Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: BsAQrIA0y57w7t78vdmrRsiNgO4uBwh9XQQJFDjj9+o=
Subject key identifier: 9D:97:0A:22:75:62:BB:01:39:F3:47:6D:5A:06:D3:F2:CD:AF:5C:D1
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019F86E8942686C77D6750156FECBD8B4BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 081A
Signing time: Tue 21 Jul 2026 23:00:16 +0000
Manifest this update: Tue 21 Jul 2026 23:00:16 +0000
Manifest next update: Wed 22 Jul 2026 23:00:16 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: puh/GIHCXyzvUqqfOFZ/fmCr9hKGnLQ6eDdBjNROQqU=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:94:26:86:c7:7d:67:50:15:6f:ec:bd:8b:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Jul 21 23:00:16 2026 GMT
Not After : Jul 22 23:00:16 2026 GMT
Subject: CN=9d970a227562bb0139f3476d5a06d3f2cdaf5cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:52:98:17:ab:1d:e0:e5:f6:06:2e:4b:7a:
df:0f:91:43:79:10:98:02:3a:e5:4a:33:1c:40:21:
6e:62:6c:c3:fb:f2:2b:2f:11:9b:54:97:57:51:de:
64:b1:3b:87:c2:13:51:78:3c:33:1c:03:0f:53:f4:
01:a4:98:3d:5c:9d:41:32:d8:3b:6f:17:2d:17:ff:
3d:62:5e:aa:3d:b2:ea:4c:21:a5:5f:ee:5a:67:9a:
9d:25:c1:11:e0:0f:c5:bc:ea:c5:6d:a9:64:f5:ca:
d0:33:f5:2b:b3:d0:f6:9e:b5:f5:00:a2:1d:5a:bc:
3e:9a:1d:e9:bb:d5:73:c6:94:0c:0b:96:33:1b:ea:
0b:ea:86:bc:4b:db:15:64:5d:98:26:13:79:b2:d8:
ca:9e:45:08:9c:82:17:f6:85:a3:52:cf:af:cc:fc:
a6:80:50:d8:3d:b6:59:33:f2:88:35:07:db:54:d8:
e0:50:3a:b6:99:c9:33:df:0f:f2:c4:ce:cd:f0:67:
5b:db:23:3d:44:24:9d:79:ff:f3:d2:a4:f6:b0:29:
ed:07:d0:cc:ac:37:ca:85:fa:c7:d9:92:da:d8:71:
22:54:6d:d5:25:e9:8a:16:8b:93:51:90:97:7b:e2:
2d:7b:29:0d:f0:1b:86:3f:2a:0a:6f:80:4f:63:26:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:0A:22:75:62:BB:01:39:F3:47:6D:5A:06:D3:F2:CD:AF:5C:D1
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:52:f6:5d:46:68:7a:cb:b3:b1:ef:55:15:67:35:79:69:
bf:f8:da:11:9b:21:2c:48:05:fc:d2:bd:72:26:48:24:8d:8b:
24:51:cd:f7:90:7b:45:80:f6:5f:67:9e:af:8c:75:ad:a1:5d:
4a:35:b8:8c:5f:6c:f5:87:d7:bf:09:04:bf:65:b9:22:20:12:
da:32:24:56:b9:02:73:c9:f4:33:c7:d7:18:96:d9:f0:47:a7:
cc:da:f3:f4:dc:e9:b2:6b:b6:c9:f0:e4:b9:e2:0e:b0:16:4c:
ee:73:7f:34:ee:1c:56:6b:ab:47:8b:5b:39:65:f7:2e:6c:dd:
ef:f6:e7:3c:55:90:06:a2:88:34:59:57:92:e8:b1:68:dc:45:
70:98:4b:42:b2:45:84:70:20:21:f2:a2:87:47:38:3f:e4:31:
6b:ad:b5:6e:c6:92:be:f9:a2:6e:38:24:5d:30:1e:d9:17:62:
5c:73:d8:6f:6a:a0:6e:69:31:fe:d8:a8:4c:08:15:fa:0a:df:
58:1a:2b:a6:f5:22:d4:0e:39:2f:d6:00:24:09:81:f5:75:51:
98:51:08:6b:70:cf:eb:b7:76:5d:e7:c6:e7:d1:21:c0:43:49:
d0:da:94:c7:91:75:41:2e:cc:bf:8a:56:4c:3e:2b:3d:55:37:
ad:df:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:56 2026 by rpki-client