Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: 8a4EbSthwGDKQe2jmj5DhG5rCqsPLoHwnLGNv8LP1MU=
Subject key identifier: FD:69:BF:48:65:28:CB:FA:16:10:55:FB:A3:E9:93:54:BC:02:7D:CE
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019F8FB4DC263D16066C22A22DFF22ACAD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 19DF
Signing time: Thu 23 Jul 2026 16:00:22 +0000
Manifest this update: Thu 23 Jul 2026 16:00:22 +0000
Manifest next update: Fri 24 Jul 2026 16:00:22 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: 9fPMMlgmcUbwY3TWATglJ9yogep9S1x2AjmaTCep3b4=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:dc:26:3d:16:06:6c:22:a2:2d:ff:22:ac:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jul 23 16:00:22 2026 GMT
Not After : Jul 24 16:00:22 2026 GMT
Subject: CN=fd69bf486528cbfa161055fba3e99354bc027dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:2a:f6:fc:c5:35:54:ca:9e:ff:ca:11:de:
19:f9:93:49:8d:2f:c0:15:25:08:b5:23:0f:02:8c:
f7:d0:f4:00:60:05:87:63:8b:5a:41:b8:32:c5:35:
5f:50:38:0a:f6:9e:1f:ca:aa:53:ce:05:a3:39:1c:
d2:a9:ba:3a:25:ac:27:fb:d0:b6:77:20:ed:6d:a0:
58:9f:38:43:aa:2d:a4:0e:a4:86:b0:7f:e8:a2:e7:
91:80:06:16:e2:60:14:b1:ba:47:7a:47:b8:29:db:
cf:0b:4e:1a:9f:ce:77:d5:04:90:2f:70:61:a2:df:
fc:05:3c:be:06:f3:68:84:3f:ec:d2:80:f3:1f:cd:
88:e3:7d:d2:56:c3:81:16:1c:fa:3c:c9:e8:e3:74:
80:79:1e:59:66:de:0e:0a:e9:c3:eb:b6:ff:78:95:
e1:f1:be:14:eb:26:1c:11:c1:af:e7:2b:c1:9d:5b:
7c:23:c6:9d:d2:33:76:38:7d:25:df:6c:7d:63:24:
66:28:1a:42:42:a2:38:da:d3:3c:df:21:1c:12:43:
8e:5b:33:f1:3a:63:52:9e:f4:00:ba:2a:d4:b2:cc:
92:bd:80:6b:34:62:f3:18:88:c5:33:41:0b:89:40:
35:53:cd:d9:cc:dd:aa:13:f6:b5:ff:47:75:4d:6e:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:BF:48:65:28:CB:FA:16:10:55:FB:A3:E9:93:54:BC:02:7D:CE
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f2:85:13:8c:52:aa:8e:99:41:bb:12:41:cb:03:00:40:19:
f7:3c:99:0e:80:f3:28:9f:b1:dd:2f:68:1f:7c:cd:16:d5:26:
f2:5e:5d:74:4d:d2:6f:ee:32:3d:50:59:12:8b:61:ca:08:7f:
8f:53:ce:90:a6:ad:7b:4f:78:3b:3a:dd:75:02:8c:3b:fc:cd:
cc:66:0e:31:82:42:08:67:7e:04:f6:a1:27:fc:72:e3:00:a8:
69:fa:e5:96:73:d4:88:dc:ec:19:28:a0:b7:d5:5b:dc:75:83:
86:02:a5:41:f8:11:c1:fa:fa:d0:3a:60:38:be:9e:5c:3f:28:
9b:fa:4a:5e:8a:56:b3:34:f1:26:a8:d9:b6:1b:07:dc:55:49:
5f:12:21:6f:2a:ea:e0:e9:41:75:cb:28:13:16:d9:d9:61:6d:
38:8d:96:e5:b0:1f:ee:2c:04:2b:28:f7:37:b9:51:25:8b:83:
9e:b5:98:c1:af:f6:c0:0d:ae:c5:5d:68:93:f0:75:05:c4:84:
cf:a4:46:8c:d9:e8:9c:62:86:07:1b:f8:58:6e:72:eb:5c:71:
a3:9e:d4:4f:40:04:3e:b0:17:fc:e6:7d:e6:71:39:2b:57:e1:
d4:91:6c:e8:39:d0:35:dd:2b:e1:8b:02:b1:a8:66:84:a5:4b:
d6:54:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:59 2026 by rpki-client