Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: UAqhr7osmn6VNBvPrfp7zvtkXB+wmKagLIzOWHO4vM4=
Subject key identifier: E6:6B:AC:4D:A1:67:DB:31:58:4E:46:7A:12:5F:A5:E7:7D:F8:D3:5B
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019F8FEC0EB08E9D0D9F1C1F388C61C8CCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 17:00:39 +0000
Manifest this update: Thu 23 Jul 2026 17:00:39 +0000
Manifest next update: Fri 24 Jul 2026 17:00:39 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: YGqktRkHJz1qUcy/aSdcqVDcBgH/vdkFcteqch3B57w=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:0e:b0:8e:9d:0d:9f:1c:1f:38:8c:61:c8:cc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jul 23 17:00:39 2026 GMT
Not After : Jul 24 17:00:39 2026 GMT
Subject: CN=e66bac4da167db31584e467a125fa5e77df8d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:f9:9f:32:6d:31:78:62:d5:0d:0b:3e:47:
56:0a:58:1f:51:90:14:43:f6:b8:54:41:6d:1b:a1:
26:38:78:1d:46:82:58:c6:3c:5e:8e:3f:41:f6:9e:
a4:48:dd:eb:df:57:c8:0c:38:d2:57:58:32:8a:32:
92:29:a2:fa:96:a0:dd:8e:54:8e:15:fd:02:09:21:
92:0f:62:d9:cc:01:26:05:c5:83:bf:62:61:34:ab:
d1:7d:76:36:01:a3:dd:2f:ef:3b:ec:7d:b0:c6:fd:
b3:92:c1:d0:73:24:c1:f7:14:92:e0:e9:f1:2c:7f:
4e:8f:b9:90:05:74:55:89:80:62:7b:57:2c:7d:bb:
3e:da:eb:9d:c7:fe:01:cc:2a:39:75:e7:be:f6:c2:
7f:a4:05:27:79:ef:56:8b:32:7f:70:82:aa:dd:d3:
b9:89:f2:70:de:01:e5:47:c3:61:3e:18:50:55:f3:
9e:45:ef:23:1b:47:27:3d:3d:73:ac:d7:3d:82:d1:
37:24:27:38:ca:14:e1:18:b5:33:c1:27:2e:5d:0f:
49:b5:c2:6f:81:88:fa:eb:bd:60:97:af:85:14:fc:
64:ac:60:d5:e6:f6:40:11:a5:0f:cc:49:95:87:d7:
9a:6a:67:c7:05:c0:c9:c2:26:44:56:ee:01:d3:7b:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:AC:4D:A1:67:DB:31:58:4E:46:7A:12:5F:A5:E7:7D:F8:D3:5B
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:40:c2:4b:84:88:43:70:96:62:1d:1e:b7:2f:ab:cf:ea:74:
39:38:6c:5e:3d:03:eb:41:f5:e9:9f:53:fe:fd:e7:10:3e:60:
fc:bd:d6:44:55:c1:80:6a:76:76:1e:b2:fc:71:b9:0b:ea:56:
de:96:e5:75:ec:df:c4:eb:3d:3a:d1:32:e9:78:87:2e:cc:72:
8c:9c:35:4e:41:c4:99:59:2f:dc:13:cf:b2:cf:74:80:c2:98:
ca:f1:c0:b2:01:21:58:28:d2:e1:f3:bf:e7:46:f8:20:4d:dc:
b7:58:63:0e:4c:8a:0e:79:05:4b:85:7c:28:ee:44:64:65:45:
03:25:c4:74:30:d5:90:8c:5f:e1:e4:82:f5:f7:95:f2:0d:60:
8f:78:6a:0f:e3:42:bd:f1:ac:80:9a:42:a3:59:59:cd:ed:99:
ef:cf:f3:22:64:c9:da:78:a4:b8:1d:84:d0:fa:f6:46:43:1e:
67:15:b8:66:69:bd:f3:4f:52:49:8d:57:64:91:33:2b:db:c7:
9b:47:d3:d1:44:31:75:f0:fc:ec:a2:73:3f:db:92:ee:a8:37:
a0:ab:62:6b:87:e7:6c:92:6c:c6:ae:75:ef:7e:d0:e9:11:b8:
87:d1:5f:5d:ee:df:2f:4a:73:2a:7a:82:ef:ff:d6:89:9a:3c:
6d:ed:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:00 2026 by rpki-client