Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: I2E+lzWypug34eLPd/oiKfYTf9Lo9+O+CKXLfxiVxAs=
Subject key identifier: 7F:53:41:11:35:3E:5D:67:60:9B:69:9A:E2:9F:00:73:C6:38:2E:D8
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019F8F7EEAAF9E59034AD515013D29FC6A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 10D3
Signing time: Thu 23 Jul 2026 15:01:27 +0000
Manifest this update: Thu 23 Jul 2026 15:01:27 +0000
Manifest next update: Fri 24 Jul 2026 15:01:27 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: 19ipG0x3DEb2WQZueFI60ZzqU4GQDHM3dL92V4dT9y0=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ea:af:9e:59:03:4a:d5:15:01:3d:29:fc:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jul 23 15:01:27 2026 GMT
Not After : Jul 24 15:01:27 2026 GMT
Subject: CN=7f534111353e5d67609b699ae29f0073c6382ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:ec:b9:f2:5d:46:a0:43:76:83:75:74:1b:
c1:f7:92:a0:80:9e:6e:29:d0:95:94:d6:44:48:bb:
fc:14:a3:a9:71:80:51:81:df:d0:38:c4:cd:34:ae:
c4:1c:73:10:b6:ac:24:66:b2:57:1f:bc:55:16:1e:
a3:0b:df:5b:d1:e5:b3:83:bd:51:1a:43:75:b2:a3:
a1:ea:30:f7:80:0b:d1:2c:89:2e:fe:45:57:86:c5:
a2:68:c4:21:08:9d:ef:e1:dc:80:61:19:68:98:d0:
bc:95:43:8b:ca:4e:56:e6:d4:c1:d1:d3:1b:da:7c:
4b:52:69:93:94:26:b3:b3:b1:c6:75:7e:39:a9:dd:
50:7b:bf:73:c7:f7:22:16:33:d6:d3:87:df:91:47:
92:bf:a7:b3:e5:13:5a:6e:aa:2e:b0:76:7b:f9:f9:
91:1b:de:de:6a:70:cc:93:70:75:ea:02:4b:5e:3f:
e2:fd:7c:43:c6:cf:e8:c8:2f:07:40:c0:3f:dd:f0:
7c:ad:6d:a1:f3:37:31:50:3a:56:7d:1d:bb:48:6d:
34:9e:d0:72:bb:35:a3:6f:60:a0:fa:ae:e2:3f:20:
d5:77:97:f7:07:69:5c:18:51:64:b7:97:90:44:25:
ce:f8:d1:42:5c:94:69:cf:0f:31:5f:87:a0:43:be:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:41:11:35:3E:5D:67:60:9B:69:9A:E2:9F:00:73:C6:38:2E:D8
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2e:cb:e9:d3:28:d6:6a:6d:45:77:96:ce:46:a8:f8:aa:23:
05:de:f4:49:d6:46:11:50:fa:90:d9:ec:ae:62:6b:0f:c8:9d:
2b:1c:e0:3d:cc:c2:4e:8f:7e:85:64:d3:ea:d2:93:9b:ce:99:
7c:63:36:ad:59:89:7b:81:38:fc:c3:ef:40:f3:56:b0:a4:db:
78:9d:cb:f4:7c:02:87:bd:e0:cb:00:c4:96:d6:6d:d7:d2:7c:
34:94:4a:c2:6b:5b:9c:ad:fa:2d:fe:93:83:60:d5:de:04:aa:
34:81:72:b3:83:de:51:48:ea:69:70:ae:70:26:4b:8a:4a:c2:
61:2e:48:cd:c0:81:eb:0a:40:f1:b8:12:b8:5d:5d:c6:1d:cd:
88:cd:b5:83:5d:4c:ac:30:f8:af:fe:2c:bc:56:d4:70:7e:10:
bc:c6:8a:3d:b2:7c:88:97:f6:2a:4b:df:ba:d9:c9:d5:38:5d:
d9:4b:e7:7f:81:57:9d:ab:ec:9a:20:ef:39:9b:04:2e:0c:78:
7c:c4:e0:76:b1:12:6a:80:44:be:bc:8a:d5:30:37:bc:81:98:
52:7d:ed:35:1e:24:ff:5d:7d:6f:55:c8:14:66:48:2a:cd:47:
06:38:ce:c0:43:a2:8a:49:ba:1e:f9:ce:e9:e0:49:91:4a:eb:
6e:35:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:38 2026 by rpki-client