Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: RTBGsJ+4GZMLiy+OX2lVRR1bHNMFR3NlBfXqOlowwQ0=
Subject key identifier: 78:18:AF:14:8A:A2:CD:E7:99:A9:E4:EB:27:44:10:3B:1C:E1:00:FE
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019F90C82F5033DE69B5F9C601FCBA8B65AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 21:01:06 +0000
Manifest this update: Thu 23 Jul 2026 21:01:06 +0000
Manifest next update: Fri 24 Jul 2026 21:01:06 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: UysWXKex++liSadCA4Oxp+jcGzfWmLbvf4Z9TI1HpQ4=)
2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=)
3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:2f:50:33:de:69:b5:f9:c6:01:fc:ba:8b:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jul 23 21:01:06 2026 GMT
Not After : Jul 24 21:01:06 2026 GMT
Subject: CN=7818af148aa2cde799a9e4eb2744103b1ce100fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:c8:d8:d2:84:f1:fc:2a:3e:17:da:ce:50:
eb:23:35:2e:9c:94:cc:88:fe:1b:ce:af:75:cc:18:
fc:13:fb:72:10:fa:ce:d0:77:1e:47:b8:ec:28:41:
cc:b1:5d:39:cf:0e:f3:25:c7:38:87:38:bf:60:e6:
6b:92:38:f2:7e:b1:a1:9d:9b:6c:27:6c:dd:6a:47:
96:eb:f1:d3:7d:75:d3:3b:43:80:52:6d:bb:77:10:
72:45:cc:73:42:da:26:38:a1:95:06:63:81:19:48:
bd:b4:b2:55:fc:dc:2b:30:04:5e:4f:25:0d:9f:77:
f4:2f:64:99:56:6d:9d:e1:82:81:64:83:87:61:b7:
e7:00:59:1d:86:b6:d6:77:a5:8a:0d:0e:bb:24:07:
f9:5b:a7:62:34:18:9e:9d:cd:05:03:87:c1:99:71:
3a:76:6b:04:25:6b:62:77:96:50:4d:db:cc:67:ac:
92:38:59:7c:d0:a6:86:50:9e:23:29:cf:02:3d:c4:
d0:ef:07:05:23:6b:59:c6:ad:25:88:2e:8a:e6:f9:
61:e6:b3:cd:86:21:04:d9:c3:a2:7f:b1:0e:4b:d1:
ad:28:e1:bc:ef:0d:72:05:c4:e4:93:80:c5:5d:79:
e1:f7:7d:34:0d:71:ef:7e:8f:9f:72:ff:33:ef:1e:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:AF:14:8A:A2:CD:E7:99:A9:E4:EB:27:44:10:3B:1C:E1:00:FE
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:d9:90:8a:5c:b8:7f:09:55:87:37:13:68:f7:71:cd:97:
c3:b6:bc:21:3d:dd:db:56:c5:e0:39:df:43:64:38:17:d9:f4:
2d:c2:d3:67:6a:0e:39:fb:95:9c:ac:d9:19:60:97:17:b3:2d:
1d:dd:16:b9:30:76:01:e8:e7:12:3b:36:55:93:4b:f3:9b:01:
25:8c:93:8f:86:21:a3:a0:85:2c:7d:4f:c1:a2:03:99:d3:4e:
b4:09:67:02:9f:ba:f1:3b:63:9c:e8:c7:fa:b6:c5:01:9c:52:
46:4f:ba:f2:55:41:93:26:3f:43:68:b6:cb:21:90:bf:62:f5:
0e:d0:72:9d:e8:37:65:38:aa:2d:1b:2b:8f:d5:e4:89:39:f3:
ad:c3:60:22:5b:2c:d5:40:9b:c3:0e:ca:42:cf:55:c2:c2:f9:
a9:33:23:21:f5:05:83:34:17:70:b9:00:61:6d:25:b6:c2:03:
11:45:18:9c:ac:91:47:cf:63:09:a1:59:5e:47:b5:4b:09:d5:
92:52:a4:6b:ec:82:d9:b3:ec:b3:31:37:4a:e3:3f:52:bf:77:
ae:04:f5:36:ae:23:08:8b:fd:5c:6d:8f:15:45:1c:d1:62:12:
77:55:a5:a2:79:2f:f9:f0:f7:1d:26:d6:bb:17:43:70:00:54:
ae:b6:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:28 2026 by rpki-client