Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: HIlYadXmM0h147JH2+HhVsvQIeF+e52CpxZ15W5IzlU=
Subject key identifier: 72:FB:52:C4:90:F9:52:F5:E3:63:D1:27:E9:F9:64:F4:0D:34:7E:49
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019F9090E6154A528F8C133AFBD9042DEF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 03D6
Signing time: Thu 23 Jul 2026 20:00:42 +0000
Manifest this update: Thu 23 Jul 2026 20:00:42 +0000
Manifest next update: Fri 24 Jul 2026 20:00:42 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: Kvl3CMEoiQ9kA7hnjb6lgfezVTHNuFPUu+d76/bOCRU=)
2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e6:15:4a:52:8f:8c:13:3a:fb:d9:04:2d:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Jul 23 20:00:42 2026 GMT
Not After : Jul 24 20:00:42 2026 GMT
Subject: CN=72fb52c490f952f5e363d127e9f964f40d347e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:3f:8f:46:25:c4:90:17:70:93:74:c0:30:
ca:a3:6c:ac:94:ce:a6:a2:53:1d:e8:a3:31:38:8d:
19:1d:eb:32:fc:ce:33:a3:ae:42:c1:9b:26:de:e6:
0d:76:40:a9:7c:73:93:07:76:13:1f:51:c0:b7:65:
b3:55:2c:86:e4:ad:2d:ca:ed:f8:61:c1:f9:7e:be:
53:69:d2:05:1d:b6:37:4d:cf:e5:a4:29:d7:a2:20:
f2:06:c3:5b:88:3a:fd:32:2d:39:d7:c9:9e:b4:59:
9a:26:62:fa:6b:0f:64:1d:8a:ca:97:cb:ba:27:71:
46:a8:91:a1:16:73:89:b6:e4:96:10:93:f7:96:7c:
86:dd:a0:d2:1d:0a:f6:38:ff:ea:7e:8c:38:bf:36:
5d:db:82:dc:e1:c1:ef:15:d6:74:89:bd:36:b1:e6:
ef:c0:ec:10:0c:ec:5f:7a:b1:dd:c7:dd:0e:a4:c6:
f1:3d:2d:f3:46:3f:15:4c:c1:b8:ce:6d:5e:ee:18:
f8:c8:65:3d:b3:b9:3f:1e:2b:c7:31:72:ee:d3:59:
75:d1:05:e6:61:a0:d7:d2:04:be:b3:63:97:5e:78:
b7:49:65:09:87:11:ac:c8:2b:a6:fb:a8:c4:98:f5:
35:3b:ee:d3:c9:6b:55:7b:41:9a:2a:e6:8b:37:66:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:52:C4:90:F9:52:F5:E3:63:D1:27:E9:F9:64:F4:0D:34:7E:49
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5d:59:14:6c:13:7b:a0:9c:11:c9:90:ac:53:6f:0d:ec:d2:
82:86:c6:ae:6f:af:a3:54:36:9d:0a:cd:1c:e4:89:89:15:49:
51:21:51:15:81:d1:49:6d:f0:e2:04:37:49:42:00:51:7b:40:
27:45:4f:10:fa:93:46:7a:f4:eb:6f:13:d9:16:1c:51:4b:4a:
b3:17:ff:d5:e5:d0:6c:4d:d5:6f:c5:41:71:94:7c:df:73:18:
b5:6b:5c:71:b9:6e:7e:56:89:85:72:a1:66:7b:83:a9:dc:5d:
4a:58:72:43:a9:2f:e4:88:aa:34:57:69:ef:06:7c:95:a4:48:
08:e2:d2:d4:84:a4:f4:ea:34:12:29:01:88:08:27:92:1c:cf:
bc:fa:aa:59:57:0e:c4:42:b0:ad:da:a5:b5:45:fb:dc:87:7b:
11:54:46:45:c0:30:47:44:86:bf:d7:99:8c:16:2c:b6:2a:43:
3d:33:fd:be:1c:87:b1:ad:6e:86:b0:39:35:c8:f0:c1:8e:b4:
7a:63:4f:df:d6:7b:8d:5b:f6:d4:a1:63:54:0f:04:04:e0:df:
d4:0c:c2:0c:d0:32:92:01:ee:31:97:44:ce:7d:01:85:5f:b5:
36:7f:d7:f2:55:cd:89:ed:b2:3a:32:32:9f:6d:a4:64:c0:25:
ef:34:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:26 2026 by rpki-client