Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: qbAlUrMMjZRI0sGvLkqrq+HFQVRnKNw6dVuaBKl+Uj8=
Subject key identifier: 3C:EB:0D:57:3A:C6:7E:7D:DD:95:A6:6A:4A:9F:C9:78:04:48:61:0D
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 019F91A419A3BF1FE3EA19800A069469225F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0F9B
Signing time: Fri 24 Jul 2026 01:01:18 +0000
Manifest this update: Fri 24 Jul 2026 01:01:18 +0000
Manifest next update: Sat 25 Jul 2026 01:01:18 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: 7WnfxKX+SCaSCPuPVJ/6LqUw1Jhr0DjR0F+t62giusc=)
2: dJqD19E6mk5uleQws4cS1vrhxjc.roa (hash: B93wH1HCjYPCakWp9euufDKeozgy2SCaB0olYXjrVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:19:a3:bf:1f:e3:ea:19:80:0a:06:94:69:22:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Jul 24 01:01:18 2026 GMT
Not After : Jul 25 01:01:18 2026 GMT
Subject: CN=3ceb0d573ac67e7ddd95a66a4a9fc9780448610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:50:b7:34:bc:9a:93:71:12:12:43:77:23:
f5:2c:46:6a:0b:94:56:41:48:18:0e:6d:fb:a1:92:
bb:3b:2f:93:56:2b:25:2f:c1:b6:d4:87:ba:44:48:
c1:0a:5a:0b:ca:87:a7:69:bd:08:03:3b:0c:7a:91:
53:35:f5:be:1a:f7:2a:3d:31:5c:cc:a1:6a:0c:6a:
76:0c:1f:ea:18:f8:86:f2:12:10:16:fa:af:70:7e:
f7:9b:01:d5:c5:54:01:7d:2b:76:8b:b9:74:cf:e9:
d6:f6:db:e7:85:29:ac:0e:0b:1c:5a:e4:d7:60:2b:
a1:00:19:04:5a:02:1c:d7:09:63:ef:0b:fb:57:db:
0e:a6:e0:48:b7:89:b3:6d:c2:0d:c6:5e:a8:aa:ac:
c6:64:3c:78:53:d2:be:69:c5:7c:11:75:79:e9:d8:
19:3e:ed:2f:08:11:dd:7c:72:9b:db:86:8d:42:6c:
81:56:ad:13:60:01:29:99:80:83:05:9a:68:0e:42:
f7:0e:46:e5:b4:97:f6:fa:69:10:24:3e:32:56:b9:
7b:c6:70:ab:4b:01:ab:36:c6:ef:2e:b6:a5:3d:dc:
7c:22:ba:74:59:55:b4:89:3f:d3:82:d6:3c:14:ce:
8b:9b:b2:dc:aa:85:70:75:de:7d:a8:9e:69:3d:fd:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:0D:57:3A:C6:7E:7D:DD:95:A6:6A:4A:9F:C9:78:04:48:61:0D
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:71:2c:43:11:72:9f:b3:10:cb:ab:5f:18:05:42:8f:df:
21:da:bd:2a:f2:de:b8:a6:17:58:30:fc:76:b0:0a:5c:63:84:
11:50:6d:0a:b1:a4:88:68:6d:df:66:20:4b:bf:a9:c9:4b:e5:
1c:1b:b2:17:b5:43:b4:7d:03:3b:3b:82:90:49:59:d3:85:a7:
02:e5:65:7c:c6:6e:1b:3d:79:1f:3b:03:61:41:78:70:27:bb:
69:6c:57:e6:0f:2a:13:e5:29:78:7f:f6:e8:b1:ce:ee:9b:84:
1c:c1:c4:e5:55:10:80:13:21:93:18:c4:bf:59:77:03:56:9a:
65:e9:53:eb:0c:f7:cd:be:33:fd:89:cf:8b:38:7e:ab:cf:a1:
71:55:8e:a0:69:e4:45:12:d4:bb:50:63:72:55:58:02:ac:92:
2d:3b:d0:b3:31:af:61:fb:e6:7a:91:af:2b:ae:71:2e:1a:8b:
f3:88:42:9e:89:31:99:9a:d7:6e:99:43:d9:c6:e6:55:e6:6f:
f4:b5:a9:e3:3e:d6:d1:60:c2:f6:0d:53:df:d2:bd:08:2d:8b:
c3:a1:93:83:11:61:fd:be:89:f9:4c:b6:cb:06:79:3f:f7:0e:
3a:a3:6c:36:08:30:dd:56:94:3a:66:0c:41:49:fd:d6:9b:6f:
27:98:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:47 2026 by rpki-client