Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: rKu1yGuj21n5hFEPATYV3aSVG9UI+GSnqpA1wao2/wo=
Subject key identifier: 04:8D:80:3F:01:9B:D5:2E:66:88:69:8B:A1:D4:02:6F:F4:06:58:CA
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019F93C923F9C9BCE2654B1F518D951B3D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 08DE
Signing time: Fri 24 Jul 2026 11:01:00 +0000
Manifest this update: Fri 24 Jul 2026 11:01:00 +0000
Manifest next update: Sat 25 Jul 2026 11:01:00 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: utrHzWRJHijIl5uE/9S1yT5FrEXBAuZlZeKxs65QP7U=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:23:f9:c9:bc:e2:65:4b:1f:51:8d:95:1b:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jul 24 11:01:00 2026 GMT
Not After : Jul 25 11:01:00 2026 GMT
Subject: CN=048d803f019bd52e6688698ba1d4026ff40658ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:2d:e5:bc:c6:48:44:60:d2:4c:a2:81:25:
40:41:56:9d:80:76:52:f6:c5:0c:2d:41:be:50:93:
b9:11:5b:ca:46:48:26:e2:d1:f1:81:f7:56:38:93:
4a:9f:1e:3a:8f:d3:47:92:a6:b9:fa:65:e6:ab:65:
ff:85:38:bb:70:98:15:de:50:2e:a4:d9:76:5c:31:
5f:ac:b8:ab:51:37:cb:6a:a2:28:74:66:9b:ee:4f:
a9:14:16:48:76:a5:e0:3f:71:25:4a:c2:65:52:06:
e3:5a:c7:f2:2c:68:3f:a9:c3:fe:db:4d:ca:7b:68:
ac:91:42:d8:60:9f:a7:ec:45:b2:6e:61:6b:0f:92:
3c:de:94:1a:41:fb:ff:fe:09:cf:38:fe:d3:ff:ae:
44:bf:c8:b0:29:d7:9b:cf:11:1d:fc:27:23:7b:7a:
e4:be:33:96:4d:07:93:72:9e:20:29:c0:db:75:9c:
bd:4d:8c:e6:68:0c:2c:e1:33:4a:29:92:d6:f7:8b:
bf:53:44:70:fb:31:8e:99:21:b5:c2:48:5c:21:8a:
ff:c8:40:3e:c7:17:6d:26:eb:5a:98:2e:ce:01:91:
53:76:c6:ab:68:90:f9:7d:a4:9a:09:51:1e:f7:db:
5d:79:a7:8d:db:5d:1a:98:29:5f:36:eb:14:a7:22:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:80:3F:01:9B:D5:2E:66:88:69:8B:A1:D4:02:6F:F4:06:58:CA
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:2a:4f:16:80:fe:ea:85:1b:0f:55:01:3c:59:b7:b9:de:
66:f4:2a:52:87:d2:c8:88:61:2a:f3:df:b3:70:a2:7f:24:eb:
e3:47:18:2c:16:9f:50:59:7f:d8:d6:05:67:5a:3d:93:13:ee:
78:bc:65:df:df:81:8a:14:86:c8:ce:eb:42:26:50:cd:15:27:
5c:84:6d:2a:50:b4:be:97:14:f1:51:55:e5:be:37:00:3a:20:
0b:cf:6c:26:59:c4:cf:53:9f:8e:35:ae:01:5c:78:87:2c:62:
cc:02:a2:c3:c0:88:45:08:20:7f:81:51:86:8a:20:b4:8f:98:
90:8a:da:a3:09:4a:97:7c:72:7e:23:55:2f:54:42:4e:35:41:
8a:8f:f8:bd:da:43:47:55:ba:12:10:e6:2b:c4:49:6e:75:f3:
97:05:27:6d:78:48:d4:30:69:a2:e9:b2:7e:05:f6:01:40:98:
77:b3:25:15:cd:e5:63:7d:4f:0b:f0:17:1c:a6:f0:f3:da:e8:
c1:60:66:b6:07:ae:9f:04:4a:0e:fd:6d:42:b0:64:5a:f1:c0:
15:0b:a6:a5:7e:d3:3f:af:ff:1a:64:ea:33:a5:23:86:15:4d:
c7:fd:6b:44:6d:a5:70:73:ee:1a:9e:b7:1f:58:09:5d:02:dc:
6f:7d:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:04 2026 by rpki-client