Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: dNySHtSwLXKAtAVd5PYAmGyMRRAribGCX95HOoEA0jw=
Subject key identifier: 73:4C:F5:64:0E:24:B9:E1:84:C2:4E:BF:30:93:93:12:E2:2B:BC:45
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 019F902321C60F6A9E97823133810AEA5783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 170A
Signing time: Thu 23 Jul 2026 18:00:49 +0000
Manifest this update: Thu 23 Jul 2026 18:00:49 +0000
Manifest next update: Fri 24 Jul 2026 18:00:49 +0000
Files and hashes: 1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: 0sHGxC05DXX2eMYqKLGd6bkpEYW79OJhFO64EFB/OPU=)
2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:21:c6:0f:6a:9e:97:82:31:33:81:0a:ea:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Jul 23 18:00:49 2026 GMT
Not After : Jul 24 18:00:49 2026 GMT
Subject: CN=734cf5640e24b9e184c24ebf30939312e22bbc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:96:c1:b7:41:d7:e5:63:5f:34:5e:ea:2a:
e6:f1:aa:46:f3:58:b7:db:ec:d9:e2:0c:87:b5:db:
a8:a3:8b:64:34:b6:84:e4:5a:28:c7:75:6a:5f:c9:
4d:8a:2d:1a:02:0d:b7:24:9a:25:6e:fb:c9:c4:4b:
af:43:27:f3:41:89:46:09:7e:20:03:1c:ba:a6:be:
ed:de:fd:c9:2a:2c:e6:89:8b:a4:52:df:4d:e4:b9:
0e:e6:7d:b6:e5:41:7f:a7:51:ea:1c:ad:07:d7:90:
13:17:04:f8:48:ef:37:f7:29:ef:b5:05:58:cc:f0:
6f:7b:71:4e:47:69:d3:c7:c8:a9:a7:46:94:de:26:
29:a3:99:ab:b1:d1:81:14:27:de:a3:e0:2a:af:16:
93:68:9e:fa:96:60:ef:ad:eb:95:5b:a2:a9:b2:e6:
aa:6d:a5:f2:5c:ac:05:af:07:57:fb:55:7b:5d:9c:
e0:98:f4:03:5c:05:f9:e7:62:d4:42:30:8c:73:25:
9b:ea:b6:9e:cd:7d:11:fa:bd:1c:f8:ac:77:7e:ca:
15:7b:ca:28:5b:84:30:a4:99:90:90:d6:0a:cf:49:
bf:38:ab:1f:0a:42:d9:af:99:82:4e:e5:0b:ce:ef:
24:41:ed:84:64:dc:2d:34:78:dc:b9:32:79:e4:c7:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:F5:64:0E:24:B9:E1:84:C2:4E:BF:30:93:93:12:E2:2B:BC:45
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f2:5d:91:8f:16:2d:33:3c:59:96:9d:23:c0:4c:56:08:94:
ed:b4:7f:5b:c7:8a:91:6d:32:b2:8c:4d:30:42:44:03:a4:89:
6a:4d:e6:48:b5:d7:9c:ed:01:ac:14:d5:00:4d:1b:e8:0c:4d:
76:ec:bd:4c:c9:8d:0a:a7:53:5b:1f:eb:75:07:e1:c8:46:76:
54:94:cc:7b:8e:56:1f:4c:2e:4e:7c:2a:00:c9:cf:c0:5d:7c:
12:a4:c1:9e:60:69:d1:97:19:15:3c:7c:f1:8c:30:c3:0b:36:
e4:65:d5:2e:e3:43:ae:98:b7:a7:76:26:54:1a:a9:ae:72:3f:
50:d0:8d:54:1e:37:11:89:4f:31:2d:1b:9d:49:61:f0:45:dd:
8d:45:0a:b7:b5:17:78:dd:8e:d2:20:5d:39:5c:32:88:6e:22:
84:95:e1:6a:19:4d:be:fc:21:75:9b:db:9f:26:62:d1:05:19:
4a:a4:5d:7d:74:a7:8c:09:ce:9b:c7:62:04:ee:99:f1:de:a8:
fe:74:67:07:1b:25:c7:1a:ea:1f:f1:d0:26:c9:7d:5d:44:c4:
e1:6d:c4:58:ad:61:7e:9e:87:66:b0:62:0b:b7:7e:2a:53:78:
c4:05:f3:28:aa:55:f7:3e:19:0c:22:35:d1:42:3c:f4:a8:ed:
9b:70:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:26 2026 by rpki-client