Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: MqQJmqktoaheKwo8lhepdc5W5XovxvN2U5CHycMjRF8=
Subject key identifier: D1:BB:E4:24:12:0A:66:93:DA:1C:D8:E5:F4:95:5E:D4:E7:0C:95:70
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 019F90FF8E02C5F497FE5DBB74F6CDFECFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 22:01:34 +0000
Manifest this update: Thu 23 Jul 2026 22:01:34 +0000
Manifest next update: Fri 24 Jul 2026 22:01:34 +0000
Files and hashes: 1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: THkIqhuuFePmgEpsC5+NsyQZGMciHdEGfwFQkoUhihQ=)
2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:8e:02:c5:f4:97:fe:5d:bb:74:f6:cd:fe:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Jul 23 22:01:34 2026 GMT
Not After : Jul 24 22:01:34 2026 GMT
Subject: CN=d1bbe424120a6693da1cd8e5f4955ed4e70c9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:94:90:37:f7:21:16:a8:26:2b:3d:82:73:
f5:92:9d:01:ad:be:01:e4:6a:26:47:92:95:6e:7f:
9f:57:5c:25:21:b9:db:86:7c:6c:59:23:27:e8:72:
91:69:dd:09:bb:d1:af:20:47:58:db:4a:50:1c:37:
68:59:a4:7e:c5:44:f9:0e:06:f0:43:69:cf:7c:c0:
db:f7:ce:b0:ed:11:89:da:26:bd:12:71:5e:0b:8a:
58:85:ca:93:6f:64:52:05:eb:69:83:4c:99:21:ca:
3b:2d:dc:0c:aa:d9:91:92:bc:4f:79:99:d2:15:6b:
d7:85:12:e7:77:1d:2d:7f:15:90:e2:74:e2:fe:c2:
7d:35:68:b7:e6:68:b8:01:d8:43:ef:e4:19:95:68:
82:ec:4c:cf:bd:d9:6a:9c:7c:38:c6:cc:30:c3:b3:
c4:39:b8:7b:3e:a0:4c:68:96:8c:5b:7b:d5:b4:cc:
4f:50:8d:18:af:82:e5:a7:d2:8e:8f:32:94:d1:ee:
77:cd:e0:49:e8:06:56:99:41:65:86:20:27:f7:dd:
09:b2:33:73:83:e9:21:58:b1:85:10:1c:a7:e0:3c:
a0:f2:41:13:c3:2f:cb:ec:ba:65:2a:a2:e5:6d:4e:
31:4b:44:5b:c2:8b:23:52:ce:bc:f6:f7:49:fc:b5:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:E4:24:12:0A:66:93:DA:1C:D8:E5:F4:95:5E:D4:E7:0C:95:70
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:f5:08:87:a2:93:3b:b9:c2:b0:4e:8e:ce:7b:37:8b:c6:
f3:c1:e8:af:54:4a:62:43:82:71:9e:db:7a:bc:4f:25:f1:1c:
37:14:bd:2e:b9:3c:98:19:a7:54:c4:f1:23:ab:23:34:3b:a6:
e9:aa:14:13:89:4e:ae:5b:d7:f5:eb:d4:63:67:bc:a8:61:55:
c7:b1:e7:48:5e:40:fe:c2:83:7c:ad:e1:12:dc:10:e5:c4:2b:
f7:6f:01:b7:8f:3a:ac:7e:d9:ec:68:bf:6a:8e:7d:c0:b5:d1:
e7:0c:e6:6f:06:6f:88:c8:7f:09:13:86:83:8c:64:79:c2:05:
72:b7:00:de:11:08:96:2a:90:ed:c4:f9:63:35:62:04:d4:53:
1b:e6:1d:71:d8:f7:bd:53:75:7e:4a:c9:ce:41:4c:39:e0:b5:
82:cb:f6:5d:a6:7f:d2:ed:f1:5d:ce:18:81:8e:d3:98:a8:38:
66:c5:15:89:94:62:4c:aa:f4:34:ea:09:49:8e:d8:36:47:a2:
5e:d7:c5:6b:6c:06:0a:3c:fd:77:61:f0:a6:2c:a7:2f:b3:d8:
6d:41:19:e2:dc:c9:b8:6d:a9:e7:31:b3:ac:b8:f3:11:55:cf:
9b:e2:55:02:cf:7b:35:dc:ee:e2:99:37:53:39:7d:bf:7c:c9:
56:82:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:57 2026 by rpki-client