Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: Tq+czIBf0ebGabbaxdUMTvHWsGoV7UABANtra/Z3ex0=
Subject key identifier: 3B:69:91:D5:18:06:FC:DE:CF:1C:D1:0A:E5:E6:0D:1F:A2:40:51:F0
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 019F93C91DDDECFB0697435F66C4752B406E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:00:58 +0000
Manifest this update: Fri 24 Jul 2026 11:00:58 +0000
Manifest next update: Sat 25 Jul 2026 11:00:58 +0000
Files and hashes: 1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
2: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: wWyyeKU7pVyODuj4jG22W7VY6GHGO5M/lWaEyjTR/Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:1d:dd:ec:fb:06:97:43:5f:66:c4:75:2b:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Jul 24 11:00:58 2026 GMT
Not After : Jul 25 11:00:58 2026 GMT
Subject: CN=3b6991d51806fcdecf1cd10ae5e60d1fa24051f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:9b:85:46:57:e4:ce:93:2c:72:f6:ce:97:
96:52:01:44:7e:ee:69:35:fe:98:9d:51:80:1a:6f:
a9:51:54:5a:b5:8f:9f:ca:8d:1c:37:ba:7b:54:87:
6f:a0:0a:14:76:26:bf:84:29:e4:6e:ef:9a:11:e0:
32:a8:35:8d:f9:78:a1:b6:83:c6:d2:ef:8e:2a:77:
67:af:23:93:4c:dd:46:11:22:c1:a6:d1:3c:3e:02:
63:64:42:4d:38:65:4a:1b:7e:2f:14:59:3b:d3:09:
44:7a:ec:01:a7:b9:f5:c5:58:5d:02:4e:c9:4a:8b:
5f:d8:c8:35:1a:a1:e6:16:6f:35:0b:3c:cd:13:4c:
b6:a3:86:2a:90:a5:c1:74:6a:59:2f:77:2a:9f:24:
c7:b6:d0:84:94:4b:3f:96:16:de:aa:08:82:ce:98:
2d:dc:f1:bd:1d:92:2c:fa:aa:7d:35:e5:12:b1:53:
74:62:7d:d5:87:87:03:97:7a:21:86:95:1c:8f:48:
c8:41:e7:45:79:70:45:42:53:d4:86:f0:1a:46:dc:
f7:dd:e1:65:27:17:99:e0:98:85:a6:ba:cb:7c:4c:
36:8c:3a:a8:7a:8b:21:d9:1d:c2:f2:6b:dc:5b:78:
9b:a1:54:53:87:7a:29:72:ca:cd:85:d3:d8:3b:33:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:91:D5:18:06:FC:DE:CF:1C:D1:0A:E5:E6:0D:1F:A2:40:51:F0
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:26:80:8a:e7:d4:23:ae:15:37:29:d4:5a:10:62:31:a7:18:
4f:ef:eb:77:a8:44:d1:e5:59:2f:2a:45:67:3e:ab:e7:12:e9:
8e:bf:7c:4b:79:9d:d6:18:d4:07:13:27:72:55:2f:d0:ab:a8:
24:d3:ec:81:74:43:3b:1c:85:d1:c6:d0:c4:68:80:a7:9e:3a:
99:02:f7:4b:26:53:c9:2b:7e:a0:d8:10:c3:8e:1c:d2:95:6f:
ce:aa:55:ee:2b:92:92:5a:80:de:54:54:47:d3:aa:27:b6:cd:
5b:01:9e:da:11:39:04:e4:26:58:1b:9b:fc:01:34:21:26:c2:
4b:45:84:36:e2:17:e4:3e:2a:b1:9f:99:11:cc:fa:95:a2:ac:
29:2d:62:2f:49:31:61:71:6f:21:fb:d5:07:f2:74:e2:51:38:
58:f9:71:aa:cf:a5:f2:69:0c:11:63:5d:f9:d8:11:62:96:66:
db:de:36:9c:a3:90:0f:d0:9f:c0:00:2f:ed:15:2f:8c:eb:9e:
e5:0d:1a:66:d2:72:0a:9d:6f:6a:98:a6:ab:d2:8d:e3:28:30:
46:41:04:4f:df:87:e6:3a:73:b1:68:ec:78:8b:44:88:b6:8f:
cf:1e:8e:86:62:90:0a:49:61:1b:e4:9b:ef:1c:f5:21:03:e4:
f2:94:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:27 2026 by rpki-client