Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: BDQ5r6oD+nqeKjBhzGtLoc7EblrPqNCypwXgnq8eAZo=
Subject key identifier: 91:5F:D3:0F:4F:2D:B7:4A:20:F9:E9:3B:CC:F5:E2:F6:64:D2:CB:E2
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019F905A588654608A19B415873CAAA8F21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:01:07 +0000
Manifest this update: Thu 23 Jul 2026 19:01:07 +0000
Manifest next update: Fri 24 Jul 2026 19:01:07 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: yXEN+x2QP5mM+aKXjEzPlB8SxKW6927VegQxQU67IKI=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:58:86:54:60:8a:19:b4:15:87:3c:aa:a8:f2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Jul 23 19:01:07 2026 GMT
Not After : Jul 24 19:01:07 2026 GMT
Subject: CN=915fd30f4f2db74a20f9e93bccf5e2f664d2cbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:f9:cf:c0:19:57:78:4d:a1:a5:e7:48:0c:
43:15:16:e7:44:bd:7c:6f:e0:40:2c:a7:f0:98:0c:
30:cc:41:5c:27:20:b4:83:26:99:7d:dc:ab:c0:fe:
76:fb:d3:4d:56:91:cf:fc:ab:e9:4a:61:7b:05:53:
4c:4b:83:1e:3c:50:43:3d:f4:99:06:6f:d3:c9:3a:
e5:ff:c9:13:86:32:bf:73:15:bc:dd:68:01:2f:11:
4e:27:cc:29:ca:78:b8:a1:7f:47:9a:67:96:58:66:
37:ae:28:a2:18:90:4d:46:60:e4:13:80:a4:61:db:
7b:0d:f4:70:6a:a2:42:65:2b:a8:ff:14:42:36:e1:
22:d8:7a:38:3d:8c:41:33:4c:6b:04:88:3a:24:cf:
5c:5d:47:69:54:e0:27:a7:db:f9:0f:ad:e8:fe:35:
b8:fa:51:41:18:e6:bd:94:a6:f6:96:d1:73:5c:b8:
6e:24:61:9e:05:e3:ed:aa:46:85:f1:2f:d4:e2:eb:
81:58:c5:3a:75:b1:a5:1c:d7:db:50:26:14:2f:7b:
37:96:d1:60:c6:ef:be:17:9e:b3:bb:4b:88:0a:c9:
ea:18:b9:26:43:ff:c4:1a:27:a6:37:19:ee:5a:2e:
55:92:0a:95:d2:94:ff:cc:7a:3c:da:cf:c2:10:b8:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:D3:0F:4F:2D:B7:4A:20:F9:E9:3B:CC:F5:E2:F6:64:D2:CB:E2
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:da:b7:51:31:fb:3d:0f:89:b7:43:5b:ba:4f:c6:d9:b4:
4d:26:1d:c3:7f:82:59:2c:0e:33:d0:ac:67:9a:72:9f:a5:9a:
9c:af:ad:0b:4e:1b:0e:36:f3:5e:19:40:32:ed:35:7f:58:34:
bf:fc:c0:6a:7c:34:6a:cf:e9:72:93:70:c7:21:f6:70:22:c4:
5e:90:b9:9a:ab:28:57:c6:92:fa:94:2c:9c:87:b9:10:94:38:
83:d4:6c:02:4c:02:2a:b8:34:03:91:27:75:7a:8b:8b:f7:6b:
b3:cb:70:34:e2:75:a0:27:a6:2d:6d:9c:57:bd:4d:31:d8:a2:
f0:dd:c0:f3:b1:94:a5:77:df:b6:6c:b0:ba:4a:4a:59:11:cf:
ec:75:9a:a7:7c:40:d6:dc:8f:e9:10:94:85:0c:71:27:00:58:
e5:d1:5d:65:df:22:86:21:ff:fc:56:17:fc:59:ce:83:59:d5:
a1:4a:21:6d:49:78:0f:06:6b:b6:d8:e9:f5:75:b7:d1:83:b0:
4e:5a:a7:b6:24:1e:02:85:7f:43:f1:33:51:89:7b:a9:ab:b2:
97:a7:97:45:5b:b3:ea:2d:6f:db:1b:0a:94:14:e8:8b:9b:b8:
71:3e:cc:b3:7f:c9:2f:53:45:1f:20:ec:e3:66:ee:35:f5:7e:
b8:60:c6:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWliGVGCKGbQVhzyqqPIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzY0OTk0ZTI0ZDRhZWZkYzQyYTg4MzFmZTBkY2UyMGQ2
MDQ2ODkwHhcNMjYwNzIzMTkwMTA3WhcNMjYwNzI0MTkwMTA3WjAzMTEwLwYDVQQD
Eyg5MTVmZDMwZjRmMmRiNzRhMjBmOWU5M2JjY2Y1ZTJmNjY0ZDJjYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXn5z8AZV3hNoaXnSAxDFRbnRL18
b+BALKfwmAwwzEFcJyC0gyaZfdyrwP52+9NNVpHP/KvpSmF7BVNMS4MePFBDPfSZ
Bm/TyTrl/8kThjK/cxW83WgBLxFOJ8wpyni4oX9HmmeWWGY3riiiGJBNRmDkE4Ck
Ydt7DfRwaqJCZSuo/xRCNuEi2Ho4PYxBM0xrBIg6JM9cXUdpVOAnp9v5D63o/jW4
+lFBGOa9lKb2ltFzXLhuJGGeBePtqkaF8S/U4uuBWMU6dbGlHNfbUCYUL3s3ltFg
xu++F56zu0uICsnqGLkmQ//EGiemNxnuWi5VkgqV0pT/zHo82s/CELidMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFf0w9PLbdKIPnpO8z14vZk0sviMB8GA1UdIwQY
MBaAFPTGSZTiTUrv3EKogx/g3OINYEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUt
Mzg1NTY5OGZiNTdmLzEvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUtMzg1NTY5OGZiNTdm
LzEvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmnat1Ex
+z0PibdDW7pPxtm0TSYdw3+CWSwOM9CsZ5pyn6WanK+tC04bDjbzXhlAMu01f1g0
v/zAanw0as/pcpNwxyH2cCLEXpC5mqsoV8aS+pQsnIe5EJQ4g9RsAkwCKrg0A5En
dXqLi/drs8twNOJ1oCemLW2cV71NMdii8N3A87GUpXfftmywukpKWRHP7HWap3xA
1tyP6RCUhQxxJwBY5dFdZd8ihiH//FYX/FnOg1nVoUohbUl4DwZrttjp9XW30YOw
TlqntiQeAoV/Q/EzUYl7qauyl6eXRVuz6i1v2xsKlBToi5u4cT7Ms3/JL1NFHyDs
42buNfV+uGDGtQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:56 2026 by rpki-client