Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: s/Jwr0F6XvrjXQEWKqFRq3YN9gagXLx3intDzsbbaX4=
Subject key identifier: 1E:B1:7E:86:B8:2D:0F:90:E3:DA:8D:9F:0B:6E:95:45:A6:12:78:AD
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019F8F7F199540848EA646BD92D83BD8E9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 105F
Signing time: Thu 23 Jul 2026 15:01:39 +0000
Manifest this update: Thu 23 Jul 2026 15:01:39 +0000
Manifest next update: Fri 24 Jul 2026 15:01:39 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: 8mIhsQYh8l/9V+dkEX48NqTp96up/94ZrajoH4MHJe0=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:19:95:40:84:8e:a6:46:bd:92:d8:3b:d8:e9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Jul 23 15:01:39 2026 GMT
Not After : Jul 24 15:01:39 2026 GMT
Subject: CN=1eb17e86b82d0f90e3da8d9f0b6e9545a61278ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:30:16:68:cd:d6:b0:8e:47:a2:a2:e5:e4:
ad:af:25:6b:d5:0b:6f:42:65:68:c5:ab:3a:88:3b:
d1:99:29:e1:ac:12:c0:fa:ce:15:2d:86:1e:62:13:
47:b7:76:72:3e:5f:4c:61:b9:f4:95:0f:6f:d3:d3:
7b:fc:30:d5:ec:f4:5a:01:99:2a:ff:7a:51:fc:8c:
af:d6:e5:3f:6f:f0:36:39:c7:18:a1:99:73:4d:8a:
45:53:42:85:ed:94:7f:58:7b:e6:90:4b:c3:c0:25:
5e:79:84:4c:88:5c:98:09:30:ad:2c:14:6b:eb:89:
69:30:cd:b4:9a:1d:60:58:f4:bf:71:0b:ca:42:23:
e5:f1:2a:95:97:93:53:d5:37:5a:59:71:16:9e:36:
eb:f2:11:8b:00:9b:1a:51:3b:fc:18:25:bc:e1:65:
53:51:6f:11:64:92:59:5e:8d:e5:5e:cc:67:4f:31:
b9:18:d5:ff:9c:4b:a8:04:75:6e:d7:1e:47:c7:6f:
8f:65:fc:70:0b:6f:a1:f9:dc:41:12:57:8b:ef:5c:
11:bd:6f:50:da:fb:63:c7:26:de:fa:6b:db:68:b8:
99:47:43:9b:a0:ef:65:68:4a:ab:f5:fe:0e:18:f7:
df:9f:43:d3:c8:d4:03:6d:f2:6e:75:78:c7:6c:e1:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:7E:86:B8:2D:0F:90:E3:DA:8D:9F:0B:6E:95:45:A6:12:78:AD
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:cb:62:dd:8a:ed:cc:5a:cd:5b:05:d6:11:5d:02:f1:9c:
49:b3:d5:d1:84:70:cd:02:f9:4f:0e:d6:e0:24:0d:73:1b:47:
2c:1c:16:63:53:75:08:07:a0:5a:84:b6:93:9a:5e:4b:58:88:
f6:98:3d:b4:7f:a3:b2:93:83:95:f8:80:89:8a:fe:bb:5c:7d:
32:4c:2e:6c:f1:1e:20:9d:52:e7:e2:5f:cf:50:2c:e9:53:31:
1a:63:33:e2:4f:76:15:f0:ea:34:95:f8:27:b0:95:0e:21:ad:
0a:d3:58:e0:d9:28:38:a4:7f:6c:a9:35:84:d4:4f:e7:33:01:
fb:4f:60:d7:75:d3:3d:db:55:16:b9:37:c1:6b:76:7d:77:00:
81:b0:91:42:69:24:3e:2e:8c:86:7f:0b:bb:9d:9d:20:24:eb:
53:a3:e2:c5:56:28:94:74:f9:1f:ac:a1:1e:8d:84:2f:04:51:
19:1c:f0:f9:ef:c1:2e:29:c9:cf:26:be:97:ad:65:ad:c2:7c:
a4:e9:15:e0:9f:e8:3b:e6:de:58:c9:98:89:fc:34:45:e8:cb:
43:b5:ba:02:c4:0b:b2:6c:32:8f:e6:c1:c0:f9:e6:8c:01:33:
2c:15:4c:47:44:89:ea:ca:29:2a:29:92:f4:55:51:3e:85:a3:
15:66:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:52 2026 by rpki-client