Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: kb4/SJDHbSRUIgl4xrM8AvF1VC8BgrkasxdwqVy+YF0=
Subject key identifier: DC:02:F9:86:65:4E:C9:75:0E:19:22:06:D9:CC:E1:2C:E9:AF:AC:28
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019F932408771756F7BEC614A364088193A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 1150
Signing time: Fri 24 Jul 2026 08:00:39 +0000
Manifest this update: Fri 24 Jul 2026 08:00:39 +0000
Manifest next update: Sat 25 Jul 2026 08:00:39 +0000
Files and hashes: 1: X44UuuaUhAM50Kozh7XZVDvdF14.roa (hash: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=)
2: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (hash: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: T8XCV96tlu6gRM/YNZ5ZI4p/9awpWBK4uOqhaQjsdqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:08:77:17:56:f7:be:c6:14:a3:64:08:81:93:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jul 24 08:00:39 2026 GMT
Not After : Jul 25 08:00:39 2026 GMT
Subject: CN=dc02f986654ec9750e192206d9cce12ce9afac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:b4:cf:89:e5:f0:9d:bb:1b:85:12:14:99:
d6:a7:aa:69:4e:23:59:e6:03:fd:81:ae:e3:21:80:
65:c8:99:1b:81:c2:e6:23:73:31:ac:87:f5:d1:6b:
c5:06:ef:c9:6c:2b:1c:c7:c6:db:93:a0:af:3a:70:
ba:02:19:90:0d:9b:27:e3:1f:2c:0c:07:19:fb:0a:
0c:f2:c0:8e:82:37:7c:f8:11:18:b3:47:01:5b:e7:
98:53:e9:90:d7:ce:e0:c6:a0:ef:b4:1e:a3:64:80:
23:c3:52:e9:77:4f:38:11:e5:05:96:82:6f:93:53:
6c:c3:60:9e:df:bb:da:c3:7d:58:de:ee:66:6f:ab:
59:c6:86:d9:7f:41:58:12:1e:7b:bd:00:2d:23:35:
6e:13:a7:75:82:7d:95:4f:2b:e1:02:99:20:2c:e3:
22:2b:de:d9:09:a3:b6:61:6b:5a:9f:6f:2a:4e:ea:
80:ec:33:37:ff:cf:d6:21:8a:94:3a:3f:cf:67:a2:
d8:96:b7:0c:8e:b4:58:a1:b6:46:74:4e:e8:b4:f4:
d7:fb:bc:fc:6f:b3:c6:a0:59:bc:d1:12:a5:03:c5:
f1:e7:03:6e:76:5a:b0:a1:62:98:d6:00:a5:67:62:
89:7e:dc:cb:6d:45:ba:5c:12:94:04:23:cd:5f:44:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:F9:86:65:4E:C9:75:0E:19:22:06:D9:CC:E1:2C:E9:AF:AC:28
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c7:6b:51:c6:18:e9:8a:de:1b:68:07:2f:17:d9:85:b8:90:
be:d5:62:54:cd:f8:b7:0e:94:6b:95:0d:fd:3e:48:3a:d7:3f:
53:9a:7d:c6:16:b7:1e:a9:92:37:e7:a4:02:98:1e:5f:b7:c9:
ea:37:b9:03:d4:91:99:ed:dc:87:62:e3:63:26:ee:07:24:10:
4b:d9:87:17:0e:0f:18:f5:27:63:5f:2f:ae:77:3a:9b:43:81:
d7:1d:af:e5:0b:c1:7d:ee:1c:3c:ee:69:e1:ae:84:67:0a:e5:
30:aa:ca:7b:e8:a5:ed:6c:54:0b:46:1a:65:8f:31:f3:f2:e1:
31:d6:3e:d6:27:0c:9b:db:10:76:46:d1:a1:d7:89:5e:33:6e:
6b:c2:17:7f:94:1a:fa:a4:28:3f:23:23:39:4e:3d:15:10:0d:
ad:6f:93:ad:04:10:3b:85:70:be:e1:57:8d:6c:49:94:6b:3e:
9d:42:5a:65:ea:c6:ae:c1:dd:f3:7c:7f:85:72:bc:d3:7a:c5:
13:7c:e8:96:b4:97:55:69:4e:d8:9b:6b:de:01:23:0a:ec:a4:
ea:ec:82:16:c2:c4:97:a6:4a:7e:16:bb:4b:2b:54:0e:3d:ca:
54:3f:67:d4:24:46:f8:08:b0:e4:f5:84:59:27:a7:50:23:03:
81:20:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:49 2026 by rpki-client