Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: oMGxofbu+yV18MxN5PB/Qr9QgsLEWPtldQTaSFoBrfs=
Subject key identifier: 8A:F0:21:42:C8:DE:AC:AD:88:07:65:17:C2:A6:BA:09:C1:9A:2E:96
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019F92B61C51658750024B04AB9851ED9780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 109E
Signing time: Fri 24 Jul 2026 06:00:35 +0000
Manifest this update: Fri 24 Jul 2026 06:00:35 +0000
Manifest next update: Sat 25 Jul 2026 06:00:35 +0000
Files and hashes: 1: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (hash: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: GaX+uNTO89Clvai2ufgWLyiW+CMG7ubbhItIr2kHvto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:1c:51:65:87:50:02:4b:04:ab:98:51:ed:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jul 24 06:00:35 2026 GMT
Not After : Jul 25 06:00:35 2026 GMT
Subject: CN=8af02142c8deacad88076517c2a6ba09c19a2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:a6:3b:a8:66:36:86:bd:c7:6a:3e:d3:d5:
6b:e0:db:63:42:f7:87:6e:32:4e:e2:f2:9b:2d:54:
82:80:33:c5:60:62:41:42:6f:11:4e:29:99:ce:47:
ee:76:46:29:13:8b:61:9f:b0:de:09:72:80:3b:04:
c4:62:68:dd:79:f6:00:41:3e:94:c9:ad:dd:89:89:
95:82:c7:ff:c8:87:94:d5:88:d0:cf:69:3c:04:0d:
63:6c:e4:82:4a:4f:1b:96:9d:ad:2d:9b:e5:37:2a:
0a:bc:9b:13:2a:8c:d6:78:2a:ce:2f:08:d0:48:30:
ef:43:d7:3c:67:67:81:f8:89:fa:e3:a4:ce:ae:d4:
03:6c:5d:9a:10:4f:22:f1:85:07:27:aa:6e:b2:0e:
6e:67:38:c9:b3:0b:d2:6c:c7:6a:97:b2:62:99:0b:
3e:cf:66:3e:eb:ca:17:8e:5a:ef:9e:5d:f2:6e:70:
c2:a7:fa:51:a2:df:91:d0:09:85:0c:74:b8:e7:48:
cd:52:86:a1:be:45:65:84:78:bc:5f:cf:cd:49:5f:
64:31:f5:44:92:b2:a2:8a:1a:9c:0f:73:80:11:50:
a1:e4:53:c2:90:3c:88:46:62:f2:a4:70:9a:1d:65:
aa:08:b6:a0:76:28:16:82:cb:f4:da:71:b1:f3:d1:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:21:42:C8:DE:AC:AD:88:07:65:17:C2:A6:BA:09:C1:9A:2E:96
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:73:3a:c7:63:a5:4e:4a:81:ba:d3:53:6b:b5:a9:8d:f2:
64:fb:85:11:87:51:2f:d7:3c:19:67:36:c3:95:a5:4c:78:17:
20:db:1b:71:77:96:eb:47:a7:53:00:cf:b6:89:e3:9e:91:38:
5f:ce:bd:f2:fd:c7:05:d1:c6:35:e0:17:52:99:94:45:1d:50:
32:c7:0b:1e:36:40:63:35:10:55:c4:20:98:32:f7:30:08:b8:
07:57:2f:46:be:85:6c:f9:65:07:22:fb:c7:7a:72:b4:53:78:
56:58:b3:2f:a9:37:fa:2a:ca:dc:3d:38:a8:05:ed:f1:51:2e:
d1:63:f6:ef:52:6e:c5:f4:ba:e6:ea:78:8b:8d:33:4a:bd:b9:
75:23:7d:8b:f5:ed:c2:5a:71:d9:ef:4a:a3:2a:55:be:57:06:
f3:06:62:06:7d:5a:ff:f9:2d:ab:4f:4c:8b:21:ee:70:88:cc:
01:70:0d:f9:00:59:f1:7e:42:ed:30:6e:34:70:d8:90:62:6e:
1d:3c:6e:97:c0:17:42:d9:75:b2:21:15:07:13:25:e3:49:5b:
8e:f1:64:15:1e:45:b8:e7:ee:d4:ca:97:8f:be:27:45:b2:0d:
a8:d6:37:90:70:b0:df:14:ef:b6:48:6e:c3:f8:79:a2:98:a6:
94:c9:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:23 2026 by rpki-client