Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: D7xzxP5Ohc4TW9OT/iKnrtynb08LEQY5zJoiSTbxtv4=
Subject key identifier: 17:35:86:DC:92:D2:4A:79:08:88:CA:C4:F6:6A:59:33:65:5E:CE:B5
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F905A086ECB5204F6D94CA4FB78A93F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1173
Signing time: Thu 23 Jul 2026 19:00:47 +0000
Manifest this update: Thu 23 Jul 2026 19:00:47 +0000
Manifest next update: Fri 24 Jul 2026 19:00:47 +0000
Files and hashes: 1: CS5mzjQX2oFjYs8-jDE6t4gGWuw.roa (hash: Rd8Fr6qb+aZJUXDP42r4D9kDK4QBHT0oGrJ2gIOAlbE=)
2: U3uskgBenRf6gNmvfw00tQrNEBw.roa (hash: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=)
3: We9ajpgv-KMWtCNehj5200Ms4KE.roa (hash: yAe9WyOmZWrvcHTRYvIZ0zYpeNqUkrBR9gUrKL3DkRg=)
4: bjE7UVd4xRSJcsOi6k6eD-RyWGo.roa (hash: g9F4OZudAKV9ZQKwESF2WpcxDAZIGIcfVLKaXRaPKuo=)
5: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 1R2oaVOl4HT9VGgFzrY+wSs4aX/xGe7A/UiaRsDpZRI=)
6: kKLGgE3fyTVxx91dU2mQiyqGm10.roa (hash: ZqNmuP4152Y5l4OYoFJ5inMC8KhvOltpWeQnsy5c5So=)
7: nAMFXj2rNW6JcZYHiCVFrmal4gE.roa (hash: KjFSm7B2KJ38AK5RRqVL312Njxb6Vv7zGB6VO3CQXI8=)
8: rMIFOWgPpgEh84QFXDCxqG9IuJo.roa (hash: nFdNMieuWIiHUrXQ7kW2hbA+m40+kh3n4/l9zYjUkcg=)
9: xenLsKPBBzBMqRcg-OjXqeVukQ8.roa (hash: b82QWnmVuqMrn+VvITgqUIemhL5L20gAU9zx2kZtgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:08:6e:cb:52:04:f6:d9:4c:a4:fb:78:a9:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 23 19:00:47 2026 GMT
Not After : Jul 24 19:00:47 2026 GMT
Subject: CN=173586dc92d24a790888cac4f66a5933655eceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:2c:94:f1:33:ab:db:b4:18:37:55:c0:29:
43:e4:74:0a:53:c8:f0:c1:53:2e:3e:d8:9a:e5:7c:
98:60:9c:63:ac:1d:bf:fd:c5:59:df:6b:45:7d:43:
bd:30:de:56:a0:20:27:63:01:fc:5c:1c:cf:dd:e9:
ac:07:1c:d3:ff:0d:09:a6:42:63:c2:e1:6c:45:ef:
4b:e8:81:e6:76:d7:c1:d7:35:2a:45:6f:1f:c3:17:
15:18:24:8b:42:2e:ec:87:ea:4a:81:a3:89:3a:9d:
d8:73:84:b9:96:fe:5e:75:62:69:34:66:26:cb:d8:
b8:52:ad:92:ea:c2:1a:aa:b9:2a:9a:b7:0b:64:d3:
e8:90:4e:80:31:bc:7f:7a:8a:36:68:0e:b3:3b:f7:
b1:f3:9a:4f:d1:04:d2:03:cc:da:7c:a1:2c:e4:a1:
bf:75:e9:e0:56:64:e7:20:50:cc:ea:51:17:ce:3f:
06:34:3d:89:88:1a:34:eb:b3:38:27:6a:77:8a:fb:
df:39:68:e6:86:bb:53:78:a3:8e:70:e9:34:b6:5f:
05:84:29:11:93:d0:ad:23:8f:79:7f:7b:d8:3a:b2:
27:28:d8:22:73:30:b1:95:08:0e:0f:1b:05:48:e9:
13:5e:e7:b2:c8:b3:95:62:25:13:69:1f:17:b4:a2:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:86:DC:92:D2:4A:79:08:88:CA:C4:F6:6A:59:33:65:5E:CE:B5
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:40:f6:43:dd:d6:ec:09:e0:2b:f4:21:eb:9b:80:a7:fc:
27:bd:51:8e:be:e9:cc:eb:f3:7d:b1:15:fc:ed:88:9c:04:8d:
60:44:cd:cd:83:82:73:15:df:1a:84:ce:48:93:88:91:e2:b3:
2b:ce:56:3f:dc:65:02:2b:50:f8:b6:37:60:b3:f1:ec:f3:63:
25:9b:7b:8f:bd:b9:15:a3:8e:d1:de:c8:c0:3c:d1:57:32:cb:
e3:03:06:60:50:9c:7e:70:f7:6d:15:3a:31:23:ea:1e:ae:15:
ff:49:04:69:e7:48:de:27:94:59:9f:55:07:50:a6:3f:76:c6:
43:68:85:ba:2e:de:90:40:0b:e3:63:d3:ae:e6:d2:6c:c8:08:
7d:92:b0:2d:b9:18:cf:3a:b1:f6:05:e2:c7:8d:eb:63:97:9a:
75:14:92:57:7c:e4:f8:7c:99:d9:aa:64:d6:52:ad:15:44:bf:
39:2f:6f:c8:3f:36:37:49:12:2d:1d:e9:34:e1:34:34:53:20:
70:1f:da:3b:e4:65:77:d2:af:a4:29:20:95:3d:4f:fa:82:52:
c9:5d:00:76:ce:8e:5d:aa:98:5b:4e:e1:86:39:82:45:8d:9c:
8f:f4:50:e9:68:30:39:1b:04:4d:35:98:c2:d8:55:35:ff:04:
ab:fb:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:44 2026 by rpki-client