Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File: 9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier: KJirNZsNZ1eePlqrjzPDUUttLmP10kB5gM5mDEY+aZo=
Subject key identifier: 16:6E:3C:37:63:AC:A1:F1:58:38:FA:FB:19:1B:5C:58:B3:BC:2F:6E
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer: /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial: 01A001A63B5C5C6AD911B86FDF683DC9F4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number: 1057
Signing time: Fri 14 Aug 2026 19:01:06 +0000
Manifest this update: Fri 14 Aug 2026 19:01:06 +0000
Manifest next update: Sat 15 Aug 2026 19:01:06 +0000
Files and hashes: 1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: BIVY6XIztH9FvsqOIcdVmF3/8lV1iT0IduVQ3n0vXPM=)
2: ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa (hash: tRtrIVFRMFtnff6mODXc8+s312Nmn2BxI0riNWUQx48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:3b:5c:5c:6a:d9:11:b8:6f:df:68:3d:c9:f4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Validity
Not Before: Aug 14 19:01:06 2026 GMT
Not After : Aug 15 19:01:06 2026 GMT
Subject: CN=166e3c3763aca1f15838fafb191b5c58b3bc2f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:57:30:6e:e0:0d:1d:12:8f:9e:9a:2b:14:
75:35:25:a9:d3:b6:a7:3c:26:dd:f5:e3:b2:46:17:
b7:e7:d5:b7:94:bc:24:42:0b:93:27:e9:f9:65:3b:
f4:79:a1:16:50:fb:0c:7a:76:34:d4:81:2c:32:7f:
d7:b1:18:08:3d:3e:73:bb:0a:ea:6b:e2:aa:22:fe:
3c:9b:9d:f2:b2:e4:80:76:04:b0:4b:af:9c:95:37:
a9:da:a7:b0:3b:ca:cd:83:f9:7b:d5:fd:1d:dc:2f:
46:69:cb:fa:e8:9c:7f:12:f5:93:b8:e1:69:8b:db:
a8:91:9c:19:29:9c:e1:94:0b:f3:30:06:d4:09:73:
de:67:2e:6d:78:da:95:95:ad:1b:1f:4e:3f:69:29:
f1:2d:72:18:ff:d0:43:d9:79:7a:03:f2:34:76:47:
fd:6a:fd:7f:8e:b1:08:e4:19:35:ea:95:2d:f1:c3:
97:e6:bb:bb:1d:45:9b:10:76:11:06:4f:fb:82:fc:
9e:f8:17:8a:c3:1b:b1:f0:7a:70:61:dd:86:e6:2a:
95:7f:be:a3:b1:ac:56:3b:68:e2:28:eb:8a:3f:72:
df:92:ed:b6:68:12:30:1f:60:46:6f:5c:84:47:b8:
de:47:e2:f1:2e:b0:e2:17:75:13:7c:3a:ae:59:de:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6E:3C:37:63:AC:A1:F1:58:38:FA:FB:19:1B:5C:58:B3:BC:2F:6E
X509v3 Authority Key Identifier:
keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:94:5a:c3:54:5f:5c:fc:29:1e:97:b1:df:ed:7d:20:3b:
f3:8f:0f:f2:85:0e:d6:78:44:f0:fe:fc:52:c5:8d:25:a5:18:
32:13:c5:25:0f:82:b6:4e:2d:b5:fd:b8:80:b8:79:da:17:5f:
09:22:8b:a1:71:c5:cd:3d:c4:d0:c0:a9:02:f9:c9:3d:67:8f:
f3:34:c4:c3:c9:a8:a8:ab:42:b1:0a:e5:75:8d:5a:5f:7c:2e:
da:d0:06:23:30:99:8a:e7:76:a3:44:4e:e8:9d:ee:74:70:1e:
59:75:f0:07:b3:29:f9:76:76:02:8c:8f:e1:67:04:50:44:1c:
53:61:e0:ce:5d:8c:fd:1e:74:9e:fa:b1:02:72:da:72:47:45:
8b:61:e4:71:ae:6c:e6:f1:8e:5e:8a:ea:4f:06:74:1f:59:38:
c8:b8:8c:2e:cf:4f:c5:34:bc:59:1a:18:2b:2b:b0:c1:88:3d:
5c:5e:7b:6c:98:65:21:70:0f:1b:4f:cd:1a:f2:60:81:48:0b:
a8:20:da:47:9b:a7:14:b0:6e:67:a7:04:e5:80:96:ec:db:00:
29:f3:92:e8:5a:29:18:ce:5b:42:22:53:4e:b2:68:d6:f7:30:
c2:e9:cb:d6:7a:8f:f3:9a:1c:17:a3:45:64:d0:85:07:29:7f:
f1:eb:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:35 2026 by rpki-client