Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: XMatAUMQtE7TMwTI1Ib01kYAn+q1AIQ2A/zyz7xgrdw=
Subject key identifier: B1:C3:A9:D6:65:16:48:07:97:18:72:88:AD:4A:DD:63:97:86:0E:38
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 019FA0E0221861E08EF62BC3F13D7DA5D079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:11 +0000
Manifest this update: Mon 27 Jul 2026 00:01:11 +0000
Manifest next update: Tue 28 Jul 2026 00:01:11 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: FyDVDR3zLaePh3MiQJn8l2fdElJmJvNVcgDtmYLnRSk=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:22:18:61:e0:8e:f6:2b:c3:f1:3d:7d:a5:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Jul 27 00:01:11 2026 GMT
Not After : Jul 28 00:01:11 2026 GMT
Subject: CN=b1c3a9d66516480797187288ad4add6397860e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:dd:42:48:9c:08:da:26:64:d6:50:3e:6c:
19:2d:15:d0:2d:b4:f1:9b:4f:9c:ce:fc:05:76:12:
08:c3:aa:e5:09:ee:23:39:96:a6:f2:79:7a:25:54:
fb:42:14:e4:cd:55:86:ad:65:68:44:f2:53:6e:06:
8b:ab:a7:01:25:41:10:1f:a9:7b:f6:8d:06:59:6d:
00:fa:ac:d9:0a:be:ee:bd:42:77:3c:db:cb:09:33:
fe:c0:1e:8b:9d:00:74:f6:d3:4e:3e:93:94:14:8d:
aa:65:dc:04:4f:82:e3:11:c8:e8:31:85:5e:6a:59:
4d:ce:96:28:75:7e:5f:7c:59:6b:33:91:05:cd:e9:
42:03:5d:49:86:aa:30:72:a5:61:1b:67:c7:bf:cf:
5e:1c:07:cc:db:60:75:6b:1e:8d:60:b2:a3:0c:91:
b4:69:b5:02:ae:09:06:3b:8c:6c:8e:3c:29:55:e6:
c0:85:d8:2e:04:2c:ea:85:01:cf:cf:98:31:60:62:
c8:05:14:0c:de:c4:62:1a:16:48:83:96:c4:79:f0:
9b:fa:e8:08:be:e3:9f:f0:c3:5a:43:76:b2:a4:25:
ac:63:c8:74:b3:76:92:d2:9c:39:68:0d:84:92:c7:
78:5a:bf:f4:f1:ff:fe:86:84:40:f8:81:e2:a5:d7:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C3:A9:D6:65:16:48:07:97:18:72:88:AD:4A:DD:63:97:86:0E:38
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:51:3c:c1:59:e8:33:57:9e:ca:3e:bf:1d:64:38:ee:d8:db:
c9:46:bb:f1:37:ea:e1:88:c3:ee:6e:1d:3b:ef:fc:0c:43:0e:
37:0e:62:c4:59:59:b4:04:5d:03:fb:3e:7a:89:10:2d:c4:18:
4e:60:84:4c:f1:08:10:94:f4:02:07:bb:72:94:e4:04:6e:d1:
71:c8:e7:df:f5:7f:d1:fa:95:1e:44:b9:46:5c:46:2d:f1:67:
68:bf:10:4d:7d:5f:31:f9:21:3e:16:75:e6:70:5b:5e:e9:d8:
67:75:e6:0b:47:3d:49:66:b2:9f:c1:05:2b:7b:47:d6:f9:aa:
12:49:df:b2:3a:9e:3b:48:d8:f7:c5:48:e6:dc:5f:97:84:63:
64:01:23:76:b9:61:29:ef:49:43:13:a2:71:63:a4:a2:0e:30:
e6:0e:3b:b2:97:87:1b:b6:d7:e4:18:4b:86:94:26:70:5c:08:
49:70:72:15:0a:d6:b0:5b:07:51:5a:42:88:b3:b0:80:54:c7:
3a:d1:94:9c:84:97:a3:8a:d4:04:73:44:97:5e:9f:3a:de:10:
fe:52:61:3d:d7:d3:06:2a:e9:4e:0c:86:ff:4f:60:dd:e9:51:
8f:2f:7b:3d:18:55:1d:f4:76:d8:3f:1c:36:58:9c:68:40:80:
12:47:9d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4CIYYeCO9ivD8T19pdB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MDQzMjVkNTllMWUzZmY4M2FjM2Q1MTFiYTAyZjBmOGE0
MTU4ODQwHhcNMjYwNzI3MDAwMTExWhcNMjYwNzI4MDAwMTExWjAzMTEwLwYDVQQD
EyhiMWMzYTlkNjY1MTY0ODA3OTcxODcyODhhZDRhZGQ2Mzk3ODYwZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY3dQkicCNomZNZQPmwZLRXQLbTx
m0+czvwFdhIIw6rlCe4jOZam8nl6JVT7QhTkzVWGrWVoRPJTbgaLq6cBJUEQH6l7
9o0GWW0A+qzZCr7uvUJ3PNvLCTP+wB6LnQB09tNOPpOUFI2qZdwET4LjEcjoMYVe
allNzpYodX5ffFlrM5EFzelCA11JhqowcqVhG2fHv89eHAfM22B1ax6NYLKjDJG0
abUCrgkGO4xsjjwpVebAhdguBCzqhQHPz5gxYGLIBRQM3sRiGhZIg5bEefCb+ugI
vuOf8MNaQ3aypCWsY8h0s3aS0pw5aA2Eksd4Wr/08f/+hoRA+IHipdcmoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHDqdZlFkgHlxhyiK1K3WOXhg44MB8GA1UdIwQY
MBaAFPQEMl1Z4eP/g6w9URugLw+KQViEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUFReVhWbmg0Xy1EckQxUkc2QXZENHBCV0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2Ut
NjQyNWU0MzgyMzMzLzEvOUFReVhWbmg0Xy1EckQxUkc2QXZENHBCV0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2UtNjQyNWU0MzgyMzMz
LzEvOUFReVhWbmg0Xy1EckQxUkc2QXZENHBCV0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1E8wVno
M1eeyj6/HWQ47tjbyUa78Tfq4YjD7m4dO+/8DEMONw5ixFlZtARdA/s+eokQLcQY
TmCETPEIEJT0Age7cpTkBG7Rccjn3/V/0fqVHkS5RlxGLfFnaL8QTX1fMfkhPhZ1
5nBbXunYZ3XmC0c9SWayn8EFK3tH1vmqEknfsjqeO0jY98VI5txfl4RjZAEjdrlh
Ke9JQxOicWOkog4w5g47speHG7bX5BhLhpQmcFwISXByFQrWsFsHUVpCiLOwgFTH
OtGUnISXo4rUBHNEl16fOt4Q/lJhPdfTBirpTgyG/09g3elRjy97PRhVHfR22D8c
NlicaECAEkediw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:13 2026 by rpki-client