Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: gOQUuOpQ5uVNyRpZ76eXIFV/JPPmfSlTOcOYw4wxcM8=
Subject key identifier: F2:F9:15:3A:F5:8F:54:E0:97:8F:FC:19:D0:55:5E:ED:42:54:58:1D
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019F90C7DB61D788D641C91E0F98EBBF07BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0B42
Signing time: Thu 23 Jul 2026 21:00:44 +0000
Manifest this update: Thu 23 Jul 2026 21:00:44 +0000
Manifest next update: Fri 24 Jul 2026 21:00:44 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: Tv0nnu4ScSU43YP4oAxuyVbzFQ/bQRH9C6Ai/+UVzB8=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:db:61:d7:88:d6:41:c9:1e:0f:98:eb:bf:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jul 23 21:00:44 2026 GMT
Not After : Jul 24 21:00:44 2026 GMT
Subject: CN=f2f9153af58f54e0978ffc19d0555eed4254581d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:d6:df:a8:dd:98:9c:57:3e:42:31:09:7a:
23:b0:78:65:d8:51:de:80:24:c9:b0:dc:1e:38:ec:
45:94:8e:5e:0e:86:6d:58:34:50:20:0b:f4:d1:ad:
e5:6a:8d:d5:25:5f:e9:c8:21:1d:41:e2:79:a2:bd:
d8:bb:9a:03:97:62:f3:15:4d:cb:86:af:50:27:e3:
78:2b:b4:b5:6a:fb:42:15:75:c3:28:29:d1:6a:46:
4e:3b:82:a0:44:74:7b:b5:75:12:6b:d8:b3:98:86:
94:79:50:d4:82:10:da:ad:10:cb:49:11:74:1c:ce:
ec:7d:6f:37:9b:c0:45:0d:48:59:fe:24:b8:e6:b1:
fb:05:ac:9d:30:b7:b4:40:2d:61:e0:00:1d:71:ba:
ea:3e:b1:b9:30:f0:7f:d9:e3:8a:4f:d6:c0:33:21:
5d:ba:8f:3c:58:14:2f:d2:2a:d3:de:b6:08:a0:d6:
fe:48:45:8e:b2:e6:02:80:1d:b8:fe:42:ec:12:71:
7e:30:1b:1b:46:c6:f0:f7:a7:be:5b:8d:dd:09:9e:
a4:a4:9a:08:27:f3:ab:71:f1:b0:75:3f:26:03:fc:
bb:6f:4d:f4:53:7b:35:1f:9b:6d:57:da:93:ad:c4:
79:da:54:e2:02:93:21:c6:84:71:15:d8:d9:11:02:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:15:3A:F5:8F:54:E0:97:8F:FC:19:D0:55:5E:ED:42:54:58:1D
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ed:8c:64:1f:28:d8:51:f9:b1:43:34:72:27:f9:7b:dd:67:
d2:e7:3e:18:94:bf:49:bf:e1:ac:7d:bb:6e:45:4a:9a:11:50:
99:ea:94:69:98:33:45:c5:51:f8:d6:a3:3c:01:2b:44:d0:38:
6b:f3:d6:70:6a:4e:cf:2f:52:6e:9d:12:3e:33:38:8e:5b:90:
19:aa:dd:1e:4a:32:2c:a2:f7:4e:fe:00:2f:5d:4b:18:1f:b6:
16:20:fb:36:1f:b5:ce:d8:25:ab:bb:86:3b:62:79:9d:5c:4a:
50:84:7b:a0:9d:2c:7b:69:7f:50:68:eb:72:86:5f:aa:ec:a2:
b7:f7:34:e1:3c:7f:71:0f:66:4d:1e:cd:16:1f:27:f3:b1:d7:
37:73:dc:b6:9f:11:6a:5e:4a:58:64:0b:0b:39:ed:31:5b:6e:
ca:11:ad:dd:99:33:65:68:bc:d9:ae:e6:bd:d6:da:1a:eb:43:
b2:9b:35:12:c7:a3:05:cf:f0:f4:1a:19:c4:d4:7f:7a:d5:3e:
69:a8:d6:de:e3:a6:1c:fd:98:0d:bd:0b:48:6e:c5:27:1c:1f:
48:a5:19:72:14:35:6d:e7:27:15:e2:fb:90:bc:9a:3c:70:a8:
b8:34:61:77:5a:f7:fa:05:2e:0d:43:77:ff:5d:d1:19:d2:3f:
f3:57:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:12 2026 by rpki-client