Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: UokP7/AO59p8pBBK30FkiuKrzy1DuUd8tmLcn5I6pkc=
Subject key identifier: 23:2A:21:00:50:E2:AD:13:76:58:A1:8A:9F:82:9C:1A:BF:03:BE:EC
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019F9135DA357BE9775A2C99BCC81AD7A57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 23:00:53 +0000
Manifest this update: Thu 23 Jul 2026 23:00:53 +0000
Manifest next update: Fri 24 Jul 2026 23:00:53 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: zDM0xW1I21LQUa6oWch63HZm2sljIM2RkD2nDKTWtW8=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:da:35:7b:e9:77:5a:2c:99:bc:c8:1a:d7:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jul 23 23:00:53 2026 GMT
Not After : Jul 24 23:00:53 2026 GMT
Subject: CN=232a210050e2ad137658a18a9f829c1abf03beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:39:d2:5e:e5:17:63:8c:96:40:0c:a4:90:
dc:86:f4:13:9b:e3:62:16:d8:ed:44:2d:19:a8:d6:
12:97:0e:77:15:b0:73:6e:ef:90:c9:4e:9c:eb:c5:
74:77:86:8b:8c:fd:6f:96:ac:30:d4:7a:92:40:4b:
33:48:ff:77:cd:7b:91:ca:b8:5f:93:df:9a:7e:42:
33:15:a2:b1:26:58:51:04:68:d9:60:c8:32:6b:fd:
a3:90:f7:6c:4c:95:1a:2a:3b:e2:1b:a1:51:8f:5e:
4a:f1:72:27:66:0b:98:da:90:5e:ba:3f:43:75:87:
0d:9f:6e:65:d1:8f:3f:69:9c:16:95:2d:9b:bb:c3:
fc:a4:ad:4d:4c:3b:84:69:20:cd:a0:27:09:80:cb:
6b:f7:f8:da:93:9c:38:48:7f:e4:b1:26:15:bd:4c:
99:48:77:d6:02:4c:e3:b8:bd:55:12:5d:bc:03:26:
f7:16:70:71:04:77:dc:eb:d0:49:51:41:ef:24:6e:
68:1b:cd:ec:f8:2f:df:c8:5f:32:ae:33:01:7b:fe:
eb:ce:7e:07:3c:19:41:92:0e:ca:f0:56:fe:a7:f8:
c4:7d:9c:e2:fa:97:df:50:d9:78:9d:f6:e8:3e:19:
da:42:15:56:ec:ef:02:21:0b:dd:3a:31:86:38:2b:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:21:00:50:E2:AD:13:76:58:A1:8A:9F:82:9C:1A:BF:03:BE:EC
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:39:26:cf:af:85:be:8a:86:b9:10:8c:6e:6c:0f:0b:85:cc:
a3:df:16:fd:00:48:c4:c0:c0:8e:e0:86:1f:a2:0c:c6:c2:e9:
62:bd:6d:9c:54:1d:86:c8:06:c9:c4:21:90:5b:b4:4b:36:0a:
19:01:e7:51:bc:1d:11:d0:b0:ca:ee:42:38:5a:29:69:1f:f1:
95:3d:d7:3d:43:69:78:56:61:37:28:ee:10:91:39:d8:6f:64:
24:df:8b:e8:fd:d6:4d:b7:3c:d7:ff:a3:79:3b:68:1f:75:ea:
45:18:7d:57:c0:d5:80:de:64:6b:77:10:bf:62:55:d7:2e:0b:
70:0a:7b:ea:5e:76:49:12:98:f6:1a:21:57:d1:9b:af:58:d4:
4a:07:2b:b3:a6:7b:85:a6:c5:a3:d6:3c:c9:03:db:f8:2f:33:
05:bc:b2:6b:92:df:ec:ec:6b:d9:56:a4:92:00:84:88:56:f9:
bb:58:22:0c:5c:d3:79:70:0f:7b:83:75:8e:71:9d:04:0d:a8:
1e:ab:1b:02:8c:d1:29:07:fd:bb:f8:a5:82:6d:c4:b6:11:2e:
cf:aa:bf:26:8b:ee:dd:77:d2:44:ec:2e:cd:29:b5:0f:ca:bb:
14:bb:ee:9a:62:a5:c8:3d:63:18:3a:81:01:35:62:91:bc:4d:
72:40:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:49 2026 by rpki-client