
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: 2biL/1oF0svoJ3sxX2H3ZLjBNx9qvwH5h6WrprZN7RE=
Subject key identifier: 8D:A7:CE:41:39:8E:EB:D2:44:57:63:F3:E2:15:49:CF:3A:BC:9A:AF
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019F90FF84DC700997E42E3F865602B67230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0BEA
Signing time: Thu 23 Jul 2026 22:01:32 +0000
Manifest this update: Thu 23 Jul 2026 22:01:32 +0000
Manifest next update: Fri 24 Jul 2026 22:01:32 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: cm6sqg9q5kEZLCmJ9bZbDnRr//4/Xw/SduNo+TtwYwU=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:84:dc:70:09:97:e4:2e:3f:86:56:02:b6:72:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jul 23 22:01:32 2026 GMT
Not After : Jul 24 22:01:32 2026 GMT
Subject: CN=8da7ce41398eebd2445763f3e21549cf3abc9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:85:e6:9c:cf:79:e4:7b:c3:2a:a1:59:9b:
23:96:32:a9:34:eb:3b:1c:c0:bc:24:7b:3e:8b:86:
19:10:ab:ba:72:f0:88:db:c2:c5:e7:f2:5b:dd:34:
34:31:bf:40:fe:80:bc:3b:a4:79:07:42:4f:08:d4:
b8:c7:2e:79:61:b7:5a:88:9b:52:a2:98:b4:7c:62:
fc:73:4f:bf:eb:36:e2:83:53:0a:3f:10:15:66:64:
56:84:23:8c:f6:4d:13:db:98:4e:4d:11:f3:15:9b:
db:fc:63:77:01:72:ef:94:e2:96:00:8c:75:d5:cd:
99:42:e6:77:b4:21:72:05:ed:1f:b9:9f:53:7a:ca:
11:ad:eb:c4:9d:37:a8:7a:5f:85:8d:f5:e1:e2:b6:
c7:cc:72:43:b2:3b:c2:be:32:bd:83:a7:e8:dd:42:
eb:6b:77:fc:c0:d1:fe:f7:59:cc:d6:d7:f6:9e:33:
d9:20:2c:6b:66:91:84:a3:ff:55:c8:bd:6e:94:37:
79:79:49:75:8f:1f:c3:a2:f0:82:0b:03:1c:f5:52:
8f:42:2c:4b:11:09:46:2d:ba:2b:60:dc:76:a7:d7:
23:37:d9:b2:39:a6:bd:91:6f:9a:58:10:cf:10:58:
de:32:98:51:9c:ba:e9:0f:f8:7b:b2:86:5c:22:4b:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A7:CE:41:39:8E:EB:D2:44:57:63:F3:E2:15:49:CF:3A:BC:9A:AF
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4e:7b:5a:b6:ba:df:7d:79:45:94:ec:7f:5b:2a:63:5e:75:
24:19:a9:c6:e3:07:b7:ae:0a:80:e0:ec:95:94:7d:cf:66:3e:
33:05:a8:f8:22:39:2b:ea:11:f3:15:9a:af:9f:e1:ef:66:c3:
50:de:24:5b:66:e6:3c:44:27:1d:1e:86:19:77:e6:0d:95:32:
88:51:2e:17:e9:cf:23:a3:eb:9c:a7:9a:4b:47:92:5f:d6:df:
7b:c8:35:bb:8b:00:19:2d:8c:20:c1:fc:4a:7b:52:cb:90:ad:
ed:f9:f8:d1:e0:22:0c:52:df:22:05:4e:fb:a2:51:91:cf:41:
4e:69:3a:5c:ee:6b:d9:40:72:52:c5:95:ab:80:96:84:1e:d5:
28:42:b6:87:cc:22:27:60:d4:e7:9c:2e:7f:8f:d0:00:ec:14:
2a:df:32:4b:be:01:e9:ec:b9:e8:10:48:57:a6:14:a2:32:64:
38:5b:0f:ad:7b:81:bf:5c:94:1f:6f:fd:92:bd:53:34:cb:13:
f6:71:0d:bd:8b:b5:44:d3:25:7f:5f:a2:d8:b8:9e:09:11:e3:
17:69:ea:7f:71:3d:5c:1a:6e:68:af:ff:0b:eb:b8:f8:9d:aa:
f4:cb:70:38:e9:cd:66:a9:6d:08:1d:47:be:1c:08:52:c9:df:
d7:86:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:26 2026 by rpki-client