Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: uYO3pLeL6I6T4QywQ2Pp4yYZ4eC5P4x8cIbkpCH2Q50=
Subject key identifier: 91:1D:55:58:8F:61:9F:6F:2B:71:F4:AC:24:68:A6:6A:A3:D1:A4:83
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019F9549715E24FA274051887507559F956E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0F8F
Signing time: Fri 24 Jul 2026 18:00:45 +0000
Manifest this update: Fri 24 Jul 2026 18:00:45 +0000
Manifest next update: Sat 25 Jul 2026 18:00:45 +0000
Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: o61+B4mGdtbq+vNwtt5+60ofJSUXXFOd+ZxEI627JfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:71:5e:24:fa:27:40:51:88:75:07:55:9f:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jul 24 18:00:45 2026 GMT
Not After : Jul 25 18:00:45 2026 GMT
Subject: CN=911d55588f619f6f2b71f4ac2468a66aa3d1a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:1d:14:e8:2e:14:1b:f9:de:0c:ce:55:b7:
a9:25:bd:d0:a7:34:c0:c8:83:6b:99:d5:98:84:9a:
d2:be:31:71:85:26:87:54:26:be:b4:71:20:0a:d0:
68:d2:88:a8:e5:c5:0f:24:15:81:fb:f7:78:07:64:
0e:32:01:5a:d0:22:f9:54:0d:7c:86:3a:72:02:06:
a8:8d:fd:11:4f:f0:77:bc:1c:d1:31:b5:d7:92:87:
14:eb:df:bf:36:cd:13:94:13:b8:d8:89:02:28:9e:
bd:dc:7a:19:c7:cd:49:f3:4f:1e:ac:eb:0b:25:b3:
03:b1:94:f0:ea:36:49:66:83:91:5f:fa:f0:81:5f:
0e:67:fb:2d:96:18:37:a0:dd:3d:fe:28:4a:48:10:
9f:5c:82:6c:e5:16:b5:dd:fb:00:f4:2b:b3:79:1a:
84:a3:99:fb:ee:fd:40:5b:97:d7:bb:8c:8a:2f:91:
7b:83:89:e8:aa:ac:d4:2a:b7:f8:47:4a:1e:8c:7a:
17:d2:51:32:46:13:29:77:36:85:5d:32:e4:f7:72:
8f:dc:04:67:0f:a0:a6:de:1e:2d:98:5b:11:c0:ce:
d9:c1:40:e0:77:68:b2:9b:db:30:c4:2f:9b:e1:c2:
80:30:6a:75:71:48:75:33:00:5d:7e:4b:2b:22:a1:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:55:58:8F:61:9F:6F:2B:71:F4:AC:24:68:A6:6A:A3:D1:A4:83
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:a5:07:47:57:bf:ef:eb:f8:e9:4d:fa:5a:9b:fd:8e:47:
ee:70:0a:e2:0c:1a:b2:19:f8:66:44:e9:4a:84:83:e9:25:62:
d8:e2:48:37:8d:35:6f:2d:ca:21:06:97:80:16:5b:5a:4e:85:
73:1a:5d:df:f5:3e:5a:46:62:ba:42:ac:fe:a0:e8:2a:ac:08:
4b:8f:57:32:c0:c7:0a:fa:67:6f:c2:f5:4a:e8:89:3c:01:ea:
82:f5:4b:a1:b2:40:a1:32:7b:11:94:03:a7:da:e1:ae:da:83:
5c:06:f6:37:a0:fa:d8:2c:00:6c:5d:2d:e7:e0:a5:3b:4e:45:
ff:2e:36:45:04:ad:64:86:bc:ac:ca:f8:aa:9c:ed:f0:43:1c:
d2:79:dc:44:f3:a5:9f:f4:5d:09:a6:43:c0:07:78:d4:db:5f:
c4:ca:10:37:65:0b:77:13:b5:91:85:1f:6f:f8:2c:86:98:93:
7f:d9:c1:3b:31:6b:54:b3:a9:c0:5f:ae:50:c9:f0:f3:1d:a4:
dd:23:53:40:cd:9c:72:f2:ea:6c:74:f1:e0:3b:e0:4b:ef:ab:
2b:8a:af:9d:10:b8:73:ce:20:a1:ff:f5:c3:49:f4:b7:f6:64:
87:ba:f6:ea:9c:37:b4:6b:5a:99:1b:00:cd:be:af:6b:43:9f:
39:d4:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:21:29 2026 by rpki-client