Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: atCYvMddZzx5NYkRufbhzWP2vwLiEvgL3WxSEG2dDVQ=
Subject key identifier: F4:C5:0D:EA:FF:31:CE:CE:CB:82:60:AA:DB:1E:DC:49:CB:35:88:F1
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019F9FCCB74C265F66A07A947D2A63562A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0D9B
Signing time: Sun 26 Jul 2026 19:00:21 +0000
Manifest this update: Sun 26 Jul 2026 19:00:21 +0000
Manifest next update: Mon 27 Jul 2026 19:00:21 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: pmOUpiOf8ZyK9e+nVZPyBjiRmo3Lgh67H93mrL6sa9U=)
2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=)
3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:b7:4c:26:5f:66:a0:7a:94:7d:2a:63:56:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Jul 26 19:00:21 2026 GMT
Not After : Jul 27 19:00:21 2026 GMT
Subject: CN=f4c50deaff31cececb8260aadb1edc49cb3588f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:13:f4:a1:0c:61:5f:a3:5e:7d:b0:44:0a:
02:b8:81:d7:31:d6:ad:5d:93:2e:3a:46:f1:af:fb:
2c:76:64:9c:2a:d3:47:52:b4:70:4e:19:57:6c:01:
ad:3b:2b:4d:d3:10:24:ec:60:77:e2:30:18:46:a0:
0c:03:c8:5a:2e:84:b9:5e:54:03:06:7f:59:a6:e7:
3c:f2:13:ef:66:d0:21:38:2f:dd:11:07:08:97:dd:
c2:49:4a:d7:19:52:cf:ad:1c:1a:ab:cb:b6:06:16:
cd:f6:ae:7a:81:bc:b2:93:6f:3b:2f:00:06:a8:04:
6d:0d:64:ec:1e:67:90:bd:00:04:2c:72:d9:44:c2:
f2:ca:bf:ff:d5:1d:e4:d1:50:b3:11:d6:4e:64:a0:
1b:63:8c:d9:05:5a:78:99:25:be:cd:5c:42:ba:8b:
00:96:a9:b3:57:34:03:46:d0:04:e4:db:8a:f4:a0:
4c:05:25:4e:96:ed:93:c3:3d:23:5f:d9:5b:86:f4:
43:a3:ab:f7:7c:04:61:35:2b:75:e7:b4:c2:d1:8b:
b1:a1:f3:af:55:06:a1:c0:92:a1:1b:85:20:5c:9e:
16:1a:e3:47:28:db:19:f4:4f:07:ac:e8:82:05:57:
11:05:cf:37:7b:73:6a:0f:c4:8a:c7:43:25:6f:24:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:0D:EA:FF:31:CE:CE:CB:82:60:AA:DB:1E:DC:49:CB:35:88:F1
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:d3:07:b4:4f:91:9f:2e:a6:75:b3:4d:25:21:dc:6c:b2:
f6:d6:ee:96:4c:a6:f2:64:db:d0:f4:84:1a:06:c8:43:82:dc:
3a:de:9d:43:e5:d1:49:05:75:d0:c9:3c:92:cd:21:da:39:e8:
74:38:1d:f0:f2:ae:34:61:f3:a5:77:bd:14:bc:82:fb:40:ba:
2f:f2:5a:c7:75:90:d1:1a:7e:15:02:1f:c3:00:b7:3f:a9:5f:
e9:7a:6e:07:57:3f:5d:ed:30:55:39:54:70:60:b6:75:37:5b:
a4:1d:a5:a4:a6:3b:82:25:21:34:70:d3:d8:e7:e7:b9:56:13:
25:1f:4b:52:4f:f1:4f:f8:9b:cc:f0:0b:a6:ed:27:42:5e:1d:
a3:81:ce:c4:28:29:56:ff:13:ab:a1:82:2e:b4:42:ca:a8:bd:
5d:63:0a:31:6d:e5:b6:4e:8e:bc:4d:a0:3f:37:65:8b:b5:34:
15:62:d6:dd:47:a9:db:f9:a7:76:92:9c:38:5a:db:c3:c2:3f:
3e:ab:0e:c1:00:a7:0c:45:f8:a8:ba:2c:f5:78:49:d5:5b:fb:
ab:48:d1:ce:d0:a8:ff:2f:54:bf:50:e6:5d:f9:00:fc:cf:98:
75:6b:d6:ab:d8:70:d2:6a:8d:92:81:6b:3f:a1:8a:c6:d4:cf:
bd:06:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:05 2026 by rpki-client