Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: EexLhRRi94rec1FL4fh9KixhqO9iwYMF97121tZD7bg=
Subject key identifier: B9:0D:78:F9:89:CB:0A:53:5E:4E:4F:8C:E2:88:45:2F:5B:0B:23:BD
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 019F916D8299EA8C5CD30D164135AD3BD548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 097E
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: Bjy6VOXCJQ3UozFFvxy2VjHX76HR8iDX/Qk+g2loKXI=)
2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:82:99:ea:8c:5c:d3:0d:16:41:35:ad:3b:d5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=b90d78f989cb0a535e4e4f8ce288452f5b0b23bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:a9:a8:68:27:2b:7c:b2:71:2c:ee:45:83:
df:70:1f:4d:da:7d:d1:b5:c5:fd:ea:54:0a:a4:ef:
89:e5:4d:a9:ee:bc:36:dd:6d:d3:5c:5a:61:c9:1b:
bd:96:90:80:55:94:f3:43:a8:18:9f:e2:19:a0:1c:
4d:01:6c:fe:5b:dd:8b:96:9c:0d:ab:f2:da:9d:26:
0f:65:01:3f:65:b8:da:00:1b:4d:85:2c:c2:8e:6d:
37:b1:b8:9f:e3:f4:b8:6b:dc:31:db:70:c0:ca:58:
0d:5f:4f:5d:4f:e0:85:b0:ce:5b:d7:63:78:f8:3e:
47:3e:a0:2d:9e:57:74:e2:82:0e:e3:8c:1a:05:a4:
41:d6:64:20:08:42:ad:ff:4f:60:2d:47:f0:5e:c9:
5f:d0:a6:ca:03:26:ee:ee:93:05:95:14:ec:24:36:
c6:16:c7:c6:f0:12:ab:73:e4:ed:f0:2c:7e:bb:0f:
f1:35:f6:07:44:d2:fd:d3:d0:1c:00:0a:50:25:98:
b8:2b:fb:e2:e9:36:9c:f0:4d:56:22:cf:a7:f7:5c:
ac:e2:b3:51:cd:56:ba:6c:57:0b:b0:7a:52:c6:a0:
e8:97:40:0d:b3:ae:84:a7:41:4c:fb:d7:23:89:57:
30:be:c5:f7:f6:70:b7:92:90:4b:a3:3f:11:57:00:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:78:F9:89:CB:0A:53:5E:4E:4F:8C:E2:88:45:2F:5B:0B:23:BD
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:40:d9:01:5b:a8:cb:7c:8e:19:ca:29:f9:a5:a0:39:74:
68:0e:92:be:2d:99:21:77:91:7b:d9:bc:c5:94:d1:78:06:14:
a3:1b:a7:13:3a:9e:f2:ff:62:42:e7:07:bc:da:8b:2f:49:8b:
ba:4b:ac:96:2b:e1:17:f7:65:34:26:23:3f:9f:09:0d:b9:7c:
41:f0:33:fa:bf:ce:52:c7:d3:99:dd:57:4e:f2:f0:ec:56:d9:
a7:4f:a1:02:fd:cf:52:67:3d:44:db:d4:cf:88:86:bc:f5:db:
96:1d:04:0f:a2:e0:41:8f:aa:67:88:e4:b6:92:98:17:66:cf:
a6:ba:45:aa:ac:b3:3a:24:44:20:cf:c4:2d:20:d5:3c:3b:1c:
ed:56:d9:51:89:52:9d:e9:b5:2e:51:be:47:13:e9:0f:26:63:
26:ce:d8:cc:36:a3:19:ff:56:64:f6:09:46:c6:e4:fc:1d:31:
68:a6:83:33:57:eb:1e:93:d6:48:93:22:6d:81:b4:f1:d8:0c:
57:23:71:b8:6c:60:37:2b:02:49:f0:15:45:90:58:6f:f8:58:
9f:72:2a:b9:0b:75:eb:d7:8c:d0:2d:d5:d6:8e:5f:a4:d1:47:
ab:a6:ed:d6:e2:91:45:7b:10:af:5f:9c:5a:b0:d9:0a:f9:01:
b7:ca:ac:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:03 2026 by rpki-client