Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: vn+tLabW2ju/zbKq9RynDLqC1G5iJhWxLiJtAJYeI4o=
Subject key identifier: 39:13:D5:4A:71:AF:C5:B1:E0:99:A2:13:F0:CA:58:D5:15:F7:11:EA
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019F8F7DFD8B83DADF92937BD81B4A8C72CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0CC4
Signing time: Thu 23 Jul 2026 15:00:26 +0000
Manifest this update: Thu 23 Jul 2026 15:00:26 +0000
Manifest next update: Fri 24 Jul 2026 15:00:26 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: mvwUN9XjDhptLlw1c/ngUvah8k8kS09FO4aRyvXpUlo=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:fd:8b:83:da:df:92:93:7b:d8:1b:4a:8c:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jul 23 15:00:26 2026 GMT
Not After : Jul 24 15:00:26 2026 GMT
Subject: CN=3913d54a71afc5b1e099a213f0ca58d515f711ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:65:27:24:db:23:be:4e:1a:85:e4:04:32:
05:05:06:0d:3d:b6:16:15:fb:cb:f8:3e:fa:ba:41:
2b:62:8b:4f:6c:cf:f9:2a:c9:90:00:97:16:6e:9f:
5c:bd:07:94:70:61:5c:d4:a4:a3:42:f7:b9:3d:66:
dc:64:55:0a:22:db:b6:53:1b:17:05:89:00:95:4b:
42:38:06:2a:5f:20:da:a3:62:47:a5:fa:3a:18:df:
6b:2c:30:4d:f6:66:dc:8e:3b:34:a6:e7:1b:21:cf:
f6:25:9e:04:51:31:bf:4a:a1:bf:1a:7d:fb:7b:62:
bd:c1:ec:73:81:da:51:74:5e:6d:38:75:a3:ec:b1:
db:3a:52:ad:44:b1:2e:c5:4e:21:a5:e7:5e:64:a6:
6c:15:5d:12:bd:72:79:b5:18:f0:e2:ec:ac:eb:a1:
a7:73:09:4d:93:99:6e:25:0e:2a:a5:6d:73:3f:8f:
70:44:fc:20:c5:e5:77:ba:ef:9f:61:61:f7:a2:4e:
93:e6:d5:f4:93:b1:e7:f2:1c:1f:c9:87:b7:31:a2:
99:12:8a:94:11:8d:e5:36:1b:f4:24:b9:2e:68:66:
67:97:40:49:b2:12:69:24:7b:a7:20:2f:b2:46:f0:
09:f7:2f:bd:3c:a5:82:7d:fc:2b:7c:bd:58:c0:cd:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:D5:4A:71:AF:C5:B1:E0:99:A2:13:F0:CA:58:D5:15:F7:11:EA
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:37:1a:ae:3c:98:9e:c8:16:20:1e:e7:32:9f:2c:44:02:62:
0f:46:f0:d4:0a:47:6a:45:88:30:9b:80:5c:78:b1:1d:1a:12:
7c:da:36:61:3d:85:c5:e9:10:66:cc:83:04:93:61:df:5f:fe:
99:d9:5c:43:49:57:d2:cd:4b:93:7e:a3:9d:fe:3b:e1:a6:5a:
99:b7:d6:6b:b8:f2:c2:d5:49:eb:d7:e2:09:29:e0:bb:ad:62:
6a:96:f5:57:22:53:d2:24:a4:ef:b5:09:3b:ec:6d:6b:6e:d7:
5e:7a:d8:d2:7f:8b:fa:2c:53:83:42:35:b0:7d:f2:a0:da:b4:
ae:cb:82:8d:87:43:2e:51:d7:cd:da:55:27:dc:29:43:50:45:
df:d2:b8:e2:43:0c:27:84:f5:a7:13:bd:75:b2:00:49:25:60:
ef:68:a8:db:da:7a:0c:ff:40:d2:06:06:3b:72:60:22:d3:a0:
5b:68:76:77:9c:43:66:fd:15:56:77:42:2a:ed:9e:03:a1:f7:
74:e3:6d:0e:f9:78:c4:0e:c2:19:46:d7:77:75:70:fd:ba:1a:
74:49:13:02:c2:31:c5:33:39:3b:4d:90:0d:70:a0:45:bb:b7:
8a:ca:1e:ad:dd:21:a9:3d:fc:72:0b:a1:70:bc:80:59:cf:44:
c7:ad:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:58 2026 by rpki-client