Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: QS4JoVCXXVGI4GWXaLUVSBCFZlENVHfiq25YzJdUKOg=
Subject key identifier: BD:C9:D9:21:45:0C:21:B9:1E:C6:7E:AF:C3:E9:D4:7B:85:DA:93:77
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019F927F79CD357D40A48806846F4795F706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:55 +0000
Manifest this update: Fri 24 Jul 2026 05:00:55 +0000
Manifest next update: Sat 25 Jul 2026 05:00:55 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: NivD6nCJ8+NcwYOH571UQTzfPa927iFQo+e206NlPWY=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:79:cd:35:7d:40:a4:88:06:84:6f:47:95:f7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Jul 24 05:00:55 2026 GMT
Not After : Jul 25 05:00:55 2026 GMT
Subject: CN=bdc9d921450c21b91ec67eafc3e9d47b85da9377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:a2:64:3c:21:d2:e9:08:9e:2b:6c:1b:25:
0a:9b:d5:7c:fc:34:c8:ae:53:92:8f:77:b5:db:80:
6b:80:8c:bf:95:37:6e:76:ad:80:d1:c1:b0:1b:0d:
45:bd:d4:55:ac:81:74:c1:5c:7c:9c:fe:85:82:c2:
d9:f0:ff:0d:ee:85:44:d6:19:8e:6d:b6:2e:03:6d:
31:3e:46:13:11:78:5e:2b:ea:48:8c:19:c2:f5:b5:
6b:71:65:e9:c2:9d:0f:61:3b:9d:8a:d9:5c:a0:67:
c2:67:0c:f9:cb:44:f0:67:91:08:0a:b8:04:4e:e4:
54:4b:3e:02:e2:30:55:e5:03:73:45:30:df:36:72:
4d:30:fc:26:f5:eb:04:8e:ff:eb:61:f0:08:fc:5b:
68:5e:a6:3e:0e:2d:ee:61:67:72:98:98:5a:50:25:
02:5d:67:3c:79:62:12:5d:14:74:93:0b:f7:55:a6:
13:6a:a0:ad:a7:8d:73:8c:87:4c:0a:59:5f:7b:7c:
05:91:91:34:f9:b8:18:f1:d8:18:1e:b1:ae:c5:43:
31:33:f9:e0:f6:4d:c2:69:33:7f:4d:0d:75:57:99:
a2:56:c7:7e:c4:22:a8:3f:d1:bc:1a:e3:85:ec:69:
40:e6:65:33:82:c8:75:51:2f:0b:ca:4f:3f:40:91:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:D9:21:45:0C:21:B9:1E:C6:7E:AF:C3:E9:D4:7B:85:DA:93:77
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:f1:af:82:e3:0b:a6:7d:4f:f0:af:d6:04:10:a3:99:c6:
4f:c5:9c:49:cd:af:63:2e:7c:f8:41:89:0f:4a:3c:61:b2:c9:
0b:d8:12:f5:e8:b3:88:82:98:fc:76:cc:5f:fd:99:bb:2c:33:
3d:a1:0d:3d:e4:84:45:5f:0a:1e:b5:04:82:b3:fc:a9:88:21:
90:2d:dc:12:c9:be:71:01:0b:2a:62:0b:2c:aa:d6:07:19:dc:
c6:90:34:ed:98:22:2b:b3:85:95:1e:20:df:42:78:7a:f3:7f:
cc:96:f6:1b:63:68:78:75:65:9a:d2:cc:fc:a8:25:c8:08:9a:
8c:be:d3:f2:e4:7f:d0:30:20:92:c1:96:e0:17:bd:17:60:63:
57:52:00:fa:0a:08:be:2e:4b:56:10:c8:b9:a5:e8:59:fb:34:
b1:93:ed:5e:34:8d:19:b7:c8:b1:36:86:89:fe:6a:29:5b:bf:
8f:89:be:c8:da:7b:6f:98:d6:3f:d9:92:8a:4e:0a:60:8c:7b:
02:fe:9b:ad:a4:4a:1c:c6:8f:77:2f:de:5e:bf:d0:1f:2d:bf:
66:66:35:68:a1:cf:c7:01:c0:7a:98:d1:f1:38:33:ed:d9:33:
1f:72:1d:87:fd:6c:cf:46:e2:0f:7f:ff:d4:35:39:be:be:9c:
69:7d:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:46 2026 by rpki-client