Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: YBHc4JZ2bH1yK1nmTJkVExq1dQgU6lQMIWNFp5rYgjY=
Subject key identifier: 16:18:08:43:06:0A:28:84:06:42:54:F6:30:D5:B2:57:BA:36:3D:65
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019F9023059F72662E036C29F6F785CF6743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0E67
Signing time: Thu 23 Jul 2026 18:00:41 +0000
Manifest this update: Thu 23 Jul 2026 18:00:41 +0000
Manifest next update: Fri 24 Jul 2026 18:00:41 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: XER6jGB+6Xqo9Kk6UrMnzEkAiSRchI3rqWOYcCrFPO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:05:9f:72:66:2e:03:6c:29:f6:f7:85:cf:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jul 23 18:00:41 2026 GMT
Not After : Jul 24 18:00:41 2026 GMT
Subject: CN=16180843060a2884064254f630d5b257ba363d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:1b:ab:3d:fb:ef:e1:af:e9:ff:1d:75:ff:
94:b0:67:99:a6:e8:df:6f:ee:78:c0:08:7f:83:10:
7f:ce:4f:94:e4:a4:8c:3e:8c:05:ce:9e:fb:47:79:
55:e7:bf:af:6f:7a:a4:12:66:85:ad:54:8b:74:18:
23:64:68:11:08:b8:1d:84:28:8a:ff:f6:7f:4a:57:
7e:6f:08:cc:44:d8:50:da:b9:8b:e6:e3:eb:fd:27:
a1:ab:c0:9f:79:2b:45:98:f7:c4:02:3f:8e:ca:eb:
e6:7d:a7:cf:28:6c:6c:07:ee:95:e5:1e:08:6a:5b:
2f:80:e2:3a:71:ca:d0:be:41:68:e4:78:a2:34:6d:
9f:4c:b7:be:f2:a2:8f:76:ea:99:23:80:9a:8e:a5:
56:6c:cf:0c:41:4f:e4:0d:f9:33:75:76:ce:35:9f:
c9:78:98:a3:ad:3e:73:12:29:fe:30:62:2e:47:e2:
97:8a:d9:06:7d:5f:5c:2f:62:25:a3:29:3b:0a:3c:
44:9d:2c:91:40:f4:63:19:71:c3:2a:8f:84:a7:ed:
8c:7e:39:cc:49:c0:e3:0c:2c:5d:1f:ce:92:aa:86:
96:6e:a0:9c:fb:3c:e1:2d:7f:7a:4e:1a:18:c9:cc:
8c:78:62:10:d0:fa:54:22:6e:1a:b5:c9:70:78:b3:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:08:43:06:0A:28:84:06:42:54:F6:30:D5:B2:57:BA:36:3D:65
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:33:16:50:17:4b:5a:44:44:bc:7a:1e:9d:2c:3a:ca:7d:
86:2e:8a:98:5a:db:ab:71:b9:c7:3b:5d:4a:89:c7:85:73:4f:
d9:08:2d:ed:bf:cd:2e:33:dc:ac:3c:91:65:88:53:ee:5c:ac:
32:a5:49:5a:76:b5:c0:ba:95:6b:3c:59:71:4a:e3:5f:fa:82:
6b:c6:2f:ba:31:12:c5:67:d0:e9:c0:6c:f7:a5:09:8e:96:bb:
21:b2:7a:a4:b8:b6:b2:bd:ec:91:98:98:18:ee:d2:0e:06:ea:
fb:a3:95:69:76:b3:f6:23:f9:9e:ba:1e:63:75:af:b1:cb:75:
9b:bc:b9:9e:ee:38:84:1a:1d:75:17:b9:43:53:80:1b:07:9e:
d9:ed:ff:ac:b0:95:25:d9:2f:b1:4b:86:dc:70:94:ec:0c:f4:
4f:52:c1:e6:04:35:f3:a1:48:96:9a:df:fa:7b:3f:4d:d3:a8:
7f:33:31:8a:a1:7b:36:67:20:d1:ba:6d:57:db:57:fb:13:49:
3a:f3:7f:95:94:9b:91:c1:7a:8e:5b:54:8f:f0:db:58:fb:7a:
23:07:17:7f:5e:5a:27:fa:cb:0c:eb:ac:bd:96:2b:29:9f:20:
1b:1d:c7:9e:b3:c8:24:cc:30:88:b6:33:b4:4f:c0:ef:ab:5d:
5b:d4:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:47:19 2026 by rpki-client