Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: qZ6csIA1c108ZFYZCaY358eJOMm6fvTK+TbXgej3kwc=
Subject key identifier: 8D:03:9C:29:66:D0:91:67:C6:37:E9:A7:FD:0F:C7:AA:E3:07:26:5F
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019F93C99C6DF546E337BED169E3A7A14803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 0786
Signing time: Fri 24 Jul 2026 11:01:31 +0000
Manifest this update: Fri 24 Jul 2026 11:01:31 +0000
Manifest next update: Sat 25 Jul 2026 11:01:31 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: xhkF+xHOBdxCss5l7LhFRkP5KsvSyq+nvI3yce81oek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:9c:6d:f5:46:e3:37:be:d1:69:e3:a7:a1:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Jul 24 11:01:31 2026 GMT
Not After : Jul 25 11:01:31 2026 GMT
Subject: CN=8d039c2966d09167c637e9a7fd0fc7aae307265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:ec:dd:84:c2:fd:f0:6b:70:d5:9e:46:25:
da:ef:32:0a:96:62:c5:09:51:ef:38:09:82:de:2f:
63:d3:6e:b2:43:3f:e7:3c:53:d4:6f:9a:33:af:c9:
ef:a0:2e:99:f6:6e:3a:58:13:cf:9e:a6:d4:92:dc:
d1:d3:96:2c:66:70:11:06:fc:e2:ec:14:cb:2f:07:
18:60:9d:77:34:88:d8:18:68:87:0f:15:0e:a4:c3:
41:ed:cb:71:54:52:03:fe:21:b0:27:c8:34:f3:96:
e1:8b:7e:ea:71:8e:66:1b:4e:a4:41:62:b5:4c:95:
90:51:5e:44:7d:72:67:9e:c9:89:e1:1a:8b:a4:8e:
8f:53:c0:e3:4c:ea:dd:73:48:1f:ba:ea:ad:26:c2:
82:ae:4d:c9:11:53:83:8e:94:15:9c:76:4e:2b:40:
8d:e1:3a:16:c3:f5:66:7b:ba:09:8f:10:4c:fd:99:
9d:17:12:34:0c:30:58:15:ac:ed:b6:ba:b8:12:4c:
09:4e:bd:39:54:30:d9:aa:da:cb:61:fd:40:16:21:
f9:f4:b7:78:99:b5:43:f7:b4:f8:b5:14:e3:a7:41:
ff:c7:6b:3b:58:15:6f:ab:66:87:d5:12:09:23:3a:
9a:7d:73:74:94:ea:35:ef:0e:4a:a2:7d:90:9c:b4:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:9C:29:66:D0:91:67:C6:37:E9:A7:FD:0F:C7:AA:E3:07:26:5F
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:d0:cd:6e:48:ab:8f:7b:52:d3:4e:7a:8f:12:f7:b6:df:
b7:72:05:ab:59:6d:d1:e9:65:53:51:40:87:27:ed:c9:81:04:
96:64:b7:5c:1c:a3:a4:2d:fe:7b:53:e0:cd:a9:84:f7:20:b6:
47:cf:87:d5:de:cc:a1:ae:5b:71:c1:a4:29:78:5f:96:fa:68:
28:36:d8:e2:65:06:b0:a4:6d:72:e4:4b:e5:26:16:a7:4d:64:
a5:1b:41:14:80:a8:a3:a5:e6:cf:85:9b:95:6a:1a:71:25:00:
8a:77:7d:f9:de:a0:7a:b9:c6:9d:d4:9e:ee:d8:03:26:d8:db:
07:f9:d4:65:38:f3:24:8f:10:7c:da:d2:f6:96:e1:76:aa:ec:
4d:f9:44:52:5b:f9:62:41:6b:39:67:e3:21:8b:79:8b:56:35:
37:1f:27:a2:f4:c9:f2:8a:a8:93:5b:4e:56:27:0c:c9:5f:ad:
9c:4c:20:47:1e:1c:77:07:ce:5c:8e:e2:07:ab:a8:84:0c:91:
e3:76:06:1d:b2:31:7c:fa:e8:ca:57:27:43:06:8f:78:31:2a:
38:03:f7:88:79:16:33:4d:fc:cc:5b:35:2e:2f:4a:74:77:42:
47:77:04:6c:98:eb:61:44:ec:33:b8:53:bd:25:74:ec:77:34:
87:cc:9e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyZxt9UbjN77RaeOnoUgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjYwNzI0MTEwMTMxWhcNMjYwNzI1MTEwMTMxWjAzMTEwLwYDVQQD
Eyg4ZDAzOWMyOTY2ZDA5MTY3YzYzN2U5YTdmZDBmYzdhYWUzMDcyNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEPs3YTC/fBrcNWeRiXa7zIKlmLF
CVHvOAmC3i9j026yQz/nPFPUb5ozr8nvoC6Z9m46WBPPnqbUktzR05YsZnARBvzi
7BTLLwcYYJ13NIjYGGiHDxUOpMNB7ctxVFID/iGwJ8g085bhi37qcY5mG06kQWK1
TJWQUV5EfXJnnsmJ4RqLpI6PU8DjTOrdc0gfuuqtJsKCrk3JEVODjpQVnHZOK0CN
4ToWw/Vme7oJjxBM/ZmdFxI0DDBYFazttrq4EkwJTr05VDDZqtrLYf1AFiH59Ld4
mbVD97T4tRTjp0H/x2s7WBVvq2aH1RIJIzqafXN0lOo17w5Kon2QnLSsCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0DnClm0JFnxjfpp/0Px6rjByZfMB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdLQzW5I
q497UtNOeo8S97bft3IFq1lt0ellU1FAhyftyYEElmS3XByjpC3+e1PgzamE9yC2
R8+H1d7Moa5bccGkKXhflvpoKDbY4mUGsKRtcuRL5SYWp01kpRtBFICoo6Xmz4Wb
lWoacSUAind9+d6gernGndSe7tgDJtjbB/nUZTjzJI8QfNrS9pbhdqrsTflEUlv5
YkFrOWfjIYt5i1Y1Nx8novTJ8oqok1tOVicMyV+tnEwgRx4cdwfOXI7iB6uohAyR
43YGHbIxfProylcnQwaPeDEqOAP3iHkWM038zFs1Li9KdHdCR3cEbJjrYUTsM7hT
vSV07Hc0h8yeuw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:04 2026 by rpki-client