Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier: xrIrc2NDQhUCq+cNXkoCaAfdruLV6lmFkwtqsha3PpU=
Subject key identifier: E9:21:03:C4:EA:86:B1:83:A7:4C:61:F1:C6:C2:C8:63:3E:00:55:08
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer: /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial: 019F921116B54C6C9256D212656BA1D5770E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number: 0152
Signing time: Fri 24 Jul 2026 03:00:21 +0000
Manifest this update: Fri 24 Jul 2026 03:00:21 +0000
Manifest next update: Sat 25 Jul 2026 03:00:21 +0000
Files and hashes: 1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: s4TfrzJXJUKD/Dq+Oup04254/9htAng+spUu3eOmcdY=)
3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:16:b5:4c:6c:92:56:d2:12:65:6b:a1:d5:77:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Validity
Not Before: Jul 24 03:00:21 2026 GMT
Not After : Jul 25 03:00:21 2026 GMT
Subject: CN=e92103c4ea86b183a74c61f1c6c2c8633e005508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:e1:09:30:80:e8:3f:d0:16:02:82:15:af:
ff:3e:84:d8:0e:6c:27:0d:0d:12:33:8b:c2:97:ae:
86:e2:b5:96:58:71:08:d0:24:11:03:02:8b:1b:90:
42:a3:40:3a:23:e4:ec:f7:28:87:9c:f7:99:8f:5c:
3b:e4:36:9a:f1:09:1e:52:61:00:bb:00:7e:2a:d4:
14:cd:40:ca:00:c4:54:fe:9e:55:34:22:1d:89:d9:
9b:b5:85:70:c2:04:dc:c3:a3:a1:98:2b:59:71:96:
a9:78:be:68:5b:2d:12:29:dc:b1:dc:88:a0:f6:c0:
af:ce:0a:19:f2:13:d0:78:da:82:db:fe:3b:53:a5:
05:ce:86:f0:85:11:a2:5f:e6:e2:a4:a7:97:47:a6:
e9:96:0a:a5:23:e3:45:bd:d9:94:73:a1:e2:fa:76:
49:d2:86:a1:e4:64:ae:00:c8:5f:6a:1e:d2:a8:45:
11:94:55:13:45:f8:9d:a4:bf:1b:09:93:0b:03:32:
dc:37:54:c8:80:da:2e:22:3d:83:6a:f4:61:52:48:
4a:be:7b:5e:07:d3:86:d2:56:1b:1a:7c:ff:84:69:
ed:82:12:15:2d:6b:1e:12:3f:76:fd:c1:a7:8b:0f:
81:62:ec:60:a0:a6:11:15:2c:08:89:28:bc:3a:d4:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:03:C4:EA:86:B1:83:A7:4C:61:F1:C6:C2:C8:63:3E:00:55:08
X509v3 Authority Key Identifier:
keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:5f:52:5e:4a:38:06:14:46:86:66:c2:0c:8c:fd:cd:9e:
41:c4:b8:6d:c1:28:cc:5c:ba:32:1c:8a:fa:36:01:dd:aa:18:
af:e9:0c:b9:ea:56:16:a9:57:36:74:bb:47:a8:9c:8b:40:49:
4b:26:48:06:2f:4a:af:99:7b:6f:fa:20:4f:c0:53:74:11:9f:
16:61:27:af:88:c6:37:fd:df:ad:ef:7e:10:46:e3:69:9b:35:
22:77:1c:f4:98:60:ca:b3:01:36:fa:3c:8b:6b:ce:16:08:ae:
c9:8b:08:8f:8b:58:15:e0:66:c6:94:4e:2e:81:24:4f:cf:89:
e5:3b:15:07:80:2c:34:25:46:6e:bf:16:6c:bc:46:93:e3:48:
8e:0a:b1:76:5f:a5:93:2f:79:9d:51:44:4c:2b:b2:8a:6a:b4:
91:8c:72:ed:56:fa:43:30:2c:5e:94:38:16:5a:79:ed:12:69:
ff:b9:5b:f7:c2:72:22:95:6d:18:ff:ab:bd:db:61:15:b4:9b:
38:8e:0e:ad:64:ef:e7:cf:c7:9b:cb:47:1e:48:0a:f2:ce:56:
49:ce:18:a4:c5:14:77:21:6d:99:3b:81:8d:da:6e:a6:53:00:
03:a4:0d:48:b8:d6:04:1f:c3:9d:99:9d:f9:cf:58:c9:bd:b0:
ab:18:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:30 2026 by rpki-client