
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: guMgY62vGY6oOwFkphU1SLxyfOpjgzNFuJ5ab83AYYM=
Subject key identifier: 24:A4:B7:6F:02:9A:59:8C:D9:2F:2D:C6:0C:D8:E4:C2:38:D0:6D:C9
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019F916C48B8B0994F644BA7FDBBAADF6517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0422
Signing time: Fri 24 Jul 2026 00:00:20 +0000
Manifest this update: Fri 24 Jul 2026 00:00:20 +0000
Manifest next update: Sat 25 Jul 2026 00:00:20 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: aqv3jBbrJuQ509R+6wrJ4ksFbPoC/hCHMgIKP4Kpraw=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:48:b8:b0:99:4f:64:4b:a7:fd:bb:aa:df:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Jul 24 00:00:20 2026 GMT
Not After : Jul 25 00:00:20 2026 GMT
Subject: CN=24a4b76f029a598cd92f2dc60cd8e4c238d06dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:3c:7e:63:e4:f2:72:6d:21:41:d0:2b:d8:
3e:4c:55:6b:7c:6c:5a:44:a1:ba:66:06:ad:83:17:
6e:f9:09:aa:8d:e1:ff:94:46:c3:3a:36:eb:ce:ae:
9d:94:5b:af:75:d4:96:d5:e2:cd:ba:e8:52:a0:62:
fb:29:6c:ad:ef:20:b0:54:4b:dc:47:25:14:cd:8c:
78:8a:a2:ba:8b:ff:e7:a0:35:65:b3:f2:39:0e:1e:
cb:84:51:f2:1b:b7:69:fa:6c:99:0b:1d:7e:07:27:
f2:30:b9:43:e1:ee:03:c6:e5:98:0b:ea:c6:71:af:
e3:5d:00:66:55:94:dc:7a:a9:9f:2d:e4:93:c1:37:
cc:cd:14:ec:2c:14:07:ce:d5:b5:d7:15:24:c5:e3:
c5:70:89:fe:80:27:6d:ea:65:ff:e9:8d:07:07:56:
8c:70:e1:7d:e3:ba:2e:d1:a0:ff:be:b5:ec:49:81:
aa:e4:9d:aa:38:c5:70:2a:2e:2b:b1:e2:b1:56:27:
76:c8:b9:fe:5c:d3:0c:a7:eb:d9:82:d9:36:91:84:
3a:63:6d:44:55:3b:26:49:9c:54:71:e3:2d:36:3a:
31:fd:d9:94:59:4b:94:a5:bf:c0:81:70:e0:d0:46:
0d:f3:a4:38:d9:f7:0f:e4:a0:4d:14:30:63:7f:8e:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:B7:6F:02:9A:59:8C:D9:2F:2D:C6:0C:D8:E4:C2:38:D0:6D:C9
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:bf:62:85:ff:10:06:61:84:b6:49:c7:36:eb:96:83:01:
a9:56:ec:53:73:21:b4:f4:8b:32:7f:f7:d1:20:e6:49:04:6e:
17:73:33:02:ab:c0:d6:03:ff:2f:94:24:c1:15:07:63:98:c1:
8d:c5:47:0b:42:bb:33:b1:d9:05:17:de:71:72:9d:b2:a3:0a:
ef:73:8b:2d:e6:d5:c6:9a:fd:f6:a9:21:74:4d:51:f2:b9:4a:
bc:80:81:9c:15:c9:e3:55:14:37:a6:d8:09:22:2a:7e:65:4d:
02:32:38:f9:17:64:76:8c:6a:de:7e:88:c4:0a:e6:e7:f8:67:
a6:43:0c:48:ef:3b:9c:2c:4f:76:3c:1e:bc:3b:bb:8e:e2:03:
ac:87:a9:6b:ea:09:0e:73:85:47:73:ae:80:78:6d:e1:84:19:
a1:ee:32:99:2d:e6:f5:0a:83:b5:22:7b:5d:43:a9:06:53:b5:
ad:1e:59:dc:54:37:b7:69:97:4e:2a:44:e1:19:db:62:52:6e:
03:66:a3:7f:fd:55:e9:d6:4f:d5:52:da:4e:b1:15:38:43:1c:
67:26:6a:4f:e4:23:29:06:b6:ac:97:5d:62:12:2d:b7:5b:50:
66:da:c4:e3:6e:b9:68:fd:60:71:86:e8:3b:e1:30:f4:66:12:
71:f6:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:49 2026 by rpki-client