Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: 0WpDvhF2Tl6GOpOx4GpqUfPfUlc2pN9t5LVkllzjRM0=
Subject key identifier: C0:90:FB:AF:07:22:65:13:3E:92:9A:31:66:6C:D9:19:4B:97:95:3E
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019F9323DF847CD6D9CF7170B8524A6DB91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:29 +0000
Manifest this update: Fri 24 Jul 2026 08:00:29 +0000
Manifest next update: Sat 25 Jul 2026 08:00:29 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: xotQ3zI4cQ7ha9yMTNIUGtXCj7WhUl+Ae/3LUVO4Ulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:df:84:7c:d6:d9:cf:71:70:b8:52:4a:6d:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Jul 24 08:00:29 2026 GMT
Not After : Jul 25 08:00:29 2026 GMT
Subject: CN=c090fbaf072265133e929a31666cd9194b97953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:6e:c9:24:dc:b8:34:ff:a3:1f:0a:fe:a2:
b6:be:8b:9f:97:87:b4:62:2d:bf:75:cf:19:e7:6e:
9c:cb:f4:82:6a:9c:ef:ee:2d:a8:da:7a:05:fb:c7:
7c:d4:a3:95:ea:35:96:d1:dc:27:74:13:89:f8:71:
c4:04:f9:7d:07:10:71:13:55:e8:3a:c0:12:8f:5e:
ce:1d:9b:9f:13:3b:46:d7:e5:1d:30:aa:12:4a:0a:
c2:d6:b7:5f:43:95:a7:53:c1:58:5a:c5:13:ad:a9:
59:69:5b:0b:f1:f2:27:a0:0b:3f:9f:78:21:33:6a:
15:ed:33:a1:8b:fd:7c:8d:be:76:9d:8b:1c:3e:5e:
7b:ea:aa:63:e1:a5:fb:7d:7f:c1:68:d1:53:ac:9c:
71:cc:33:c4:de:74:4a:d3:3b:9d:61:e4:b3:72:47:
3b:ab:7b:91:06:f3:27:0d:c8:1f:a3:f6:82:23:d9:
1f:72:54:e2:ad:80:f4:ce:cb:bb:16:93:0d:cd:15:
0c:1a:9f:7b:db:2c:36:eb:76:2c:8b:27:41:0b:f4:
47:42:55:40:37:2f:16:9e:c2:37:c2:34:c3:5c:81:
dc:58:5a:6a:e9:65:f9:b9:2f:14:fb:53:8e:48:5d:
73:a4:77:40:2f:61:88:4a:7b:03:bb:04:85:5b:f6:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:FB:AF:07:22:65:13:3E:92:9A:31:66:6C:D9:19:4B:97:95:3E
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c0:bc:f2:48:25:ef:25:18:25:c9:f4:a8:2c:9e:56:bd:b3:
33:21:4a:ab:ac:6b:c2:52:7e:80:67:fd:e7:19:d8:72:ac:90:
44:b0:26:f5:0e:8a:60:f6:96:54:c5:5a:f2:e6:00:f3:b8:06:
60:9f:de:29:1d:45:ae:d6:05:90:65:b3:8e:6d:c4:a1:18:4f:
c3:4b:bd:65:ce:83:0e:97:5b:00:2d:97:59:83:6c:d6:40:5b:
c3:0d:32:f0:fb:b1:27:dd:a9:de:36:1d:1a:82:68:4a:14:e5:
61:b9:4c:fb:03:e9:a3:a5:3d:e0:40:ad:bf:30:e3:ad:ef:f0:
f5:d7:ae:5e:39:71:c8:c6:6c:2a:30:66:d7:3a:4b:aa:3e:91:
1b:62:eb:75:b7:12:47:f8:5a:df:ea:df:76:55:5d:1d:8f:1a:
88:d2:46:50:26:f1:1d:f6:2e:3d:35:76:0c:3c:a5:2f:1f:81:
c2:73:55:32:7a:b6:01:53:de:44:6a:5a:51:96:9b:4c:88:b0:
26:f0:e6:30:27:ed:97:70:2e:5a:8d:65:93:dc:20:5a:36:1a:
86:41:8d:ef:95:a6:eb:00:03:92:41:b5:67:4a:f8:11:d9:50:
0f:83:a0:0f:fd:2a:42:24:01:3d:25:63:3e:0f:50:0f:20:31:
0d:06:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:04 2026 by rpki-client