Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: AH/pwRXlbab68woGU2bXZ5vqbrVtH7N5xKyzNGKtLps=
Subject key identifier: 6C:C9:08:2A:DD:9A:49:63:E8:70:A6:AE:87:9E:EC:62:F7:A0:7B:A2
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019FAA1A1667DEE16E9524FFC31E8F4E9F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 19B9
Signing time: Tue 28 Jul 2026 19:01:04 +0000
Manifest this update: Tue 28 Jul 2026 19:01:04 +0000
Manifest next update: Wed 29 Jul 2026 19:01:04 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: uHF8pvvI0vx5fmoJf+6J0sc0mJTj9v4Wjnrr/hCZIRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:16:67:de:e1:6e:95:24:ff:c3:1e:8f:4e:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Jul 28 19:01:04 2026 GMT
Not After : Jul 29 19:01:04 2026 GMT
Subject: CN=6cc9082add9a4963e870a6ae879eec62f7a07ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:d2:db:47:23:49:46:d6:3b:f0:03:14:3c:
5a:14:a3:fc:90:4b:11:d3:17:76:76:d0:ec:46:a9:
23:53:2d:f4:ee:63:a6:98:5d:f8:29:40:15:5d:5f:
b1:9a:05:87:9c:4d:06:58:75:3e:3d:68:c1:8c:10:
30:11:7f:6e:c5:42:15:9d:4c:bc:e1:98:0a:1b:87:
48:d0:e8:db:5a:42:93:75:0b:9a:2f:b2:89:57:7e:
15:72:05:23:04:95:da:4a:58:e6:80:c5:90:90:12:
b9:db:14:16:77:75:ee:16:9e:3b:9a:c5:bc:2c:3c:
21:b0:15:a9:f4:1e:8c:5b:98:66:2c:ae:c9:59:57:
52:3a:c1:f4:c5:74:c5:21:af:44:5f:ff:55:bb:fc:
a5:37:b4:86:a0:4d:cd:3e:31:e2:82:84:d7:b7:ba:
2b:bb:9c:41:02:ef:ae:79:f1:fd:5f:a6:4d:a7:f7:
9f:0c:b5:d3:85:3f:7a:65:44:22:5c:07:e8:f8:98:
bb:e7:5d:23:55:f1:64:fe:98:e4:98:6d:81:30:91:
b6:75:7d:ab:70:28:04:bb:f8:85:fe:55:67:ed:ed:
92:44:d1:22:62:14:22:66:91:81:3c:c2:41:fc:52:
70:1a:2f:54:70:e1:f3:0b:68:13:f3:9f:86:e1:f0:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:08:2A:DD:9A:49:63:E8:70:A6:AE:87:9E:EC:62:F7:A0:7B:A2
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6a:9f:40:c2:aa:ed:16:74:6d:65:a8:09:23:fa:50:52:ee:
96:fa:f7:91:29:04:75:32:aa:fc:2a:2d:9f:ce:7b:cd:8c:22:
91:b0:d1:91:8d:82:a1:51:43:87:35:6a:4b:2d:ed:4b:25:7c:
a6:44:06:43:9e:66:91:36:ce:8c:94:96:e1:26:fb:a8:bf:b1:
24:0a:3a:e4:15:86:51:4e:9f:50:26:ef:51:6c:26:fa:3d:77:
c1:a2:9b:8c:37:f3:9d:93:ee:1c:85:54:9e:b0:44:11:97:08:
59:09:6a:2b:c5:99:31:7e:89:1b:9e:52:c2:39:da:ca:28:4f:
5f:2a:37:e1:e1:d5:ba:73:b4:6c:7a:ef:9f:09:95:18:1f:af:
ca:8d:fb:99:72:f6:94:d8:06:1e:fd:f0:53:e1:f6:17:09:97:
f7:62:54:bd:f6:a7:62:1a:6b:64:73:11:2b:9d:33:e0:02:67:
ef:79:c5:99:86:f8:38:fa:94:20:39:5f:ea:2a:60:76:4a:27:
0b:d9:68:2d:75:e5:67:07:29:74:b3:53:c8:52:8a:df:51:0f:
57:cd:c8:04:19:4c:65:85:1c:85:53:77:14:2b:e2:de:fd:70:
61:a8:b5:3e:7e:c3:19:f4:75:11:7f:db:78:c5:96:e5:ab:7d:
5c:19:31:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGhZn3uFulST/wx6PTp9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjYwNzI4MTkwMTA0WhcNMjYwNzI5MTkwMTA0WjAzMTEwLwYDVQQD
Eyg2Y2M5MDgyYWRkOWE0OTYzZTg3MGE2YWU4NzllZWM2MmY3YTA3YmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wjS20cjSUbWO/ADFDxaFKP8kEsR
0xd2dtDsRqkjUy307mOmmF34KUAVXV+xmgWHnE0GWHU+PWjBjBAwEX9uxUIVnUy8
4ZgKG4dI0OjbWkKTdQuaL7KJV34VcgUjBJXaSljmgMWQkBK52xQWd3XuFp47msW8
LDwhsBWp9B6MW5hmLK7JWVdSOsH0xXTFIa9EX/9Vu/ylN7SGoE3NPjHigoTXt7or
u5xBAu+uefH9X6ZNp/efDLXThT96ZUQiXAfo+Ji7510jVfFk/pjkmG2BMJG2dX2r
cCgEu/iF/lVn7e2SRNEiYhQiZpGBPMJB/FJwGi9UcOHzC2gT85+G4fB3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzJCCrdmklj6HCmroee7GL3oHuiMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2qfQMKq
7RZ0bWWoCSP6UFLulvr3kSkEdTKq/Cotn857zYwikbDRkY2CoVFDhzVqSy3tSyV8
pkQGQ55mkTbOjJSW4Sb7qL+xJAo65BWGUU6fUCbvUWwm+j13waKbjDfznZPuHIVU
nrBEEZcIWQlqK8WZMX6JG55SwjnayihPXyo34eHVunO0bHrvnwmVGB+vyo37mXL2
lNgGHv3wU+H2FwmX92JUvfanYhprZHMRK50z4AJn73nFmYb4OPqUIDlf6ipgdkon
C9loLXXlZwcpdLNTyFKK31EPV83IBBlMZYUchVN3FCvi3v1wYai1Pn7DGfR1EX/b
eMWW5at9XBkx3g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:55 2026 by rpki-client