Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: 33YgfqZyfqslT/KD7OvTV/0/jLwVLwQrFBSh/MCMhd4=
Subject key identifier: 61:FE:88:BC:C2:D4:FC:CB:21:2C:85:2F:1D:EF:72:14:C3:FB:5D:11
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019F8FEC21202F3689A68ABE73A1A2FF6A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 12AD
Signing time: Thu 23 Jul 2026 17:00:44 +0000
Manifest this update: Thu 23 Jul 2026 17:00:44 +0000
Manifest next update: Fri 24 Jul 2026 17:00:44 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: +IBqiuI+Bmn7SV/zlPw+Iv7qK7G4gT5yNolHbrFxmrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:21:20:2f:36:89:a6:8a:be:73:a1:a2:ff:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Jul 23 17:00:44 2026 GMT
Not After : Jul 24 17:00:44 2026 GMT
Subject: CN=61fe88bcc2d4fccb212c852f1def7214c3fb5d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:2f:bd:c8:f4:14:7d:e0:7b:42:37:9e:d1:
19:a6:a5:cc:8b:a7:b1:2c:27:11:6e:f1:80:a7:16:
30:77:c4:5f:1b:15:f0:47:ae:71:5c:87:ac:50:f9:
d6:4c:6b:ad:7a:a0:f1:39:d2:03:18:fd:ab:14:aa:
17:41:47:9b:56:70:4e:66:0a:9e:26:e6:8f:48:6e:
05:73:b7:5d:7b:cf:3d:6f:df:f1:8e:55:93:b0:0f:
97:63:de:40:94:05:7c:a0:a2:9f:77:21:b6:76:ca:
f1:55:2a:a6:ab:b2:54:f9:ce:13:09:b2:c6:cf:df:
38:cf:cb:97:08:b8:5e:b8:df:4a:22:bb:63:d8:c8:
50:43:9e:c1:8e:bc:ef:52:3c:6d:f9:e1:fc:2c:b6:
5c:8e:98:1c:56:d2:5f:2d:bc:27:0b:b3:5c:f9:0f:
95:20:85:85:f8:b6:d1:69:9f:00:8d:91:cd:1b:cd:
4f:53:9b:98:01:1b:c5:38:17:88:5b:b8:f5:3b:53:
c6:11:21:fa:5c:91:88:01:a1:ae:8a:6d:5d:4b:af:
b0:19:79:50:13:fb:bb:95:14:7b:44:9b:f1:f9:4f:
e3:d1:38:8e:67:eb:05:2e:c8:00:fc:db:87:48:91:
55:06:af:7a:3b:90:fd:fc:04:cd:65:7c:f6:56:ae:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:88:BC:C2:D4:FC:CB:21:2C:85:2F:1D:EF:72:14:C3:FB:5D:11
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6b:e3:89:ba:49:ee:81:76:6e:3d:90:ac:1d:1b:0a:88:45:
a7:fb:da:a1:c0:b9:a8:2d:4b:89:ad:6b:f5:1b:d8:8c:40:f9:
d6:82:57:b3:bb:c0:af:16:c4:ca:63:14:b9:36:dd:2b:ab:52:
36:56:56:a5:13:60:49:50:26:00:40:80:12:23:f3:cb:a5:0f:
ab:a1:00:c6:02:90:22:e6:04:ca:61:0a:3d:73:b3:56:c7:65:
af:f8:1e:97:66:e4:3c:89:36:44:9a:73:05:78:b7:a4:93:1a:
37:7d:bf:15:70:c4:b6:35:f9:cb:6d:85:27:4b:c4:43:ee:20:
df:4d:bb:32:1e:1d:4f:89:43:19:78:b4:f9:ff:22:db:31:7b:
bd:19:00:bd:04:a6:12:47:59:9e:88:4c:07:95:d0:e2:e8:85:
91:46:64:f2:6d:13:32:fe:1e:fb:77:62:d9:b3:5b:48:c0:5d:
1a:fb:a1:5c:8f:b8:49:0b:6f:ab:9b:43:17:68:a6:0f:03:36:
9f:3e:27:74:20:83:89:46:82:b4:51:d2:50:80:86:23:c7:30:
aa:77:3d:1f:6a:3a:12:b6:c6:4d:cb:85:f3:44:8d:43:80:3c:
1d:16:64:63:33:f9:2a:9a:ea:db:2b:92:ed:37:02:94:98:e7:
40:87:21:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7CEgLzaJpoq+c6Gi/2pXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjYwNzIzMTcwMDQ0WhcNMjYwNzI0MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg2MWZlODhiY2MyZDRmY2NiMjEyYzg1MmYxZGVmNzIxNGMzZmI1ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9kvvcj0FH3ge0I3ntEZpqXMi6ex
LCcRbvGApxYwd8RfGxXwR65xXIesUPnWTGuteqDxOdIDGP2rFKoXQUebVnBOZgqe
JuaPSG4Fc7dde889b9/xjlWTsA+XY95AlAV8oKKfdyG2dsrxVSqmq7JU+c4TCbLG
z984z8uXCLheuN9KIrtj2MhQQ57BjrzvUjxt+eH8LLZcjpgcVtJfLbwnC7Nc+Q+V
IIWF+LbRaZ8AjZHNG81PU5uYARvFOBeIW7j1O1PGESH6XJGIAaGuim1dS6+wGXlQ
E/u7lRR7RJvx+U/j0TiOZ+sFLsgA/NuHSJFVBq96O5D9/ATNZXz2Vq6E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH+iLzC1PzLISyFLx3vchTD+10RMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmvjibpJ
7oF2bj2QrB0bCohFp/vaocC5qC1Lia1r9RvYjED51oJXs7vArxbEymMUuTbdK6tS
NlZWpRNgSVAmAECAEiPzy6UPq6EAxgKQIuYEymEKPXOzVsdlr/gel2bkPIk2RJpz
BXi3pJMaN32/FXDEtjX5y22FJ0vEQ+4g3027Mh4dT4lDGXi0+f8i2zF7vRkAvQSm
EkdZnohMB5XQ4uiFkUZk8m0TMv4e+3di2bNbSMBdGvuhXI+4SQtvq5tDF2imDwM2
nz4ndCCDiUaCtFHSUICGI8cwqnc9H2o6ErbGTcuF80SNQ4A8HRZkYzP5Kprq2yuS
7TcClJjnQIch+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:27 2026 by rpki-client