Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: zv3Htdbfc3y2uPAT+DCyMCU1NlaHrJcaB3Mtu+Ghtqg=
Subject key identifier: 81:98:6D:95:F0:F7:34:0F:56:E6:D4:7D:9F:30:2F:61:90:30:4F:19
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019F905A0E92F9701E684AD77F7D06E44077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0895
Signing time: Thu 23 Jul 2026 19:00:48 +0000
Manifest this update: Thu 23 Jul 2026 19:00:48 +0000
Manifest next update: Fri 24 Jul 2026 19:00:48 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: ZR19ahkiLlRMfFfIBEBAOg/N2NOF0V2Fs9aAMnfstjY=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:0e:92:f9:70:1e:68:4a:d7:7f:7d:06:e4:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Jul 23 19:00:48 2026 GMT
Not After : Jul 24 19:00:48 2026 GMT
Subject: CN=81986d95f0f7340f56e6d47d9f302f6190304f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:bf:8d:c1:f9:a4:cb:f5:46:a8:09:97:bb:
ee:8d:6b:26:1f:94:d7:11:7f:91:68:d9:0b:00:8f:
13:ca:ce:c8:2a:48:e7:42:d8:bf:23:6d:11:a6:5f:
cc:08:0e:4a:07:76:f3:1e:15:f9:15:f1:2e:10:82:
72:da:27:ad:d6:65:0a:a9:f9:b7:3c:d6:c0:55:f7:
de:c0:76:04:37:d5:c3:30:40:59:c7:15:83:93:f3:
71:cc:39:5d:db:99:13:9c:fa:bf:5b:b3:3e:0a:ff:
1e:91:3f:cf:b7:3e:68:56:ef:af:4f:06:6b:fe:12:
80:fe:1b:e0:a7:a6:5f:a7:41:58:8d:ba:d4:60:3c:
99:0f:6e:14:f4:44:b2:0b:3e:f6:ad:9e:68:64:27:
09:fa:f8:a0:a4:98:69:8f:ba:51:78:90:44:67:45:
75:cf:94:f5:d2:80:0d:06:3d:61:1d:c0:f2:90:e1:
46:13:ab:55:f0:4a:2f:52:12:b2:89:8b:7c:de:fa:
b5:31:13:13:b4:2e:e9:30:e5:e5:a4:28:e0:46:d8:
f5:2d:65:b1:87:77:34:53:6c:3e:12:f6:18:8c:bf:
36:f3:56:2a:8d:f3:12:c7:dc:41:05:32:c3:17:b8:
c6:f1:31:a1:7c:25:57:82:bf:02:24:a7:91:ce:f4:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:6D:95:F0:F7:34:0F:56:E6:D4:7D:9F:30:2F:61:90:30:4F:19
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0e:1f:9a:d2:b7:2c:75:62:ad:cd:b4:90:4f:17:03:db:f5:
ba:2d:05:41:d6:c7:34:1e:e6:82:f1:e8:66:8b:86:f6:40:3b:
ce:63:01:a7:9a:1d:c5:f3:01:c7:78:33:39:b0:0a:d1:b0:17:
43:c6:0e:f6:b1:45:a9:26:01:2e:3c:07:af:f2:10:a8:40:8b:
10:c5:a2:4d:09:28:88:87:70:c8:b6:97:1c:4b:75:67:53:69:
0c:32:d8:6e:f9:0d:a7:0c:37:b6:e0:7d:67:46:a6:a9:ef:38:
94:a3:d3:16:54:fd:10:db:93:06:ee:b6:28:a1:45:75:dc:d4:
57:1e:e7:4e:d6:4b:33:7a:da:ff:01:db:cd:aa:2e:95:12:4e:
b3:f0:e4:eb:57:8c:2d:11:0c:87:d1:86:d5:05:eb:00:14:32:
d2:9f:ff:52:45:dc:28:7c:a0:91:cb:16:b5:22:b4:17:af:c3:
a3:fd:07:05:f4:5a:db:54:5d:56:a4:b8:cc:5e:ec:b2:01:d3:
4d:55:6a:96:2b:b1:9f:92:ab:1e:74:c1:f3:4c:7d:41:1d:e8:
61:1b:5b:f9:9c:ce:a2:00:71:99:f2:e7:59:f7:fa:42:c7:8e:
5f:d9:ac:31:10:0c:b3:64:40:43:bd:b9:34:13:60:53:0d:63:
c2:f3:47:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWg6S+XAeaErXf30G5EB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4
MzBmNDEwHhcNMjYwNzIzMTkwMDQ4WhcNMjYwNzI0MTkwMDQ4WjAzMTEwLwYDVQQD
Eyg4MTk4NmQ5NWYwZjczNDBmNTZlNmQ0N2Q5ZjMwMmY2MTkwMzA0ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI2/jcH5pMv1RqgJl7vujWsmH5TX
EX+RaNkLAI8Tys7IKkjnQti/I20Rpl/MCA5KB3bzHhX5FfEuEIJy2iet1mUKqfm3
PNbAVffewHYEN9XDMEBZxxWDk/NxzDld25kTnPq/W7M+Cv8ekT/Ptz5oVu+vTwZr
/hKA/hvgp6Zfp0FYjbrUYDyZD24U9ESyCz72rZ5oZCcJ+vigpJhpj7pReJBEZ0V1
z5T10oANBj1hHcDykOFGE6tV8EovUhKyiYt83vq1MRMTtC7pMOXlpCjgRtj1LWWx
h3c0U2w+EvYYjL8281YqjfMSx9xBBTLDF7jG8TGhfCVXgr8CJKeRzvSjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGYbZXw9zQPVubUfZ8wL2GQME8ZMB8GA1UdIwQY
MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct
NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1
LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA4fmtK3
LHVirc20kE8XA9v1ui0FQdbHNB7mgvHoZouG9kA7zmMBp5odxfMBx3gzObAK0bAX
Q8YO9rFFqSYBLjwHr/IQqECLEMWiTQkoiIdwyLaXHEt1Z1NpDDLYbvkNpww3tuB9
Z0amqe84lKPTFlT9ENuTBu62KKFFddzUVx7nTtZLM3ra/wHbzaoulRJOs/Dk61eM
LREMh9GG1QXrABQy0p//UkXcKHygkcsWtSK0F6/Do/0HBfRa21RdVqS4zF7ssgHT
TVVqliuxn5KrHnTB80x9QR3oYRtb+ZzOogBxmfLnWff6QseOX9msMRAMs2RAQ725
NBNgUw1jwvNHlA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:35 2026 by rpki-client