Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: 5yLqB0fTXxoFMZJV7e6XWYTO09DvD87OrAEFPJmQ1Vs=
Subject key identifier: 0B:DD:8F:8F:79:69:64:E9:EC:45:99:45:F2:54:87:B3:C8:0E:CF:1C
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 019F927F0989B45E1C2080AAEFDC477BE0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:26 +0000
Manifest this update: Fri 24 Jul 2026 05:00:26 +0000
Manifest next update: Sat 25 Jul 2026 05:00:26 +0000
Files and hashes: 1: 4ghPvO8O8ubg-UpOgj-hc0SbXTA.roa (hash: JypQzsIdWOc7a9gykbPnzDsycctJC1lDHtCOuiPvEAA=)
2: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: w/0Sy5Ham+aGDZj4vJiiDo7h83+Kn2rxq0hILa3aqX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:09:89:b4:5e:1c:20:80:aa:ef:dc:47:7b:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jul 24 05:00:26 2026 GMT
Not After : Jul 25 05:00:26 2026 GMT
Subject: CN=0bdd8f8f796964e9ec459945f25487b3c80ecf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:8c:62:10:44:4d:47:c1:2a:10:a7:86:03:
78:6f:75:a9:36:c7:75:54:3c:61:5d:06:a9:6a:41:
51:2e:a8:3e:29:c2:c8:35:51:8c:5a:03:9e:dd:8a:
a0:e0:c9:31:10:64:a7:c8:d9:55:80:1a:14:9e:b7:
f9:68:cf:24:68:c1:d7:27:89:2e:bd:9e:5e:5a:e8:
0a:d9:b4:69:09:59:37:6b:fa:00:2a:e2:ff:a1:b0:
39:c5:8f:1d:77:f7:c8:b8:f5:93:54:6a:6b:d6:27:
1e:85:21:ee:6d:38:15:f3:a0:a7:28:d2:af:ff:1a:
3d:4d:b5:6f:cf:af:7d:f0:44:b1:94:63:7e:d2:42:
43:36:96:ea:8c:8b:bb:25:10:5e:6d:f9:bb:a5:d4:
b1:a1:1c:6e:79:d7:00:08:08:75:3f:4f:d3:8d:ac:
99:f9:00:9c:9d:dd:9e:61:28:3b:67:99:1c:72:ff:
33:17:c9:99:ff:5e:2c:77:d0:8e:de:09:29:3e:a9:
2b:6b:f1:a0:52:14:84:a3:8d:1e:0d:e0:7f:1b:45:
3c:a8:88:63:fd:ee:7b:d9:fd:40:ee:2a:24:77:c2:
8b:e1:ad:e3:20:58:17:c7:dd:01:fe:37:cd:a6:08:
2c:d6:f3:95:c5:0c:80:68:5f:5c:ab:b9:5f:89:83:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:8F:8F:79:69:64:E9:EC:45:99:45:F2:54:87:B3:C8:0E:CF:1C
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:08:84:07:e1:3a:ec:de:92:bb:90:93:1e:49:2e:9e:81:6e:
30:66:03:d4:d5:20:4b:3e:a1:b2:5a:00:87:79:22:46:db:0f:
6a:b9:e9:71:99:1b:be:3a:39:9d:df:90:de:1f:a5:e9:0c:8b:
0d:2e:7e:89:62:2a:a8:97:5d:aa:e1:32:60:d7:31:1c:65:a6:
6b:9b:32:8b:9c:56:1d:c1:0a:0a:f4:36:90:9e:d0:a5:22:55:
35:d9:c2:58:5b:4c:ed:80:7f:cd:9a:d9:41:42:59:4c:d9:8e:
f5:ca:dc:a2:ec:30:66:c0:a3:b7:28:25:2a:05:39:39:f9:8f:
13:f0:a2:da:21:6e:c1:f1:3f:b8:e6:8a:7f:c5:6f:60:29:e1:
40:6f:b0:19:81:62:09:ab:39:07:93:23:f6:41:4b:d8:ce:3c:
36:22:f5:06:19:1a:81:8f:c3:e1:86:33:eb:3d:65:1c:08:55:
e7:6f:7b:bd:85:0a:6e:b7:b0:7c:ee:90:2b:04:62:a1:dd:a2:
68:11:74:f8:97:c6:26:e5:b5:3b:99:cc:32:a7:a0:dd:22:d0:
f6:c0:fa:64:c8:cc:c2:a4:58:41:63:07:c3:bf:1b:43:17:9c:
39:a5:77:55:de:66:0f:66:da:67:af:40:86:b6:2d:59:fb:70:
33:da:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:46 2026 by rpki-client