Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: tYBUeEVIxGQqR4RjoEK33+hFT7cHEidpA3PP8s/D9cs=
Subject key identifier: 9D:CF:C7:14:CF:74:26:3B:63:1B:C0:B8:0E:51:23:CA:69:72:C3:D1
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 019FA25FF5D1862907C76CF5B5BF5ED41902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0F7A
Signing time: Mon 27 Jul 2026 07:00:25 +0000
Manifest this update: Mon 27 Jul 2026 07:00:25 +0000
Manifest next update: Tue 28 Jul 2026 07:00:25 +0000
Files and hashes: 1: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: HuXcQDOWXBW5aD1oifRdcb5eZg3gdhnta/5QeW6WnfQ=)
2: fo0lrdRlefUeF4nkReob4pKTJIc.roa (hash: i3MhDgEPbBKNozohRpkOstSN7+oppEOt3HEvpIjhaCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:f5:d1:86:29:07:c7:6c:f5:b5:bf:5e:d4:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jul 27 07:00:25 2026 GMT
Not After : Jul 28 07:00:25 2026 GMT
Subject: CN=9dcfc714cf74263b631bc0b80e5123ca6972c3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:60:2f:91:6f:72:05:eb:7d:4e:99:37:2a:
7b:12:ff:01:c7:17:46:78:a8:ee:d1:3a:f7:d8:f7:
13:06:19:bd:a0:26:b6:77:6a:68:e0:1d:f7:d9:3d:
5b:82:07:3b:21:60:13:c0:3d:6b:2f:1b:cb:69:61:
e2:90:18:d1:51:5e:a1:3c:a8:ee:a6:d7:43:c7:90:
92:27:83:f7:83:6e:e1:19:a7:b6:24:28:1b:68:86:
16:21:f1:6c:14:8f:0d:06:4a:8e:68:b8:b4:32:2b:
ec:b8:08:a7:b7:02:f4:8e:4c:ae:e6:8c:e8:55:b4:
97:ca:a4:ac:7e:46:41:55:86:73:e8:67:2f:31:a1:
92:35:18:ae:8f:9a:ff:d7:f1:9e:0b:af:9b:df:38:
7d:2f:4e:bd:6e:47:3c:c0:11:75:72:bb:fd:f8:e4:
ab:be:cf:10:c7:9f:a2:08:df:1f:33:11:63:0b:45:
99:c0:4d:b0:2d:a7:f7:73:5b:3e:8b:72:28:74:c2:
36:5d:df:7b:fc:77:e2:b9:29:55:dd:db:9b:c2:1f:
aa:df:dc:2b:e7:b5:28:8a:ae:4c:34:82:00:6e:71:
19:52:ca:c3:fb:8a:76:09:ae:a1:74:2e:f7:df:0b:
d3:6d:d6:84:7f:bc:f4:a0:be:46:fe:4a:9b:16:1f:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:C7:14:CF:74:26:3B:63:1B:C0:B8:0E:51:23:CA:69:72:C3:D1
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:47:f0:aa:a9:ad:2a:2f:64:bf:40:10:a6:9b:7a:46:e0:
1e:8a:bd:54:40:f5:3f:78:4a:b3:5f:c7:dd:bc:61:b5:53:7c:
24:d7:1f:3f:d8:ac:73:98:3c:f2:0f:74:85:cc:85:8d:d2:f5:
6d:63:f4:f8:66:43:0f:63:d7:06:f9:58:ef:be:2b:52:02:8c:
49:48:77:32:3e:02:0c:b0:d1:d2:e6:88:db:00:7f:4e:74:87:
17:35:14:ca:02:46:f6:77:4b:ce:b5:17:38:19:87:93:d7:fa:
b3:21:2a:55:f8:93:a1:24:ec:43:3a:74:62:1c:66:df:c1:a5:
6b:da:7e:37:24:ac:8d:7c:d8:b1:b6:76:92:f5:34:d9:8f:bb:
88:cd:2c:94:0e:e0:ec:e3:61:ef:c7:5c:15:b1:91:58:47:45:
52:66:38:15:82:9c:11:3d:4a:16:7e:f1:97:08:8a:a7:c9:1f:
35:98:4e:d1:28:eb:46:a2:a4:7c:3c:52:16:4b:4e:90:d5:a2:
0c:d3:4a:bc:f3:a9:93:74:79:8c:f8:13:19:70:5a:97:d2:2e:
97:91:d5:d9:d6:a3:e3:91:56:db:14:e9:dd:5a:56:17:12:f4:
0c:80:4a:1d:dc:e5:b0:68:38:ef:5f:0a:8e:96:90:5b:e2:29:
5c:a3:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:12:41 2026 by rpki-client