Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: qSFUh53CNaTX41Fewfe2e+pjmlx6KheKuh26ZCPraS0=
Subject key identifier: 3C:DF:38:1E:00:BA:B9:A5:D9:30:C9:34:76:15:DA:51:EA:66:4E:FB
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019F419ABB35A089379D5D6AF3AE257F67E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 02D8
Signing time: Wed 08 Jul 2026 12:01:27 +0000
Manifest this update: Wed 08 Jul 2026 12:01:27 +0000
Manifest next update: Thu 09 Jul 2026 12:01:27 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: knC7/JbNOxSKIxETM9detH+QtuNt9YSwL67a/o51F4M=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9a:bb:35:a0:89:37:9d:5d:6a:f3:ae:25:7f:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Jul 8 12:01:27 2026 GMT
Not After : Jul 9 12:01:27 2026 GMT
Subject: CN=3cdf381e00bab9a5d930c9347615da51ea664efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:59:bc:81:e5:5e:48:6e:99:81:39:c7:a4:
70:9a:c2:f7:4f:da:28:3a:76:98:b4:d1:bc:66:7e:
0f:71:7d:47:12:8e:d2:9c:f0:07:7d:f6:41:c2:d0:
fe:5c:09:8f:ae:4e:94:37:d5:73:9d:ac:c9:66:f4:
ed:7e:2f:b7:da:c6:79:68:d3:2a:1d:8e:28:87:5a:
09:03:dd:d8:c2:ac:79:a5:bf:93:b4:29:dc:89:87:
ee:8a:b0:bc:99:bb:ad:ff:13:74:f8:0d:d4:46:9d:
09:18:10:a7:9b:e3:d1:16:7f:18:86:4e:8f:ca:d7:
c7:db:2d:c2:20:65:30:f5:ef:3d:5e:9a:82:7e:a6:
bf:a7:3e:03:01:c3:98:e7:a0:23:a8:14:ab:40:42:
9e:13:83:fa:a9:3d:b6:14:3e:a1:8b:c6:1b:cc:40:
4f:8a:26:1d:d8:01:07:21:24:c7:42:e0:89:31:6d:
16:c8:14:19:f0:7b:1a:e4:94:95:db:a8:95:f8:8f:
a1:6b:1b:28:ff:d9:b7:39:37:35:ca:1a:0e:ef:92:
0f:fb:fc:c5:d1:bb:46:d3:7f:17:5e:6d:63:42:3a:
46:cc:43:f7:9a:23:13:8f:d6:59:b2:95:4f:63:58:
29:18:f1:9f:05:60:3d:0c:ae:d4:3b:df:7b:a7:e6:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:38:1E:00:BA:B9:A5:D9:30:C9:34:76:15:DA:51:EA:66:4E:FB
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8d:69:a6:36:15:63:e4:e5:5c:96:2c:63:54:f1:69:b5:16:
3b:37:be:d5:d7:07:b9:71:cf:e8:6c:a1:7a:81:69:78:4b:ba:
a7:84:fc:04:37:41:74:29:12:e1:7e:00:9c:18:3c:fb:9a:71:
2f:a1:94:77:5b:98:f4:48:57:e3:18:85:8b:8e:a3:53:bf:96:
08:16:ea:93:05:e4:e9:65:ff:65:d4:d3:03:12:b9:0e:b8:e2:
60:d4:95:25:fe:aa:6e:ed:0b:69:7c:9b:81:f6:a0:9b:a1:b2:
03:ce:e7:23:06:bf:5b:14:d5:86:2e:29:da:74:03:28:1e:0a:
36:f1:40:f5:ee:40:1e:c0:af:37:90:ad:a0:6a:60:1b:0f:e3:
07:63:19:c7:e1:ec:f5:2c:90:12:a4:3a:0d:c5:8e:d3:8d:3d:
d8:71:4f:6e:63:48:a5:8b:88:52:ae:44:2d:6f:d3:95:d0:ca:
9a:68:68:be:c5:5c:7d:c4:d9:08:2a:1b:e2:32:23:95:2e:fb:
29:bc:03:d5:aa:6f:b6:16:8d:c1:22:4c:90:08:ce:1e:3b:e1:
98:31:bd:9d:8c:d3:41:70:5e:ae:db:79:ef:26:4e:67:27:b6:
b6:68:6b:52:eb:60:ff:f3:7f:bf:2d:be:c1:65:66:ca:da:03:
86:d1:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:38:25 2026 by rpki-client