Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: Qu3tPhEYNn0QCP9ZMxlLvUtUQmofwjFcF30XBndOo+g=
Subject key identifier: FB:9E:A9:D9:7F:9C:AC:4B:E5:33:4E:00:76:23:2C:05:D9:B0:86:5F
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 019FA14DA1E6546DDACAD158951E30BF860F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 1237
Signing time: Mon 27 Jul 2026 02:00:47 +0000
Manifest this update: Mon 27 Jul 2026 02:00:47 +0000
Manifest next update: Tue 28 Jul 2026 02:00:47 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: eQcVwDKRt9paNsrkFbjWvw1oZ91wq/L1NhuyBQX1dps=)
2: Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa (hash: jOyoK8xyNESHxZoIIJYDR0iqgib05HyciYjF8KZpxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:a1:e6:54:6d:da:ca:d1:58:95:1e:30:bf:86:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jul 27 02:00:47 2026 GMT
Not After : Jul 28 02:00:47 2026 GMT
Subject: CN=fb9ea9d97f9cac4be5334e0076232c05d9b0865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:c0:2a:8a:86:35:e3:0e:32:d8:52:8f:e9:
6c:84:3b:d2:f7:30:a6:9f:85:2f:e9:cb:0c:bb:7d:
27:e0:35:f3:ea:e9:56:f0:73:b7:15:a5:dc:1f:55:
c5:36:b2:eb:68:d5:bb:57:ce:9b:24:5a:dd:9e:b4:
1b:b7:6d:f0:ca:93:cc:86:c0:35:73:66:b5:94:c5:
35:91:dd:ad:c0:25:31:a0:8e:d7:30:ac:50:bc:a3:
6e:24:e7:14:18:36:fe:e3:ce:e2:e4:97:09:8e:39:
73:ef:c5:05:d7:0d:18:42:bf:7d:8d:df:65:4f:f3:
d9:51:07:53:69:4e:52:cf:4f:03:e2:d4:0d:72:46:
32:47:0d:67:21:1a:d2:2c:cf:2e:d5:d2:1d:fc:1f:
2c:21:38:3b:97:7a:9e:0e:4b:c4:f5:be:7d:b3:f2:
2f:d0:a4:e3:31:90:d0:4d:40:44:17:77:17:b4:cd:
61:72:7a:f7:66:15:0b:42:ca:27:a4:54:fc:10:b6:
c7:65:55:f5:f7:bf:c7:40:b4:39:f8:b6:b5:86:fd:
9f:fd:7d:35:ac:ed:88:6c:aa:3a:dd:03:d5:6c:05:
b5:c6:12:cc:88:6c:f6:d1:7c:18:a9:69:5d:1e:c6:
7f:7c:df:d5:65:67:a6:96:c5:b8:f4:61:cb:f7:78:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:A9:D9:7F:9C:AC:4B:E5:33:4E:00:76:23:2C:05:D9:B0:86:5F
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:75:80:4b:d8:2d:a0:a9:15:4e:b0:26:fe:12:e8:20:8c:
3e:30:ba:38:02:a5:68:b9:a1:ad:88:07:2f:76:8c:a2:c4:a9:
dd:58:1c:f6:ec:38:e1:24:55:e7:fc:1f:7d:15:be:68:b0:57:
fe:12:48:15:e9:55:a7:f5:68:d8:89:85:fb:50:a6:18:f9:00:
e7:78:57:49:48:1c:c6:2a:ca:32:ff:2f:58:88:4c:ba:9b:29:
60:d2:6b:96:b0:81:29:f3:fd:b8:e3:e2:12:8e:22:a0:36:a1:
12:4c:db:6a:03:67:d8:30:bd:49:a6:fe:10:7e:98:10:de:d6:
8f:80:4f:14:56:c7:65:c3:76:cc:88:da:c2:6d:19:51:fa:e9:
dc:27:d6:ab:80:13:19:f9:67:fc:05:92:b2:30:f9:a7:49:5a:
b3:e4:58:50:f6:4b:eb:47:c8:64:88:4c:ca:d2:f6:7b:63:49:
9b:e2:8f:cc:f0:60:f3:c5:d6:5a:8b:02:19:09:32:58:05:69:
c2:fb:ce:a5:87:21:f7:13:c2:7d:4a:b8:b3:45:f8:99:09:c0:
ca:8f:45:17:09:39:c8:92:9f:66:7b:23:ca:2f:c1:f0:e5:b4:
e4:2e:b3:0a:12:5c:1d:93:a2:83:d8:de:c0:a5:4c:34:09:99:
32:37:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:52:53 2026 by rpki-client