Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: qIGwA7Pzl8f/Vglepa1qJ+JeNUntqXHsF/1BrRys3wY=
Subject key identifier: 0B:B5:4B:70:28:74:AA:97:24:B1:5A:C8:C5:D8:2E:AF:81:B4:6B:66
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019E1CB4BF09DFFB181E8ED6D9EA241E0BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 08AA
Signing time: Tue 12 May 2026 15:01:07 +0000
Manifest this update: Tue 12 May 2026 15:01:07 +0000
Manifest next update: Wed 13 May 2026 15:01:07 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: xVHdyld4r7KfQXXEsyPCyLcikkCMQCyH1J/dZOkkaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:bf:09:df:fb:18:1e:8e:d6:d9:ea:24:1e:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: May 12 15:01:07 2026 GMT
Not After : May 13 15:01:07 2026 GMT
Subject: CN=0bb54b702874aa9724b15ac8c5d82eaf81b46b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:bd:cc:08:35:ef:5e:10:50:67:f8:f4:b7:
87:85:47:cf:21:f3:16:7a:49:84:f7:78:70:d9:48:
a6:b5:a7:ae:b6:c7:5f:6a:62:4e:8d:c8:84:22:fd:
8e:82:03:8e:f9:f5:c0:5f:74:0d:c4:43:47:62:1e:
cb:0a:0c:4f:f8:e9:e2:47:8e:62:7b:97:95:c7:11:
25:df:30:13:43:c4:ed:e1:ea:b3:c4:82:69:f6:46:
42:bd:c2:99:6f:65:99:be:e7:a9:99:68:1b:17:ef:
29:9f:6a:1b:66:c0:ee:b5:ce:2e:9f:af:79:76:c3:
27:53:9d:cf:a2:6b:77:83:35:45:da:ea:5c:09:b4:
f8:c7:fb:2e:40:4d:2a:33:a7:85:2c:93:33:c7:c3:
58:48:30:91:49:83:a9:81:e5:78:ba:ed:b6:91:37:
b3:c0:2f:b6:dc:22:86:1f:df:77:41:7e:55:cd:86:
4c:59:24:0d:a2:b0:e3:13:c1:a3:fb:63:09:86:cb:
c1:51:ec:d2:9c:ff:4f:9d:4f:5b:17:47:5f:d5:b1:
51:67:05:bf:60:fd:7e:61:3a:31:da:dc:2b:a6:ff:
6a:af:f4:6f:3f:65:28:4b:df:d9:f6:0b:04:8a:64:
60:d9:11:24:c5:84:b1:ba:a9:bd:5f:4d:75:5e:63:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:4B:70:28:74:AA:97:24:B1:5A:C8:C5:D8:2E:AF:81:B4:6B:66
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:cd:1a:b5:6d:38:64:d0:49:66:74:96:39:2a:f7:dd:cd:
4b:21:2f:bd:39:17:35:e3:86:56:78:6b:d2:c1:87:da:6d:0d:
df:b6:b3:fa:61:23:6d:ea:f2:3b:24:e0:bc:b6:41:90:27:7d:
11:5a:7d:f7:1d:f5:86:bf:39:59:1a:10:26:c3:e5:b5:ba:db:
3e:99:d5:45:76:da:62:25:dd:6f:4b:a7:d7:e3:b3:ec:50:66:
0c:38:73:0d:c3:6b:55:e2:af:c8:82:af:61:64:6e:3b:7a:67:
18:17:bb:ce:b3:8a:00:09:84:d6:70:63:ff:2e:6d:4f:c3:8e:
3e:41:fc:31:15:1f:51:9c:ea:ae:c8:b6:fa:2d:fb:09:89:3b:
1c:fb:f9:f2:7d:a3:42:d5:a3:f1:69:0b:6b:d1:70:d9:59:fa:
7b:e3:54:45:12:24:fe:f0:08:49:79:c6:e7:5e:f5:83:57:70:
35:c3:4c:68:9e:51:4d:82:28:3a:45:11:ca:86:83:42:94:2f:
87:ee:89:3d:33:d6:81:d3:37:f0:0c:5c:a9:0b:a7:6e:5c:de:
46:a7:cc:5a:c0:76:6b:69:cf:d1:80:e2:b6:51:44:3e:68:d2:
71:9f:48:be:e3:1c:ed:b2:47:5b:3e:9f:9a:29:20:85:fd:9e:
b4:65:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:11 2026 by rpki-client