93:a4:06:31:25:92:d9:81:
ae:61:e7:f2:be:d7:c9:99:4d:49:b2:41:64:ce:32:ad:12:8c:
c1:62:7b:32:46:13:f2:89:8f:5d:88:86:6f:a2:62:07:10:50:
b6:e1:85:d7:4d:3c:2d:b3:71:8c:42:e2:74:5b:ac:a9:59:3c:
66:c8:1b:a6:89:37:01:dd:ae:6c:57:3e:d8:d5:90:97:dd:7a:
d6:2d:44:ef:84:df:6f:69:7c:4c:a8:ea:de:7b:bc:ed:0a:3a:
48:6d:a8:04:75:34:67:77:53:9a:d0:7c:44:e3:20:a7:80:1b:
13:ab:cd:5c:50:09:46:41:1a:12:a0:33:b9:68:61:ce:3b:19:
3e:3b:d8:33:f7:6a:4f:72:3e:e2:c0:c7:eb:88:63:0f:58:19:
2b:79:98:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EHnbx/I1Swss1Mut2VYKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDc3M2YyNDBjZDYyNjljMjUxYjY1MTcwYWE3ZTI5OGFl
OGM0MWYwHhcNMjYwNzIxMTAwMDE2WhcNMjYwNzIyMTAwMDE2WjAzMTEwLwYDVQQD
EygxY2Q5YzJmOGI3ZWZlODA2MmMzMTMyZGExZDhlYTlmYTFjYTc0N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvZTK3Dl4ljSZbmvw6M+Lk6ton2I
JSBuTEkhQxXzrB1efbkYHYPAiEXEoE+Vk7/gZMMkwlfhSioOytKwcjwuqUAi0fQ2
pymFWJvFXhdGQ1fW5jicDxESgl5LUvyaOQ/dyq90gw251k+Tcccsuv9LWegta0QA
W1QWOjRkEi1nyN3B1qV3osUDC9HtkW8XwpWsZTawkNIJjqRbbnqW7GuHHi2+Pauy
sFN0A4qooQphw3qB9GzgVMzYpQil3uKmObLb8IU5HwIFEviE06lEZ8XXKJkg66fG
3ByF9BsM8cijQYmkFSlH6TjwG1/U7jj7HWfldMIIJlgZ4ycgewDlcdobMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzZwvi37+gGLDEy2h2Oqfocp0e/MB8GA1UdIwQY
MBaAFG9Hc/JAzWJpwlG2UXCqfimK6MQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMt
NzY5Y2Q3ZGNjOTM4LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMtNzY5Y2Q3ZGNjOTM4
LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsg5cVuQr
zr96jHjOUJWNhZIawkbHhqGGWcBbHI0cj18KgJv9m/OR8FDvmnaZ30AepDisaM3+
2nF8u3ofRAiBn3cQUNm+ln3dSWYYreS8w0crqCUeiSpPaNVrT+GcE5or5oWLYJOk
BjElktmBrmHn8r7XyZlNSbJBZM4yrRKMwWJ7MkYT8omPXYiGb6JiBxBQtuGF1008
LbNxjELidFusqVk8Zsgbpok3Ad2ubFc+2NWQl9161i1E74Tfb2l8TKjq3nu87Qo6
SG2oBHU0Z3dTmtB8ROMgp4AbE6vNXFAJRkEaEqAzuWhhzjsZPjvYM/dqT3I+4sDH
64hjD1gZK3mYBw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:40:42 2026 by rpki-client