Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: jXpIgQyaJe/URdMo5xA82oIqGg2aCr6gzTh1BUOZE3E=
Subject key identifier: 71:B8:FB:05:7F:AD:12:7C:7D:B2:75:39:F6:CB:30:B7:23:29:69:6D
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019F8EA27D5545BBC3A5C694872CDEC1A8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0588
Signing time: Thu 23 Jul 2026 11:00:41 +0000
Manifest this update: Thu 23 Jul 2026 11:00:41 +0000
Manifest next update: Fri 24 Jul 2026 11:00:41 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: duFlxVPb4C5j1quDmVDUMXXh1mSoDgNdO8feCIYCA/Y=)
2: eEnsRD4MkS42ZQFP4tBVSY_su1Q.asa (hash: 24Fjo/JFr8frVKzI4FqGk7wyikPxymdrCMtvdm5CZvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:7d:55:45:bb:c3:a5:c6:94:87:2c:de:c1:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Jul 23 11:00:41 2026 GMT
Not After : Jul 24 11:00:41 2026 GMT
Subject: CN=71b8fb057fad127c7db27539f6cb30b72329696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:c7:8b:aa:55:06:43:a6:0a:38:c4:e4:ef:
56:42:01:bd:bc:89:a9:7e:1b:0f:d7:64:a5:6f:d3:
60:1e:fc:88:4f:63:a3:9f:bc:5b:a4:d0:0a:14:f1:
78:2a:b0:64:63:8d:6d:c3:93:48:f5:75:31:6b:1b:
05:11:58:13:60:49:d6:5a:46:2e:32:a1:e7:c2:c3:
b4:c4:12:13:92:97:10:1f:dd:2b:f6:40:9a:ec:eb:
2a:3c:5f:b7:4c:fe:97:4b:08:46:32:7b:00:7c:5c:
0d:9d:17:f5:e6:87:f6:6d:f1:25:78:28:c9:14:dc:
e1:ca:86:6e:68:39:9d:a3:8e:7c:b4:e3:d7:4b:77:
4f:e7:1c:9c:22:82:56:30:a8:c1:f3:75:7e:6e:d4:
08:6b:5e:ca:06:1c:1f:97:38:b8:e4:9d:67:27:7a:
23:e1:23:8b:15:34:ad:74:f7:0e:c6:eb:6c:05:0d:
99:fa:b2:25:d0:e9:f4:e3:58:2b:5a:e1:02:6f:0e:
d1:5a:ce:98:50:d5:f7:7f:4a:71:a2:30:dc:b3:89:
37:53:77:a9:fa:90:0f:f9:1c:0d:b1:a0:8a:8e:d6:
fb:8e:d1:eb:65:9f:bb:44:f3:ca:ea:e2:61:91:a6:
17:41:80:39:80:56:49:79:88:86:8a:98:f0:6f:e2:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:FB:05:7F:AD:12:7C:7D:B2:75:39:F6:CB:30:B7:23:29:69:6D
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:95:39:89:00:1a:47:c5:c0:30:99:ba:fa:3d:30:63:19:98:
a2:27:77:e0:9a:3b:99:af:5c:2a:30:08:20:24:bc:8f:2f:2f:
75:fa:2a:50:e1:18:c4:85:81:f5:09:a1:58:9b:11:08:3d:86:
50:02:65:a5:5b:c1:38:9e:21:80:7a:b9:ae:23:c9:25:ee:36:
0e:ec:7d:0c:dc:9f:cf:bd:f3:36:90:4b:59:2c:e4:f1:ee:7f:
5a:ad:de:3a:9a:c1:96:06:e3:3f:d4:11:e1:6c:42:1f:62:77:
a7:c6:98:ce:29:ac:2d:67:f1:e7:b3:db:42:f4:e4:8c:c6:61:
3f:0d:ca:ff:05:d8:62:47:f4:23:57:9b:e2:b9:9a:86:77:6e:
68:95:c9:2f:20:55:25:94:9c:59:7f:30:aa:6b:4d:83:0e:d0:
25:d0:2c:c8:62:57:00:86:02:b4:26:8f:28:84:f4:c4:1d:4b:
99:36:a6:52:c7:fc:4a:03:20:1b:03:4a:db:0c:2d:b2:41:4f:
d5:ef:96:14:4e:e2:59:d7:e9:58:c9:71:1c:42:b1:ec:d9:23:
42:70:c5:33:4a:4a:06:78:8a:a6:eb:e0:57:5c:90:88:6a:04:
2f:1e:e7:01:8d:c0:42:03:bd:e5:30:d0:06:79:1a:5a:ad:7c:
80:0e:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:55 2026 by rpki-client