Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: N2xY0ZwbELrQK9H1+YgnL9RlAaU6Oqs62eB88uvXTVk=
Subject key identifier: ED:45:A9:51:24:A4:9E:00:58:73:4A:27:F3:BF:CA:FF:E3:B9:4E:DC
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019F935C002EE471D4D8037B631A37A59441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0EFC
Signing time: Fri 24 Jul 2026 09:01:47 +0000
Manifest this update: Fri 24 Jul 2026 09:01:47 +0000
Manifest next update: Sat 25 Jul 2026 09:01:47 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: ur44YO2oSn5+iSZNMm4AaBAxWt4ic61ngqTW/oGsJXk=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:00:2e:e4:71:d4:d8:03:7b:63:1a:37:a5:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Jul 24 09:01:47 2026 GMT
Not After : Jul 25 09:01:47 2026 GMT
Subject: CN=ed45a95124a49e0058734a27f3bfcaffe3b94edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:ec:6f:5a:b6:ab:61:b5:c5:19:73:af:06:
ca:bb:11:48:ad:f6:f9:90:9e:63:e6:d6:f0:c2:73:
04:01:ea:1b:b7:c1:c5:e6:34:14:8d:4d:6b:ae:c9:
af:58:08:9a:2b:10:d0:98:84:f4:63:86:fc:6a:d5:
c1:53:28:b1:46:9f:53:f7:5a:13:e7:03:2f:87:00:
13:26:28:13:27:f9:cb:f0:f2:9e:e6:b9:87:a8:09:
be:aa:ff:f4:7a:3f:b6:98:09:47:5b:5a:5c:08:1c:
75:50:33:c5:06:22:ed:72:9c:8a:8b:e0:16:53:19:
69:1e:49:a2:20:bc:52:b4:33:2c:f7:7d:cc:38:16:
95:64:7c:be:2d:4f:21:a4:ba:8c:65:4c:e5:f5:4d:
ea:70:ce:e0:80:aa:c6:8c:c4:d6:fd:24:95:05:60:
07:c1:48:d0:dd:de:74:99:bd:f7:ac:43:2c:73:4c:
fb:b5:a6:53:19:4c:94:ee:c5:9b:bb:42:c1:40:d9:
5a:2b:65:aa:2b:02:ae:1e:52:56:f5:e6:5a:23:fa:
9f:26:27:6f:49:81:60:9c:93:30:e8:c4:ee:e6:b3:
0f:76:b7:e5:bf:a5:b8:ab:76:fa:50:57:21:29:e4:
85:7e:c4:db:ee:d6:ed:b7:a7:86:0c:24:64:ef:5a:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:A9:51:24:A4:9E:00:58:73:4A:27:F3:BF:CA:FF:E3:B9:4E:DC
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:54:9c:cc:81:e9:0a:3d:e4:03:c9:a0:2f:be:d4:a3:ee:
6d:52:c5:fd:29:f9:e0:56:b5:07:47:ec:e1:00:fe:bb:c6:02:
74:e6:d7:b1:43:90:c1:4e:e4:6b:fe:5a:11:a2:89:77:27:77:
34:42:ce:f1:83:67:c6:1d:21:28:1c:0e:5a:84:d3:3e:8d:61:
67:fd:8d:81:2d:70:a6:5f:50:24:d5:ca:7d:3a:69:61:46:54:
48:2b:20:67:c9:ef:c5:ae:ca:94:10:f0:9f:8e:4c:a0:72:98:
8b:ba:8a:4c:0f:9f:a9:f3:29:37:6f:3d:c3:25:08:c5:23:19:
eb:32:ed:5a:38:29:1d:42:4c:af:cb:2e:ea:1b:55:10:06:0e:
64:d0:6f:17:16:50:6e:2b:b7:78:ba:d4:ab:f3:fd:cf:98:4d:
2b:42:7d:a1:b1:75:fc:cf:99:a3:4d:41:e4:7a:2a:97:c3:43:
2f:9d:8f:de:67:33:97:b4:7f:4f:68:34:55:25:5e:b4:d1:db:
9d:59:2a:cf:40:a2:c0:c3:25:3a:d1:74:04:a8:4e:c9:c8:c1:
1b:5c:32:80:70:0d:59:76:ad:32:ab:16:6a:2f:4f:e6:2a:75:
81:de:f7:b2:df:cb:36:c5:b3:56:24:97:b5:e8:19:00:c6:f5:
86:ac:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:07 2026 by rpki-client