Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: nJYMelpZTPdjSCGGyPOFaXBRqnKIR6KewU8FR6uxpwM=
Subject key identifier: AD:76:67:47:F0:DD:F2:3A:D4:84:C3:31:AE:D5:13:18:9B:81:50:AD
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019F90C7D0A93B0DFDD1E8B95F5516F0834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 132A
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: WypzsF4xgw6T+MQJemKSglb/MB76NdKa/hHSOSAogBc=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d0:a9:3b:0d:fd:d1:e8:b9:5f:55:16:f0:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=ad766747f0ddf23ad484c331aed513189b8150ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:e0:8c:f0:ee:ad:9b:29:e2:f4:07:2b:ae:
7e:9d:cb:69:1a:e4:d1:37:15:7e:b7:e3:72:b4:a3:
08:5a:7c:b8:c4:34:76:6b:bd:d9:f2:f4:55:b3:cd:
86:eb:fb:cc:e3:bc:a2:2a:23:2e:63:b4:b2:68:3c:
2f:de:1e:52:9b:56:35:d2:31:46:41:5c:ee:01:4d:
9e:1c:63:02:be:4d:81:57:fb:68:e3:fa:7e:06:b5:
0d:f2:de:f7:8d:5f:34:89:be:42:c5:5a:16:8b:64:
39:54:00:10:94:d4:d0:b5:fd:24:2f:cc:97:43:35:
82:9d:24:4d:fc:a3:96:d3:f9:3b:2e:9f:98:d9:3b:
f5:81:cf:36:1c:03:40:b6:cf:4a:00:f1:05:aa:8d:
85:9c:64:c1:70:76:0b:fb:a5:fd:ff:9c:c2:a1:99:
cd:30:9b:04:6a:8c:ab:9d:a9:33:6c:49:d2:04:90:
20:fd:d3:97:1f:1a:74:6c:6b:65:db:d9:d0:13:eb:
31:52:7f:0f:bd:01:ed:ca:92:c5:c4:ed:2b:ba:60:
f1:6b:7d:13:61:d5:ab:8b:0b:fe:68:14:c5:30:d9:
37:9a:5e:82:f1:54:8a:52:fe:fd:1b:9f:1d:97:34:
b7:76:67:4a:ab:2a:d1:84:e8:92:5c:4b:27:db:7b:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:67:47:F0:DD:F2:3A:D4:84:C3:31:AE:D5:13:18:9B:81:50:AD
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:e5:29:01:8c:c8:88:5e:5c:3b:56:eb:57:9f:21:e3:d8:
f7:56:8a:f9:af:15:fa:e9:1b:82:9e:3a:b0:5a:b0:80:03:ce:
56:cf:ee:8f:ab:dc:ad:a8:27:9e:b1:cb:3e:c3:13:9b:bd:88:
e9:81:d4:b7:11:f6:6b:ad:fa:fe:25:80:aa:c9:0e:f2:77:9e:
b7:26:03:9e:be:4e:45:98:13:b4:20:72:69:12:fb:5c:f6:a0:
2b:e3:7e:97:18:44:1f:fc:98:16:68:a8:d7:a8:80:4c:9f:c2:
94:90:d3:39:14:d0:63:fd:06:9d:2f:d6:9a:e2:b4:ae:22:9a:
92:82:fa:19:41:7c:7b:e4:56:b3:4e:04:63:e4:cd:ef:84:6c:
30:7c:d3:72:59:6b:87:02:47:6c:93:7d:43:aa:92:30:89:44:
84:0f:73:6a:e7:f1:6c:f1:1a:e1:ed:a6:9a:c5:91:48:02:ae:
a8:00:93:1d:a4:3c:98:37:7e:e8:48:ac:54:a4:4c:f8:bf:61:
3b:05:f2:7e:27:4f:f1:93:4e:45:c6:dc:ef:2e:c8:90:a5:b6:
15:7b:b5:54:82:40:97:a6:b5:87:a0:e5:17:36:6f:99:40:c9:
db:a1:7f:bc:2a:e3:db:f2:3d:cd:96:3e:94:c7:48:73:ac:3b:
08:b8:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:52 2026 by rpki-client