Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: 6XyjkafrtgwINqoDLTl2CJOpogI3wSGwR0kGcv/sw48=
Subject key identifier: A4:95:D6:2E:AD:99:EA:D9:46:78:65:BC:64:76:27:E0:13:D8:9A:60
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019F90908EDDC117DC8520F124146CFFA218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0D2F
Signing time: Thu 23 Jul 2026 20:00:20 +0000
Manifest this update: Thu 23 Jul 2026 20:00:20 +0000
Manifest next update: Fri 24 Jul 2026 20:00:20 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: Rg/mr/r3RJ3cXkjDV9xhzijq7V24uqbjfXlflLJ6BvQ=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:8e:dd:c1:17:dc:85:20:f1:24:14:6c:ff:a2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jul 23 20:00:20 2026 GMT
Not After : Jul 24 20:00:20 2026 GMT
Subject: CN=a495d62ead99ead9467865bc647627e013d89a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:17:56:7a:f4:0a:72:11:90:9a:8b:96:87:
da:be:be:6a:b2:26:95:55:9c:af:f9:98:e5:b5:52:
82:dd:48:63:ce:24:bc:9b:75:2b:09:95:fa:92:47:
22:46:86:44:72:05:3e:72:54:d1:30:64:2f:ad:b9:
6d:63:1d:fd:a9:63:db:bf:e4:9c:bc:72:18:aa:7b:
22:25:dc:10:f6:cd:6c:f0:e0:40:aa:8a:1f:20:d6:
54:a1:f1:dd:57:51:fa:97:da:6d:70:cc:6a:26:c8:
7f:bf:74:bd:93:71:8d:f6:ef:85:a5:2b:97:f4:d9:
40:43:2a:ad:ad:38:52:47:48:35:fb:2f:7e:58:a6:
dc:7e:87:25:a5:38:0c:41:65:77:db:07:4f:a3:d4:
c4:8b:2a:0c:48:4d:5e:e2:54:bd:0c:30:e7:b9:d0:
58:0a:4a:bc:b7:59:7b:31:c7:24:5f:4c:51:13:ff:
27:a2:85:eb:5a:13:e4:b3:5a:5e:d3:f3:c2:4a:58:
60:2c:00:ff:60:12:cb:1a:7a:bd:31:aa:e1:a5:ca:
8c:1d:64:f4:1c:de:41:61:7a:19:a4:0b:9e:33:75:
aa:41:ec:d9:f1:6c:76:54:3a:69:13:71:62:eb:17:
83:4f:a7:65:40:37:cd:1d:b5:63:08:42:33:a6:91:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:D6:2E:AD:99:EA:D9:46:78:65:BC:64:76:27:E0:13:D8:9A:60
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cc:50:14:54:ba:11:aa:7d:8d:cf:74:96:3a:3e:14:45:07:
ac:13:fa:d8:cc:67:7f:5b:22:05:99:a9:c1:c8:6f:e9:cd:86:
ae:87:0d:57:f3:7a:c1:de:b9:d9:ab:4a:f9:48:42:80:81:25:
47:07:7b:bc:15:ae:56:d4:45:a5:71:1d:63:9a:a5:c7:d1:ea:
cf:86:18:d0:7f:13:49:10:24:e6:50:6b:b1:cb:46:77:e3:1d:
f6:61:6e:74:ea:71:dd:bc:2e:42:32:5b:4d:84:1c:6d:4e:b3:
f3:1e:92:37:7f:4d:9e:cd:e8:15:60:d5:ca:e9:6e:01:6d:e8:
6a:ef:f1:be:b7:98:85:f1:9a:0e:53:9d:38:e3:1a:b0:c7:16:
95:d0:60:62:e0:cb:9e:cc:80:ae:b7:bf:cc:71:9a:c9:7e:f0:
1e:9d:fe:f1:a6:74:10:6b:41:5c:d5:d8:92:0e:ee:91:cc:08:
a0:57:39:24:98:15:95:93:c6:6e:50:25:7f:18:11:76:af:53:
1b:45:49:3d:27:c8:d8:0b:89:6e:35:71:1f:a0:7b:ef:7c:09:
eb:b0:4a:e6:92:1b:f5:73:95:77:75:5c:ef:cf:1f:bc:db:7b:
04:ee:14:36:70:0a:3a:29:a8:2c:5a:15:da:4d:ae:e6:d2:e1:
6d:3c:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:46 2026 by rpki-client