Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: 6tGOS0uehUB0iln5I75p5eM2GviICU896LNiHDuT9AE=
Subject key identifier: 8A:36:29:11:2D:C5:0E:5E:8A:C6:F4:74:97:D3:4E:AB:6D:78:4A:49
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019F9323BD393C4939FC1F8CB3EFF881024C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: htTf9ERk1coa8IFSG27MX2/80F3CyAH19tkmrTHDdhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:bd:39:3c:49:39:fc:1f:8c:b3:ef:f8:81:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=8a3629112dc50e5e8ac6f47497d34eab6d784a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:d0:a0:28:e6:21:14:8c:d6:29:a9:fb:e9:
04:c1:00:31:9d:4f:e4:5c:a9:c9:9a:58:f6:cd:ca:
1b:c3:02:de:17:71:65:97:7e:5a:12:c5:7d:82:ee:
94:8b:e8:6f:0b:34:a2:49:85:3a:ff:71:94:be:c2:
65:a9:43:19:31:2e:a8:0c:01:5f:4b:f3:bb:09:0c:
31:fa:fa:d8:5e:cf:05:08:c2:12:6e:03:f4:ba:06:
e4:8f:a6:85:d3:67:ec:99:33:be:58:68:9e:ae:d9:
d0:62:96:df:8c:b7:6c:c0:6a:f1:a5:35:c3:2e:f9:
01:56:64:9e:98:82:96:d8:34:9c:88:15:23:2f:e9:
df:1f:7c:bd:60:31:b3:7e:de:54:53:13:03:82:a8:
dd:8d:a6:1a:08:86:82:4f:f7:e8:81:5f:1b:d2:83:
67:4a:b9:e7:1a:de:05:2f:c0:19:63:4e:fc:43:9d:
aa:0c:3f:33:d8:dc:fa:02:04:8b:08:4d:9d:33:dc:
e8:2d:48:90:35:a3:76:09:55:2e:73:f3:de:df:ba:
4b:d6:98:7f:06:d3:73:c1:3b:26:23:57:19:c2:43:
e5:80:f5:46:55:79:ec:04:64:04:7f:8d:72:1c:37:
0c:4d:bd:6d:29:ee:29:80:23:1c:b7:80:51:9f:25:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:29:11:2D:C5:0E:5E:8A:C6:F4:74:97:D3:4E:AB:6D:78:4A:49
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:b9:9d:10:92:a8:e6:b7:4c:24:f2:fb:e8:3d:34:d2:bd:
a4:92:b7:56:8a:f3:da:6a:1c:e2:bd:f9:4d:6e:9b:ec:65:64:
9f:bd:f4:a7:c4:a1:da:2f:ce:bd:2e:16:28:37:69:b5:89:c5:
f5:06:5c:73:fb:b4:82:62:fc:7d:03:e4:5f:98:b1:fc:22:72:
72:73:cf:3c:06:19:f7:a6:97:bf:6d:2d:cb:fa:a8:32:d6:0e:
3e:4c:8a:0b:ec:6e:a1:54:be:55:44:a9:cf:8a:00:30:25:d7:
6a:21:1b:79:23:11:35:ca:fd:b6:12:f3:3f:d0:65:9d:9c:b9:
63:90:94:c4:cb:50:bc:c6:5a:ac:70:8c:79:74:0e:4d:09:7c:
ce:c0:a5:4d:ab:c7:59:46:bb:08:78:02:35:51:83:da:d2:32:
d9:ca:1d:76:7f:14:b8:81:66:17:66:f4:6a:b3:96:2f:52:eb:
2c:d2:79:e2:b7:c3:34:2f:99:b9:2c:a3:ad:6b:77:df:12:ec:
44:79:d7:d6:f6:db:2d:4d:96:58:c6:fb:51:df:f5:5b:09:9b:
2d:6c:89:a6:f4:3e:7d:28:3e:55:db:17:9a:05:39:d9:e2:68:
de:36:c5:26:b3:0e:1b:14:b3:be:d3:0c:f3:c6:c9:7e:b7:e0:
8d:bb:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:55 2026 by rpki-client