Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: c4MbizGyLzDLalHQp+M8ok1+Vv4XmmhsufxxUbyswJA=
Subject key identifier: FE:37:0D:1E:60:44:9A:78:E4:57:73:A6:06:AB:76:CE:1F:79:79:66
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019F8EA2793BD538015EED7B48BDAA585481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 04D0
Signing time: Thu 23 Jul 2026 11:00:40 +0000
Manifest this update: Thu 23 Jul 2026 11:00:40 +0000
Manifest next update: Fri 24 Jul 2026 11:00:40 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: UlQ7AM/q4EcVbh5U2eVaCmrT7w92Yhu2dTxIZ+yvyyY=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:79:3b:d5:38:01:5e:ed:7b:48:bd:aa:58:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Jul 23 11:00:40 2026 GMT
Not After : Jul 24 11:00:40 2026 GMT
Subject: CN=fe370d1e60449a78e45773a606ab76ce1f797966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:46:b8:88:cf:29:23:74:2e:a2:6d:29:5e:
ef:a4:a6:ef:1c:d2:0a:28:08:07:24:fe:08:33:3e:
da:f4:a8:4f:7a:da:17:41:22:b9:6e:79:c2:78:46:
06:ed:c0:27:5e:23:d0:ee:84:46:4b:de:bf:ca:dc:
ec:b2:12:97:57:c3:ea:54:3c:aa:26:5f:3e:02:25:
2a:22:4b:9a:75:df:be:11:12:d7:45:c3:92:66:9c:
f0:87:72:c2:dd:31:1c:ad:f1:fc:70:c1:5b:bd:89:
be:4d:aa:5a:78:96:70:87:23:ae:6a:13:34:75:e2:
fa:f7:20:c4:a3:d2:ed:e6:eb:89:97:70:58:62:7e:
22:1c:44:ad:2a:39:37:dc:a3:56:48:4e:f2:32:38:
4d:25:73:1f:96:a8:e4:03:6f:2f:cc:85:89:9c:f9:
c7:c4:7a:f9:b1:57:55:e2:cd:64:41:ca:5d:55:50:
2c:ee:ac:b3:ae:90:bb:0c:a9:ea:1a:43:c2:df:9b:
06:6b:f0:26:6c:87:4b:6a:dc:58:cc:b0:5a:c0:89:
1a:e6:f9:b7:9a:06:10:e2:cc:84:5f:2e:9f:2f:f1:
48:20:1b:8c:ba:ba:f5:a4:a4:de:97:48:f7:1a:d0:
b0:3a:15:2e:f6:82:0f:6e:26:28:f7:7a:7a:48:f1:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:0D:1E:60:44:9A:78:E4:57:73:A6:06:AB:76:CE:1F:79:79:66
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c3:7a:be:5c:4b:99:4b:81:11:88:51:e0:8c:00:08:22:e5:
53:87:45:61:ad:2d:03:c5:d4:10:39:0a:32:51:d6:17:e5:24:
f7:72:da:98:f7:a0:8a:1e:11:32:35:43:75:15:02:12:ca:3e:
94:e4:f7:6a:80:55:a2:a0:b8:33:0a:a7:64:47:e2:e2:13:a9:
f8:c8:20:ce:8b:e9:02:10:64:73:07:fb:62:a5:d5:61:eb:2a:
be:0f:b5:b5:fa:31:52:05:f8:50:79:6d:a6:cb:fb:d2:34:22:
7b:05:54:d8:5f:08:13:64:e7:65:43:12:71:d0:81:94:56:14:
84:64:fc:a6:96:7c:3a:8b:2f:36:06:a4:54:b5:84:25:03:82:
3f:87:b0:16:ef:6d:b0:02:20:01:37:a8:5b:23:3e:2b:24:31:
cb:53:94:dc:d5:97:10:cd:c9:aa:df:df:04:23:65:e3:34:47:
ff:4a:ee:49:95:01:98:32:28:3f:2b:26:e7:b9:e9:e6:f8:5d:
e6:fb:1b:c9:c6:9f:f6:75:7c:57:f4:d1:af:19:ea:e5:d9:ab:
d8:87:73:34:40:72:80:4d:35:87:8b:24:a7:6d:1f:62:84:23:
7d:82:55:cd:3c:9b:59:18:34:08:d8:45:90:fc:28:41:f9:72:
c2:43:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:16 2026 by rpki-client