Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: QWhvsgoa77//md4DLPYU7l/NvuXO12YicwyZODfUbfQ=
Subject key identifier: 89:DB:08:DE:7B:B3:B3:83:14:1F:AD:25:ED:B5:C6:AE:67:71:8B:BB
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019F8F471BB4A0205AE18BD3311DF769FD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0F40
Signing time: Thu 23 Jul 2026 14:00:29 +0000
Manifest this update: Thu 23 Jul 2026 14:00:29 +0000
Manifest next update: Fri 24 Jul 2026 14:00:29 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: HeR49+5Es1YuN7p8dFIv6iAEzfLOq4EaMMViDN4jyDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:1b:b4:a0:20:5a:e1:8b:d3:31:1d:f7:69:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Jul 23 14:00:29 2026 GMT
Not After : Jul 24 14:00:29 2026 GMT
Subject: CN=89db08de7bb3b383141fad25edb5c6ae67718bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:f5:56:69:41:d1:c9:f2:28:83:2a:0f:42:
38:cb:0f:f5:6e:aa:fd:58:bb:fe:88:a2:8d:94:9c:
df:02:76:56:ec:02:ef:05:a1:c5:8d:97:ce:f0:cb:
b9:c3:ef:4f:d3:20:45:c0:56:77:b3:e3:5e:95:8b:
3f:05:43:bc:c7:02:a3:1c:2f:93:45:70:c7:05:c7:
24:a4:ec:74:bf:1c:8e:84:62:1d:d9:79:c7:75:b8:
28:b4:bb:25:eb:34:a1:13:67:f3:ba:0f:f9:1c:29:
8b:8c:0a:66:0e:0e:bc:83:e6:80:f6:61:f0:21:33:
fd:56:80:11:ae:13:4d:06:5b:08:15:e8:4d:66:cd:
82:19:a5:b6:f3:e3:3a:af:6b:98:41:23:3b:c8:d0:
f0:f5:e9:41:23:ce:fb:80:55:4f:46:35:44:ea:42:
39:99:8c:19:b5:0f:4c:fa:bc:e6:76:cd:f8:37:a1:
00:0a:2f:e8:65:e1:10:7d:ae:cf:fb:85:6f:60:93:
35:f4:12:0e:1f:0b:25:fa:d5:2c:09:fb:ba:10:8a:
cf:b0:d8:29:0b:df:23:8e:ea:4c:0b:61:b6:28:6e:
9a:62:0b:2c:1b:a3:5b:0e:ac:85:0b:ee:53:48:0a:
2d:4f:7c:ad:a5:4a:bc:50:5d:6b:ca:c2:e2:17:86:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:08:DE:7B:B3:B3:83:14:1F:AD:25:ED:B5:C6:AE:67:71:8B:BB
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:db:4f:37:11:72:d2:b7:29:f1:54:ec:f4:e7:0a:06:84:58:
a3:79:63:aa:6c:37:fb:2c:62:ee:ea:cc:64:49:f9:84:e5:25:
2a:c8:9a:7f:66:88:e8:2d:b1:97:c8:98:95:7f:cd:cf:d4:53:
3d:d1:b5:b0:9b:65:11:ef:f1:74:75:57:9c:88:af:41:21:0f:
1f:2c:68:40:d8:d4:a6:96:53:83:e6:4a:77:2c:91:c0:3c:b5:
30:0d:05:d8:d2:4e:cc:67:7b:3d:c9:9f:8a:54:4e:30:25:84:
a5:fc:d5:1a:39:f8:67:4e:24:61:85:fc:7f:e8:29:06:7b:92:
23:b2:ea:64:07:26:a4:75:84:08:6c:8d:87:6f:fa:71:f5:64:
d7:23:ea:f3:38:2b:89:0b:4d:46:d5:a1:e8:12:a0:ab:fe:a0:
ac:13:73:1f:c3:7f:99:c5:7d:c6:99:92:9b:c0:8a:37:92:04:
47:8c:89:2f:68:2b:b2:4f:48:43:6a:2a:20:0b:ee:4d:ea:ac:
56:a5:ef:f0:c9:8e:7b:96:39:96:58:83:59:68:c0:9b:48:15:
78:9a:de:52:8e:6c:31:5f:bf:80:35:68:78:41:49:8f:cc:3e:
46:4d:bd:54:72:53:0a:18:e8:a6:77:20:d2:c4:ba:d6:71:a1:
71:28:b9:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRxu0oCBa4YvTMR33af0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi
MmEyN2UwHhcNMjYwNzIzMTQwMDI5WhcNMjYwNzI0MTQwMDI5WjAzMTEwLwYDVQQD
Eyg4OWRiMDhkZTdiYjNiMzgzMTQxZmFkMjVlZGI1YzZhZTY3NzE4YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHX1VmlB0cnyKIMqD0I4yw/1bqr9
WLv+iKKNlJzfAnZW7ALvBaHFjZfO8Mu5w+9P0yBFwFZ3s+NelYs/BUO8xwKjHC+T
RXDHBcckpOx0vxyOhGId2XnHdbgotLsl6zShE2fzug/5HCmLjApmDg68g+aA9mHw
ITP9VoARrhNNBlsIFehNZs2CGaW28+M6r2uYQSM7yNDw9elBI877gFVPRjVE6kI5
mYwZtQ9M+rzmds34N6EACi/oZeEQfa7P+4VvYJM19BIOHwsl+tUsCfu6EIrPsNgp
C98jjupMC2G2KG6aYgssG6NbDqyFC+5TSAotT3ytpUq8UF1rysLiF4ZzmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInbCN57s7ODFB+tJe21xq5ncYu7MB8GA1UdIwQY
MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt
NDg4NzkyMzg4ZTViLzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi
LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9tPNxFy
0rcp8VTs9OcKBoRYo3ljqmw3+yxi7urMZEn5hOUlKsiaf2aI6C2xl8iYlX/Nz9RT
PdG1sJtlEe/xdHVXnIivQSEPHyxoQNjUppZTg+ZKdyyRwDy1MA0F2NJOzGd7Pcmf
ilROMCWEpfzVGjn4Z04kYYX8f+gpBnuSI7LqZAcmpHWECGyNh2/6cfVk1yPq8zgr
iQtNRtWh6BKgq/6grBNzH8N/mcV9xpmSm8CKN5IER4yJL2grsk9IQ2oqIAvuTeqs
VqXv8MmOe5Y5lliDWWjAm0gVeJreUo5sMV+/gDVoeEFJj8w+Rk29VHJTChjopncg
0sS61nGhcSi5Lg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:07 2026 by rpki-client