Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
File: 9OobD89CmqOLUtkXHOfJI8qKrIE.mft (raw, json)
Hash identifier: KBTNmtUGQOpSGU3IkZ00c65jIvhMVUssRg6XVsM6338=
Subject key identifier: 5A:B1:DC:E2:15:20:2F:1B:BC:98:53:98:47:1F:89:5A:14:03:55:9B
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 019F8F7E23231C92C7C1B3336730D4759524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:36 +0000
Manifest this update: Thu 23 Jul 2026 15:00:36 +0000
Manifest next update: Fri 24 Jul 2026 15:00:36 +0000
Files and hashes: 1: 1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa (hash: u4WfkbMiSbJkmrL6GA8qH3vMspeYSQot+mOiu9K3y4w=)
2: 9OobD89CmqOLUtkXHOfJI8qKrIE.crl (hash: OXr+cdADJCflS61MaYMnZ/dzVL9nws0bFtu/UwLzAi8=)
3: joV_6cAQSK_je5KrB8bVTeK2szE.roa (hash: fk94vtPfOafs8CuY1ZMt1P+v4ADiKe8HjDC4WwhIxvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:23:23:1c:92:c7:c1:b3:33:67:30:d4:75:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Jul 23 15:00:36 2026 GMT
Not After : Jul 24 15:00:36 2026 GMT
Subject: CN=5ab1dce215202f1bbc985398471f895a1403559b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:d4:cf:32:4b:e5:e1:68:8f:a3:70:ec:26:
f1:59:5c:8b:8f:62:e6:9e:24:07:53:04:33:31:50:
fa:21:00:25:c0:cf:16:33:3c:61:ca:60:fe:5f:cc:
0b:14:00:8f:65:7b:15:14:7b:83:61:7a:54:30:d2:
68:b6:72:cb:d0:c1:5f:a0:0b:b9:0b:96:39:bd:6c:
53:fd:4f:28:6b:42:c0:34:5a:4a:93:4d:8f:3f:7d:
7a:96:66:0b:65:ba:73:89:29:7f:80:9f:7b:31:e4:
2b:f7:0e:05:33:ef:4e:1a:9f:cb:36:de:eb:6c:0c:
e7:4a:cc:ed:c0:56:87:95:f6:4b:7a:85:2b:4a:55:
7c:4c:c2:bc:7d:7b:7b:9b:50:96:be:6f:f1:c7:dc:
ed:d3:bc:a1:50:0f:03:42:21:70:71:d4:4b:51:9a:
54:94:55:b3:28:1d:23:2e:91:ed:15:77:61:24:d9:
06:63:d9:a9:34:47:01:0d:01:4e:40:51:8d:f3:f7:
4c:ff:84:34:3c:66:d7:8e:58:2d:84:3b:d8:77:33:
4c:d5:35:9e:81:a4:06:6d:fe:e3:58:21:ad:b6:76:
a4:40:1a:fe:42:a0:59:9e:ae:9e:5f:72:ee:8d:86:
a7:a1:46:ef:64:09:a3:06:db:05:23:de:31:7c:48:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:DC:E2:15:20:2F:1B:BC:98:53:98:47:1F:89:5A:14:03:55:9B
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:f5:9f:8f:67:a5:68:da:46:15:a3:19:eb:f5:ff:1e:e0:
8a:72:0c:a4:9d:e0:b5:6e:31:65:74:31:32:a3:1c:ff:77:36:
69:31:75:09:e0:fb:05:20:ec:c5:19:3b:2f:27:77:f5:70:0a:
7b:f1:9e:d2:0c:35:fb:aa:ab:83:af:02:1b:63:0a:06:84:5b:
29:79:b8:0b:13:bb:b5:ad:42:c3:a6:b6:b0:6c:42:20:34:b2:
75:bf:ea:da:42:a2:2e:b9:19:b4:ce:97:e4:0c:b8:34:c1:64:
ca:b8:44:d4:73:b0:94:e3:ce:93:5b:99:cc:64:d4:9a:46:22:
06:27:1a:2d:10:17:45:e2:fa:c3:3d:c6:f2:22:14:e9:c9:b7:
7e:45:14:94:6a:f4:9d:b6:e4:d2:55:0c:a6:a2:bf:39:e8:d1:
b1:41:bb:d3:a1:6b:98:da:60:94:93:4d:77:32:f1:11:47:86:
d9:fe:8b:8a:ae:90:31:3e:3b:34:bd:e7:16:5a:60:82:fd:cb:
b7:49:ec:9a:ce:c7:74:fd:7d:7a:20:42:7d:7e:4d:29:57:b3:
54:91:74:d5:f2:c4:8a:c0:76:31:16:a0:03:bd:31:7e:8d:5f:
8c:4b:40:8e:4b:0a:46:b1:85:f4:03:4d:06:74:85:da:7b:4c:
af:0b:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:43 2026 by rpki-client