Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: B7LL0iI6wJv75myyDGkMrlakIkW93pqbXIPANgEt0CQ=
Subject key identifier: 78:5B:C0:FB:E0:35:10:16:02:CD:6E:16:3F:83:A7:D6:BD:E6:7C:FD
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019F9135D4BC6569309630B1202D8F4C4CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 06C5
Signing time: Thu 23 Jul 2026 23:00:51 +0000
Manifest this update: Thu 23 Jul 2026 23:00:51 +0000
Manifest next update: Fri 24 Jul 2026 23:00:51 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: o95IVsrGZIe0flgw2oJxJUkHrJPNDlnt0xDqrdMBrIo=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d4:bc:65:69:30:96:30:b1:20:2d:8f:4c:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jul 23 23:00:51 2026 GMT
Not After : Jul 24 23:00:51 2026 GMT
Subject: CN=785bc0fbe035101602cd6e163f83a7d6bde67cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:11:b3:a9:26:d3:73:fc:2e:76:22:3d:ef:
fb:da:10:82:44:d1:3d:7a:9e:bb:c0:bd:39:79:63:
d6:d0:31:85:68:95:4a:49:ad:70:bf:36:60:b4:3f:
ec:03:9f:e6:df:17:d8:7c:75:a3:11:50:dd:aa:62:
d4:e1:03:c9:4b:99:17:c7:7c:8f:b9:ce:d7:32:e4:
b9:21:f0:c6:52:b2:b4:c2:bb:9b:1e:e6:7a:72:44:
20:ad:1b:2d:b1:96:48:40:cb:c0:32:64:26:f8:26:
7e:84:2f:05:64:8a:fd:d8:06:48:a2:d2:02:70:1b:
d5:1d:9e:db:9a:22:e2:61:af:33:3f:69:a9:6d:91:
7b:41:44:3b:82:ed:0f:9c:67:50:f0:a3:1d:66:8c:
9b:27:db:6c:c4:41:32:5d:22:2c:0c:38:16:72:38:
2e:bf:15:de:0c:f7:40:15:26:9b:c6:9f:ef:17:2c:
3a:e9:cd:99:7c:b5:e6:ac:93:9c:b8:ac:71:f3:bf:
fd:23:f3:f5:fe:8a:ca:a6:7f:55:53:b6:36:60:2f:
f2:61:92:e8:e0:81:66:7c:62:87:7d:76:e1:0e:38:
ee:59:d1:2a:51:b4:18:9a:1e:82:f2:65:0b:e3:ac:
8b:ea:2d:7c:25:87:c7:13:0b:68:7e:ff:e7:8e:71:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:C0:FB:E0:35:10:16:02:CD:6E:16:3F:83:A7:D6:BD:E6:7C:FD
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3f:99:4b:9e:72:b0:bd:a7:c8:fe:0f:f3:cb:99:08:f6:7b:
30:eb:a5:65:f4:2c:96:69:aa:c2:9e:51:49:9b:d3:95:94:e0:
75:be:1a:6f:6b:05:c5:c6:b1:be:40:82:34:5a:14:59:56:43:
29:1b:05:88:2b:95:c1:8a:ab:ff:c5:0e:67:08:83:6d:48:78:
88:2d:39:a6:d4:72:da:4f:1e:bf:f7:f3:4d:6f:26:50:f8:6f:
d5:fc:0e:78:42:2b:ee:cf:80:c6:07:10:62:87:d4:05:7c:a5:
5c:4d:6c:09:07:35:89:d8:b2:6b:5a:5a:a0:a1:64:ae:23:c7:
75:cf:cf:06:c1:2b:29:49:71:97:4c:b3:37:d7:fe:db:e1:37:
8a:32:dc:d9:89:ce:fa:dd:44:9e:00:31:31:f2:e4:fd:1d:54:
3a:aa:67:73:d4:c6:ba:57:6c:eb:15:44:f3:92:12:09:5d:61:
21:2b:4e:77:b0:2c:1a:75:02:13:e2:6d:c3:c6:da:45:91:44:
2e:f1:32:19:83:21:eb:c1:82:33:4e:be:5f:88:f4:e3:ae:4e:
b9:2e:40:24:0b:7d:8b:25:0d:b6:ad:53:3a:67:93:38:cc:15:
0e:b5:a4:21:df:07:2c:a8:0e:5c:6b:a7:71:e8:d8:b2:5d:91:
04:3e:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:54 2026 by rpki-client