Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: moZHVHewiTsn4T530iR71U7fqWHAfiz6pJMKoSqQnRc=
Subject key identifier: F1:0C:1E:C0:12:76:41:78:0C:C2:43:04:D3:F0:54:78:74:FE:C7:AE
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019F935AD1CBBE77DB66CDB7406BDEBE4F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 18DD
Signing time: Fri 24 Jul 2026 09:00:30 +0000
Manifest this update: Fri 24 Jul 2026 09:00:30 +0000
Manifest next update: Sat 25 Jul 2026 09:00:30 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: oAE9aqxNaS0aBgsRXPYoHl8yxeOk9PzXj93VLq70ANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d1:cb:be:77:db:66:cd:b7:40:6b:de:be:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Jul 24 09:00:30 2026 GMT
Not After : Jul 25 09:00:30 2026 GMT
Subject: CN=f10c1ec0127641780cc24304d3f0547874fec7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:d5:5c:a3:61:4d:b6:a8:d7:7b:d3:2e:17:
09:e7:2e:72:76:0a:d8:23:5d:25:4f:b0:55:d4:f5:
29:25:40:98:85:64:cd:4f:7f:df:cb:65:50:8b:24:
f8:05:44:da:dc:90:1b:c1:49:32:a4:9d:3a:09:32:
ca:cf:9a:0c:1f:4c:64:94:e8:be:5a:65:bd:4e:b1:
c1:4c:24:96:27:6e:e5:b4:33:a8:24:07:ac:cf:b8:
5a:68:e7:66:e6:5b:3e:8f:4a:a8:57:64:7a:16:33:
c5:3a:0d:6c:53:eb:e7:1f:d5:ea:bd:52:b6:50:38:
1f:2f:ca:83:76:88:67:64:2a:ff:1c:b4:78:3f:79:
f6:00:37:a9:e1:3a:62:a3:2d:c9:17:08:73:66:45:
e0:75:d3:4c:2f:50:fc:e2:51:44:b0:6b:50:ac:15:
53:fe:e4:c8:ea:41:fe:06:ee:f9:37:68:3c:2a:36:
0b:19:36:9e:55:64:0d:16:2c:f8:5c:07:b0:9c:91:
41:68:43:9d:e2:77:44:fd:57:fe:be:98:1d:ba:93:
bc:d1:08:33:cd:5f:be:6e:1b:1a:04:66:dc:66:04:
62:af:9b:0f:4f:51:d9:77:35:06:56:22:66:70:d2:
ab:32:6b:d5:36:c3:64:32:9f:3f:95:0a:13:97:26:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:1E:C0:12:76:41:78:0C:C2:43:04:D3:F0:54:78:74:FE:C7:AE
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:1c:a0:d8:bf:d6:33:a9:25:05:5e:26:f1:22:20:a6:fd:
4c:e2:bc:90:fd:96:25:c7:3a:98:fa:3a:de:06:13:b6:62:55:
3f:08:8b:89:32:22:dd:cd:54:26:57:4d:2f:16:02:b0:f2:1c:
cf:d1:58:b6:ee:2d:fe:1c:25:dc:c2:25:81:8d:4b:61:48:ad:
b1:a8:7f:2b:d9:3b:5e:c4:c5:91:2d:25:04:47:6a:e7:34:2d:
ea:56:59:22:9e:b6:12:0d:ca:b8:ac:52:f3:87:9d:75:16:3c:
e8:c1:da:ed:78:f3:bb:57:63:90:e8:1b:eb:af:1c:63:2e:36:
35:6e:95:d4:31:c7:4d:c4:02:72:3f:cf:87:14:f9:17:ff:96:
43:8a:9e:e8:af:0a:70:71:ed:35:3d:de:8a:f3:ef:6e:95:b3:
c6:2c:13:e7:48:d5:b5:aa:01:33:5c:b0:ac:58:92:11:f2:33:
e0:77:5b:d0:9b:53:79:3d:44:87:28:15:13:0f:7e:4e:74:3f:
cd:2c:71:29:14:b2:ac:16:af:5c:6a:5f:c3:20:da:6f:2f:56:
8f:0a:ac:70:48:85:15:ae:e1:5b:59:aa:a1:60:c3:fd:c5:fd:
ec:b9:b3:63:17:e5:5d:b6:db:0c:94:4d:90:10:0c:f2:82:ac:
76:55:4f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWtHLvnfbZs23QGvevk9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3
MjUxYzQwHhcNMjYwNzI0MDkwMDMwWhcNMjYwNzI1MDkwMDMwWjAzMTEwLwYDVQQD
EyhmMTBjMWVjMDEyNzY0MTc4MGNjMjQzMDRkM2YwNTQ3ODc0ZmVjN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDVXKNhTbao13vTLhcJ5y5ydgrY
I10lT7BV1PUpJUCYhWTNT3/fy2VQiyT4BUTa3JAbwUkypJ06CTLKz5oMH0xklOi+
WmW9TrHBTCSWJ27ltDOoJAesz7haaOdm5ls+j0qoV2R6FjPFOg1sU+vnH9XqvVK2
UDgfL8qDdohnZCr/HLR4P3n2ADep4Tpioy3JFwhzZkXgddNML1D84lFEsGtQrBVT
/uTI6kH+Bu75N2g8KjYLGTaeVWQNFiz4XAewnJFBaEOd4ndE/Vf+vpgdupO80Qgz
zV++bhsaBGbcZgRir5sPT1HZdzUGViJmcNKrMmvVNsNkMp8/lQoTlyZwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEMHsASdkF4DMJDBNPwVHh0/seuMB8GA1UdIwQY
MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt
YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz
LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlEcoNi/
1jOpJQVeJvEiIKb9TOK8kP2WJcc6mPo63gYTtmJVPwiLiTIi3c1UJldNLxYCsPIc
z9FYtu4t/hwl3MIlgY1LYUitsah/K9k7XsTFkS0lBEdq5zQt6lZZIp62Eg3KuKxS
84eddRY86MHa7Xjzu1djkOgb668cYy42NW6V1DHHTcQCcj/PhxT5F/+WQ4qe6K8K
cHHtNT3eivPvbpWzxiwT50jVtaoBM1ywrFiSEfIz4Hdb0JtTeT1EhygVEw9+TnQ/
zSxxKRSyrBavXGpfwyDaby9WjwqscEiFFa7hW1mqoWDD/cX97LmzYxflXbbbDJRN
kBAM8oKsdlVPuw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:06 2026 by rpki-client