Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: n1cNGM/Fvla4LEhyeCimS1cm0jviDFP/TkSmn4tlOcw=
Subject key identifier: 8B:63:BF:70:37:79:37:A5:96:1D:46:63:10:99:0D:E1:E7:F3:6D:1C
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019F90C7D6FF84281E0676775E8BE72BF70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 04CE
Signing time: Thu 23 Jul 2026 21:00:43 +0000
Manifest this update: Thu 23 Jul 2026 21:00:43 +0000
Manifest next update: Fri 24 Jul 2026 21:00:43 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: T2+LIgU1U2BeeY6lWuwZwpdcYUik3v/RkpYVey3u7tc=)
2: _V91AFMDX79rJy9LZzxIy2NAvZI.roa (hash: CvwFuxiDJChNGv61mlWI/2kt69xBouJPI8bb/2Ux424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d6:ff:84:28:1e:06:76:77:5e:8b:e7:2b:f7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Jul 23 21:00:43 2026 GMT
Not After : Jul 24 21:00:43 2026 GMT
Subject: CN=8b63bf70377937a5961d466310990de1e7f36d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:21:4c:35:bd:1f:13:7b:eb:62:da:28:d4:
3e:62:d2:63:b4:a1:99:52:56:1f:68:4b:04:f4:0d:
10:22:60:d6:6c:b6:19:4d:06:8a:b7:c1:67:ac:76:
2c:3d:03:c1:ed:0c:90:b3:08:82:67:2b:bf:11:75:
0b:ce:74:d9:af:ea:4a:f7:af:9c:1c:9e:40:07:a9:
fe:84:ab:bf:a4:0d:ed:5b:8f:48:df:76:b4:89:c4:
a8:52:df:ed:6c:43:5f:68:e5:b4:79:2b:f5:81:66:
c6:e0:29:a4:0f:06:dc:0b:4a:10:66:a7:3d:e9:58:
7e:04:11:52:68:1d:a2:7b:d1:0e:fa:89:4b:de:0d:
9c:f3:3d:6d:9c:c2:b7:4f:ef:de:45:9c:c3:fb:66:
91:87:46:f6:b5:65:32:dc:73:16:83:fc:d4:ec:e9:
ec:53:8c:f9:ce:ec:52:ad:5a:9c:eb:a0:72:0f:ea:
7c:2a:a2:ad:e4:d6:a7:d2:25:91:d5:31:dc:93:97:
32:57:ce:2d:96:66:1d:1c:1d:c8:63:3f:73:bd:2d:
d3:e1:87:0d:48:03:56:eb:94:66:aa:5c:35:b9:31:
3b:d0:90:a6:e0:de:51:86:c5:f0:05:40:f4:85:e7:
0c:eb:ee:e9:27:7b:ba:05:72:9f:35:5b:76:78:2f:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:63:BF:70:37:79:37:A5:96:1D:46:63:10:99:0D:E1:E7:F3:6D:1C
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:67:12:4e:5e:33:a1:c6:f0:25:4c:2b:c1:60:7e:eb:41:
37:6d:20:14:2c:8d:9d:4d:37:dc:46:e8:04:ef:b5:d0:83:ab:
8b:05:e0:3d:42:b6:f6:65:5a:e7:c9:2d:c4:4b:49:f4:a5:b7:
83:e5:13:68:68:a9:1e:35:5a:11:1b:18:5a:55:0e:91:f4:1a:
ba:f5:a1:34:85:2a:fc:bb:b0:d0:4d:2e:fd:fc:ca:23:c1:c5:
7c:73:b2:b0:24:28:0d:5d:6f:92:7f:68:08:c6:f6:e2:61:14:
61:a3:2a:d7:8b:db:15:56:0b:58:dc:03:9b:53:4d:15:61:9e:
a0:f1:e0:23:f5:61:40:f0:ec:09:da:f6:81:91:06:24:8c:1b:
ea:74:2d:77:ef:05:b9:0a:7b:ea:72:9f:e3:08:18:59:c5:68:
6a:c2:34:a9:23:40:d1:62:8d:c7:bb:12:c2:6c:1e:14:52:ea:
ef:2a:88:8e:20:3e:7a:8e:05:3f:ef:03:66:f2:48:2f:70:84:
e8:ad:27:3b:d1:6c:c6:b1:ca:1c:63:f7:08:19:39:19:78:0e:
6f:be:5d:f5:7b:5b:37:9f:a2:63:aa:23:ee:01:c4:47:4b:92:
bd:aa:25:ee:79:26:a5:a2:64:98:4e:51:22:9d:bc:a6:ae:4d:
46:6e:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:30 2026 by rpki-client