Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: Dj/hb3tbSR843IsCVEvuy4qYm7or1RIDd1QPZrjasEI=
Subject key identifier: 36:45:BD:C0:AD:70:6F:33:BA:C1:62:D1:69:4F:13:61:60:AA:AA:E4
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019F9210FE77DF82E3EC160E3E31C40C0562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 03:00:14 +0000
Manifest this update: Fri 24 Jul 2026 03:00:14 +0000
Manifest next update: Sat 25 Jul 2026 03:00:14 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: etx0CXsH8Y0200cMIHVMJLUygvATrWSpA8W2LIBoTz8=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:fe:77:df:82:e3:ec:16:0e:3e:31:c4:0c:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jul 24 03:00:14 2026 GMT
Not After : Jul 25 03:00:14 2026 GMT
Subject: CN=3645bdc0ad706f33bac162d1694f136160aaaae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:ad:a2:19:74:f5:24:0b:0f:58:1c:74:f6:
ae:a5:3e:d5:4c:d6:e5:63:36:87:8e:59:da:5b:a1:
4e:7b:d6:c0:23:29:a3:09:a3:b1:e5:8c:49:65:ab:
f4:91:e8:4c:86:c1:af:d0:68:c3:7a:dc:a6:3e:12:
27:ce:d8:07:42:5c:aa:a7:0d:c1:d5:81:69:fa:67:
00:cc:c4:6c:25:39:c3:92:0a:d9:9e:f4:db:70:4b:
ab:af:3a:ab:2e:bc:cf:89:e7:f9:ab:7c:83:10:ac:
69:e9:00:d9:fb:15:82:f3:70:85:85:37:7f:fa:2a:
5f:aa:94:25:61:5e:0b:c2:ba:1b:3c:74:70:1c:e3:
39:90:97:91:2d:eb:41:65:14:ba:91:a6:3c:6c:bf:
f6:80:88:3d:00:4c:fd:e7:24:dd:39:1c:f8:19:fa:
62:fc:f4:a0:b4:75:5a:48:0e:97:34:7c:75:7c:84:
30:ef:fe:96:b0:f3:c1:9c:18:06:88:79:87:f3:0a:
cc:fa:89:85:a3:03:ab:b4:cd:b6:4b:ce:01:c8:5d:
80:8c:76:6c:68:2f:45:8d:48:9a:a3:57:f8:ba:ac:
1f:9f:e1:9e:fd:69:43:5c:f5:f7:87:81:f1:c6:a6:
8e:2a:ee:0a:8e:48:af:bf:bd:27:5f:e4:2e:04:cf:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:BD:C0:AD:70:6F:33:BA:C1:62:D1:69:4F:13:61:60:AA:AA:E4
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f5:06:24:a9:6a:58:bc:85:aa:8a:d0:6c:5a:f3:8d:f7:2e:
4c:c2:fb:3c:16:1b:d1:89:51:38:3b:c7:7d:88:3c:46:1f:85:
31:d0:2f:c4:1d:36:0e:0e:2f:6f:64:80:f1:46:c2:e5:9e:92:
81:2a:ef:35:5d:ca:3e:70:af:71:8c:6e:1e:40:b4:d6:ab:e9:
a9:b9:3e:1b:7d:49:ff:65:65:c7:2b:f4:0f:65:42:df:9a:17:
be:49:9b:4d:e7:e1:7f:39:78:1d:77:92:6c:e3:03:a0:f3:0a:
6d:32:e4:df:56:be:3a:3f:5a:6d:1d:50:bf:ac:f1:07:17:e6:
42:08:3a:b9:c6:0c:fb:b6:31:89:ba:97:c1:ea:8d:76:17:6d:
62:bc:f0:87:bd:11:8b:4e:26:ac:fc:42:85:0a:1d:50:91:29:
9f:b6:cc:d6:f4:6f:8e:39:46:97:6e:c5:51:83:9f:80:d5:b7:
94:22:a3:da:e6:6e:10:00:89:98:e4:fc:05:af:1e:a6:fa:40:
38:9b:e9:59:d4:67:1d:8a:67:a1:30:b0:aa:20:08:21:70:72:
3d:1d:09:f8:d7:59:5b:f5:e8:ab:85:24:79:0a:80:b4:e9:b9:
88:35:14:e0:2f:0a:64:68:14:84:81:60:46:22:f5:4c:2a:8b:
6e:0d:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:22 2026 by rpki-client