Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: AyaXsm+ILv2bK5AK1oxASqLKzM7uWCgN29N12WoAIS4=
Subject key identifier: 5E:89:AE:38:24:1D:79:75:A7:5B:24:88:46:08:68:69:AC:68:33:21
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019F8EA2822717C96EF7EB6238D9D5C192D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: 0102
Signing time: Thu 23 Jul 2026 11:00:42 +0000
Manifest this update: Thu 23 Jul 2026 11:00:42 +0000
Manifest next update: Fri 24 Jul 2026 11:00:42 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: zwvh5srLD7qbj8uyZBNB0bmZImexfnV8oVDL1zypfpU=)
2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:82:27:17:c9:6e:f7:eb:62:38:d9:d5:c1:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: Jul 23 11:00:42 2026 GMT
Not After : Jul 24 11:00:42 2026 GMT
Subject: CN=5e89ae38241d7975a75b248846086869ac683321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:20:a2:18:23:07:35:8e:19:3f:c1:e3:72:
ca:ce:d2:6c:7b:49:3a:4a:9a:d5:eb:e7:07:e8:61:
9d:46:d4:24:3a:59:d8:12:4a:a7:41:dd:a6:97:b2:
3c:00:3b:f6:6a:e6:16:f1:2e:42:4d:a1:7c:cc:dd:
14:f3:bc:e1:5a:fa:08:b2:57:f4:4c:6c:7a:34:d8:
ba:97:90:a8:6e:49:6b:51:8c:89:43:a4:0d:e8:c7:
80:5e:ea:06:e3:8a:ed:28:e2:21:94:9d:9a:9d:ea:
4f:2b:a1:be:6a:f6:65:1a:16:27:38:42:e3:17:fd:
6f:4e:74:95:05:95:f0:fe:65:17:b5:44:51:d5:01:
2f:7a:a2:51:09:ea:f0:80:1f:19:36:87:35:cb:36:
81:c8:d8:61:60:49:49:2c:26:13:8c:65:b4:fa:d3:
2c:58:6a:b1:b2:0a:15:0f:42:cd:20:a6:25:e2:f2:
76:11:cc:43:0a:c6:40:dc:34:b9:ab:75:36:8e:12:
d1:b3:9a:9d:23:37:28:24:30:dd:e1:6a:d1:48:50:
5a:55:b0:18:82:c7:84:07:e6:5d:85:54:9c:fb:13:
cd:30:cd:05:04:fe:78:90:1f:84:59:ec:ca:34:88:
01:cb:6e:1f:e1:3d:16:e5:c9:9c:2d:96:47:1b:bf:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:AE:38:24:1D:79:75:A7:5B:24:88:46:08:68:69:AC:68:33:21
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:00:03:73:a5:de:25:93:60:a1:3a:20:c9:d0:fa:72:92:d8:
d5:58:5e:e7:83:7f:ef:62:48:3c:44:ab:02:82:7c:b4:88:8a:
c9:bd:ab:4b:bf:82:23:d5:99:23:6a:44:15:9a:e1:b4:49:ae:
bd:52:55:9e:1c:ed:99:9a:98:71:31:a6:30:0c:d2:12:bd:c3:
69:4e:f0:24:4a:9a:57:a0:a3:85:a7:06:be:02:03:ff:4f:43:
ed:02:98:8b:e1:e0:3b:a0:07:31:c6:40:2f:79:c1:b4:16:05:
94:d0:5d:ab:66:9f:ed:07:14:be:95:e1:1f:3f:fc:97:33:82:
d0:b2:3a:e7:cb:56:cd:07:45:d6:45:00:2e:07:4b:fb:ba:85:
05:85:bb:ec:16:2f:b9:22:cd:e2:8c:dc:ed:4b:0f:22:89:02:
da:19:c6:d6:8a:7b:60:44:49:39:97:61:40:97:d9:4b:cd:b7:
30:51:1d:e8:aa:e6:16:4c:81:16:3e:67:e1:fb:b1:25:2e:bf:
ae:9b:d2:52:df:c4:17:7b:57:65:1b:df:e4:3d:33:60:d7:9a:
8f:32:16:7a:5a:f4:de:60:80:cb:f4:99:d1:52:18:1e:90:00:
dd:17:4c:96:ea:82:ab:b9:35:76:a4:46:31:11:c6:2e:c7:a0:
9c:96:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:25 2026 by rpki-client