Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: TrJuMcMr2P3oycAAWKD9ot+KvkO+QzUg+9zxqLxtq6E=
Subject key identifier: 94:59:E9:EB:F5:BF:26:D7:F9:58:5E:62:C5:5E:B5:4F:FA:75:5C:BD
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019F935BA6959A071E8638D175D30258D0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 1240
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: OmEUp-3epX_KUifqGg6OagsyLUI.roa (hash: wX4E8X9J3RZD1t+7aNfaKdNYFXjEujR+Op2mKH/JxaE=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: sksXgQ0IUvVwBGNTWlGOTSTfp3rwpc6XP/yLkciNQ+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a6:95:9a:07:1e:86:38:d1:75:d3:02:58:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=9459e9ebf5bf26d7f9585e62c55eb54ffa755cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:71:51:21:b9:c4:de:32:10:03:a6:18:7a:
1e:1b:49:41:28:26:0a:b2:a3:e2:ec:11:8d:f4:4f:
b3:5a:1b:09:66:3a:6d:0d:16:be:c4:a3:ec:7b:ac:
76:5c:b1:e8:cd:81:02:b9:ef:22:f8:3c:78:46:17:
41:cd:0e:8a:34:00:a3:46:6d:5c:45:59:0a:dc:ea:
ea:04:aa:cf:ac:9f:a3:f3:e9:39:4d:be:ac:5b:70:
3a:4a:d7:a6:36:28:7c:61:ed:a4:9e:f7:e0:49:ba:
b8:5c:08:54:f5:22:d6:5f:45:e8:b0:2c:9f:79:aa:
c9:17:c8:e3:28:43:5b:32:47:c4:c6:99:90:7b:f7:
a9:7b:cf:95:b3:51:09:7c:3a:98:aa:e1:bc:20:0a:
4e:65:4c:54:02:e3:47:cb:73:9b:8a:04:5e:62:5c:
d9:7d:8a:d8:d4:ed:65:5d:2e:95:29:63:74:11:66:
ae:78:6a:dd:07:7f:9d:5c:89:f6:4b:00:70:da:e6:
0a:be:15:ff:7b:88:28:3a:33:b6:32:43:f3:3f:68:
75:3f:9e:b9:a2:77:17:27:81:7c:e3:0f:2f:5b:da:
e7:61:8a:b9:95:c8:86:7a:8c:e2:e0:4d:8e:ba:fd:
0c:5a:d5:ab:24:6f:10:ae:b6:89:7b:d1:98:73:14:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:E9:EB:F5:BF:26:D7:F9:58:5E:62:C5:5E:B5:4F:FA:75:5C:BD
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:ba:db:78:1d:39:f7:08:f0:a5:b6:13:74:d4:a7:9e:07:
21:c6:23:c4:69:5e:b8:01:a9:dd:39:64:e4:91:99:82:c7:4c:
ca:a1:22:c1:32:f0:e0:f4:bd:13:50:df:6c:38:4c:12:85:7e:
fe:2e:53:8d:60:c2:3b:13:d8:50:f4:20:bd:bc:04:13:07:65:
58:35:30:1d:7a:cf:21:35:1d:1c:b3:e8:a1:06:85:b4:c8:db:
c1:93:6f:0c:83:4d:6f:65:07:7e:17:23:a6:af:61:a0:9e:7a:
03:8b:a8:30:b2:53:8d:65:a7:5e:e6:7b:90:0a:e2:9f:31:81:
0c:08:f4:f9:33:3b:12:e7:2e:74:82:39:cb:4d:04:8b:ac:f2:
ab:6c:7c:49:93:6e:4f:af:37:32:19:6d:9a:f3:76:42:a6:b1:
bb:fb:65:92:ec:6a:a7:de:eb:50:a0:be:9f:5a:91:3d:6f:fd:
99:fb:46:29:f7:6d:ad:d0:a4:5b:39:ab:f2:64:b3:41:01:ca:
98:87:1c:86:d7:ff:36:bf:92:b0:d7:e4:76:d9:de:37:86:20:
4c:fc:9b:1b:62:9c:21:b5:d0:9d:1d:28:2d:91:6b:23:2d:b2:
19:ab:ed:63:f4:24:12:b6:bf:39:01:90:97:cd:27:55:a2:9e:
bd:12:c2:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW6aVmgcehjjRddMCWNCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj
NzJmMzIwHhcNMjYwNzI0MDkwMTI0WhcNMjYwNzI1MDkwMTI0WjAzMTEwLwYDVQQD
Eyg5NDU5ZTllYmY1YmYyNmQ3Zjk1ODVlNjJjNTVlYjU0ZmZhNzU1Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGRxUSG5xN4yEAOmGHoeG0lBKCYK
sqPi7BGN9E+zWhsJZjptDRa+xKPse6x2XLHozYECue8i+Dx4RhdBzQ6KNACjRm1c
RVkK3OrqBKrPrJ+j8+k5Tb6sW3A6StemNih8Ye2knvfgSbq4XAhU9SLWX0XosCyf
earJF8jjKENbMkfExpmQe/epe8+Vs1EJfDqYquG8IApOZUxUAuNHy3ObigReYlzZ
fYrY1O1lXS6VKWN0EWaueGrdB3+dXIn2SwBw2uYKvhX/e4goOjO2MkPzP2h1P565
oncXJ4F84w8vW9rnYYq5lciGeozi4E2Ouv0MWtWrJG8QrraJe9GYcxRRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRZ6ev1vybX+VheYsVetU/6dVy9MB8GA1UdIwQY
MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt
MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3
LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3+623gd
OfcI8KW2E3TUp54HIcYjxGleuAGp3Tlk5JGZgsdMyqEiwTLw4PS9E1DfbDhMEoV+
/i5TjWDCOxPYUPQgvbwEEwdlWDUwHXrPITUdHLPooQaFtMjbwZNvDINNb2UHfhcj
pq9hoJ56A4uoMLJTjWWnXuZ7kArinzGBDAj0+TM7EucudII5y00Ei6zyq2x8SZNu
T683MhltmvN2Qqaxu/tlkuxqp97rUKC+n1qRPW/9mftGKfdtrdCkWzmr8mSzQQHK
mIcchtf/Nr+SsNfkdtneN4YgTPybG2KcIbXQnR0oLZFrIy2yGavtY/QkEra/OQGQ
l80nVaKevRLCPw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:38 2026 by rpki-client