Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: B+AF7XrCB05zDRcwTcH4zUT3EnhwJEAy7ZB7YIMj11Q=
Subject key identifier: 23:4D:FD:E5:DE:C3:09:3F:EF:23:FE:9C:EA:2A:32:90:72:18:48:29
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019F8F1081685013321C52A6C465EBC7D416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0CF2
Signing time: Thu 23 Jul 2026 13:00:51 +0000
Manifest this update: Thu 23 Jul 2026 13:00:51 +0000
Manifest next update: Fri 24 Jul 2026 13:00:51 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: kGMLQVJePP23O44NrUSlhl0TyCq8X85kV4JgGXU3g8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:81:68:50:13:32:1c:52:a6:c4:65:eb:c7:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Jul 23 13:00:51 2026 GMT
Not After : Jul 24 13:00:51 2026 GMT
Subject: CN=234dfde5dec3093fef23fe9cea2a329072184829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:3d:14:96:60:7a:e9:4b:b1:62:f9:18:19:
07:0d:7b:62:db:e3:83:08:7e:4e:e6:4f:a3:b7:4d:
6b:13:1e:46:2e:19:83:9a:70:f9:f2:ed:48:3f:ba:
f1:4b:5b:09:ee:07:13:10:06:23:1d:ce:26:81:3e:
bc:1c:db:6a:67:55:32:f7:79:0b:d3:76:5b:49:35:
fc:97:71:b8:78:4b:72:4a:5d:ed:0b:50:36:62:20:
73:d8:78:8c:2d:a9:c4:07:79:b4:aa:49:bf:79:68:
53:61:68:1e:d6:ab:4e:9a:d6:61:f0:5e:ff:20:b0:
e1:48:6b:a3:31:ad:35:aa:a7:b4:4c:49:27:63:01:
1f:a5:9f:7c:d5:a5:de:48:68:68:3a:5b:3f:d7:e2:
88:a2:3e:d3:b5:36:ba:31:fa:27:24:bd:d6:01:9f:
f7:21:07:c4:a2:6f:75:8a:b4:1b:c2:38:ed:53:d5:
52:8e:9a:d7:44:87:6c:b0:b7:43:68:35:6b:ed:df:
ff:74:9b:05:5c:41:aa:c1:9f:58:50:91:06:70:12:
5b:45:43:18:d9:d9:b8:9c:97:e0:83:db:a0:ee:6d:
62:2a:61:0e:4e:96:e9:2a:b6:1d:98:63:1c:7a:c0:
e0:95:98:21:dd:71:a2:2e:83:68:42:d5:96:9e:36:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:FD:E5:DE:C3:09:3F:EF:23:FE:9C:EA:2A:32:90:72:18:48:29
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:45:a0:de:0e:d0:8d:e5:b3:ba:65:d4:a7:61:3e:41:e5:
44:47:89:cb:9f:db:ea:80:e0:61:62:d6:5e:9f:09:02:9f:50:
80:e8:1b:c3:c9:46:7e:b0:6a:05:da:76:af:11:51:90:6e:3f:
31:b9:d3:b6:9b:4b:4e:fb:f3:99:ac:67:81:fa:ea:f1:e3:08:
5f:ae:47:6b:6b:1d:e7:d8:18:14:e1:17:3b:43:1e:8e:9e:b3:
89:14:43:34:3d:e8:74:dd:8c:c5:38:18:f6:31:67:9b:e5:60:
60:83:69:d8:d8:0a:60:71:4b:6c:bf:22:36:ac:28:6c:11:be:
25:9d:14:cf:fa:81:84:9e:d7:31:5f:e5:b2:e9:b3:00:72:c2:
71:31:f9:46:bb:12:bc:12:77:74:03:5f:ba:db:d1:90:52:1f:
1a:55:64:4b:b9:c1:1f:0a:b9:27:e4:39:56:1d:d7:1c:6c:a7:
5a:81:67:6a:53:db:2d:7a:ae:db:3c:15:d5:5d:7c:6d:64:62:
cc:63:be:60:00:fc:47:24:b1:a6:a1:a7:3d:e8:35:49:46:2b:
58:4a:29:ed:e9:0d:2f:47:2d:fd:af:13:fa:f9:6b:80:d6:e0:
0f:8b:e5:6b:22:84:75:21:c4:8e:8d:83:e0:5f:ce:32:84:9a:
10:66:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:18 2026 by rpki-client