Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: cQs/uXQaWhBUHjZvXfUlxV5c/HwD0NIQlAX2AgI+gyA=
Subject key identifier: BB:30:CE:BD:35:CC:69:70:D3:13:0B:18:FA:AD:48:48:A7:7B:DC:F8
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019F8F7E2AA52D22463BD28C26D80862E636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0997
Signing time: Thu 23 Jul 2026 15:00:37 +0000
Manifest this update: Thu 23 Jul 2026 15:00:37 +0000
Manifest next update: Fri 24 Jul 2026 15:00:37 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: 6WOnmLpQRbfWfb675r6fgTDsqKQjV5v3ye56hGIDAq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:2a:a5:2d:22:46:3b:d2:8c:26:d8:08:62:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Jul 23 15:00:37 2026 GMT
Not After : Jul 24 15:00:37 2026 GMT
Subject: CN=bb30cebd35cc6970d3130b18faad4848a77bdcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:98:09:24:b4:36:12:73:54:b8:60:b1:d0:
d6:77:e9:cd:31:4b:88:c7:61:14:bf:e6:c1:83:cb:
b8:0e:c1:71:51:ed:7e:54:9c:53:be:a4:af:71:fc:
ed:81:95:6c:93:4d:63:94:e8:a0:f1:10:0e:f0:6f:
7c:9f:23:44:69:4e:66:d0:7a:24:0d:6d:eb:1b:8e:
10:c0:46:91:2d:38:a9:ab:66:78:44:fa:ee:97:b1:
47:aa:2f:46:9f:c9:4d:34:64:4a:ee:8f:88:e6:c9:
b3:7f:e6:84:4f:3e:92:a8:43:b5:cc:6e:01:2f:5d:
01:c2:73:81:ca:43:81:63:56:78:a9:cc:91:82:a7:
55:89:1e:41:fe:e0:2d:0d:07:d8:9a:da:97:b2:f4:
67:6e:1b:29:10:35:76:33:fd:10:18:f4:9b:7e:eb:
33:d5:a1:08:e8:75:60:61:67:10:37:54:e4:40:2b:
7d:53:40:39:b4:41:59:c5:9b:5a:cd:63:ea:99:85:
e8:12:a4:bf:32:e3:6c:6a:5b:c5:3e:c1:f0:9b:4a:
38:ee:65:3f:b7:70:e4:70:fb:cb:fd:1c:6f:56:b6:
3b:3e:42:bb:08:14:e1:13:27:a1:29:99:e3:52:e0:
5f:44:14:d5:12:e6:d4:64:ef:92:96:ed:3b:f5:d5:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:30:CE:BD:35:CC:69:70:D3:13:0B:18:FA:AD:48:48:A7:7B:DC:F8
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:84:ad:60:53:84:86:06:72:f3:54:52:7c:94:98:f2:70:
a0:fb:0e:e1:bb:67:4d:0c:4e:10:55:17:03:b7:b7:6e:73:23:
71:b6:81:68:6f:f4:87:e4:bd:bf:a1:43:25:ed:83:bc:63:8d:
f0:e2:90:8a:9f:70:33:cb:c9:cf:4f:68:67:71:d7:a6:ec:84:
0e:96:e9:ac:9d:5e:e8:a4:89:80:51:bd:f4:6f:f2:33:86:82:
f0:1c:55:67:67:ed:22:94:f2:97:5a:45:e6:57:ec:50:59:62:
64:62:15:7c:1f:fa:8f:a9:59:8a:a5:f4:5a:ce:a0:dc:a6:6f:
97:72:eb:ec:2d:8f:bd:00:02:f2:ed:38:48:97:9d:25:bd:5e:
e6:c2:86:20:3d:d3:fb:13:a0:ca:72:e2:2e:04:ec:be:95:14:
11:ef:f6:d7:52:83:d2:b6:ce:13:51:17:e9:b5:57:d8:f9:e1:
62:2f:64:b7:d2:cc:10:92:2d:6e:9e:af:7f:13:a4:9c:70:83:
ef:96:6a:5d:f4:64:ee:0d:71:e4:61:52:33:bd:69:1e:20:2f:
88:30:5b:63:09:ae:fe:49:3a:40:b4:ea:6f:0d:0f:8a:44:e9:
d9:f7:07:5c:e3:c8:1f:f0:72:fd:ff:ce:00:2c:2b:3a:a6:64:
fe:d9:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:15 2026 by rpki-client