
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.mft
File: 9kJld__A6cqWDjoq-80Hdoe67tA.mft (raw, json)
Hash identifier: YF7PGlFyisRvAfOowaJce1xlGJfWzBGKJ/rKdJtCUO4=
Subject key identifier: 56:2D:43:BD:B8:AE:B3:51:26:C1:FF:31:8F:0C:A1:A9:F4:FD:7F:55
Authority key identifier: F6:42:65:77:FF:C0:E9:CA:96:0E:3A:2A:FB:CD:07:76:87:BA:EE:D0
Certificate issuer: /CN=f6426577ffc0e9ca960e3a2afbcd077687baeed0
Certificate serial: 019F916C756A7FD0BFAD30E1F235A4F723E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:31 +0000
Manifest this update: Fri 24 Jul 2026 00:00:31 +0000
Manifest next update: Sat 25 Jul 2026 00:00:31 +0000
Files and hashes: 1: 9kJld__A6cqWDjoq-80Hdoe67tA.crl (hash: FkIZnW2iQ4A5N4fIFKE4Mj/4IBdRndHsmUfVTf45s74=)
2: FuK8KAPprwot2chqgyzv0UDkH5c.roa (hash: Q3wedNppzJrb/WzpciPq5sSLo1vXCvXixDNoWgraflU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:75:6a:7f:d0:bf:ad:30:e1:f2:35:a4:f7:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6426577ffc0e9ca960e3a2afbcd077687baeed0
Validity
Not Before: Jul 24 00:00:31 2026 GMT
Not After : Jul 25 00:00:31 2026 GMT
Subject: CN=562d43bdb8aeb35126c1ff318f0ca1a9f4fd7f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:43:ef:99:7c:54:1a:cd:3d:1b:1d:3a:e8:
8d:d1:c3:36:af:99:14:96:02:8e:18:af:11:36:b7:
a6:1e:28:57:58:75:92:cf:fb:cc:40:73:5f:af:6d:
2c:4a:44:4e:00:70:e5:54:e0:91:a5:07:83:76:c9:
ef:e7:2c:46:dc:66:4e:c2:98:32:6e:f5:01:cc:d6:
ac:c0:89:b1:f7:db:5f:fa:15:a9:d0:fa:ae:36:e9:
0f:42:2e:29:0c:d6:2a:1e:c6:2e:66:e9:08:d9:ac:
b8:aa:2d:e4:a2:47:11:6e:88:c3:94:22:4e:3b:86:
43:28:25:cc:b9:e9:1d:3f:21:6e:0f:f3:45:9b:b6:
81:f4:d6:43:ec:10:fd:73:c6:ae:8d:d8:4a:59:8e:
bd:1d:0e:af:6a:28:3d:03:62:9e:60:58:29:55:a1:
99:6f:ec:cd:e0:1a:32:8a:10:ad:6c:ca:64:94:87:
f5:44:dc:4e:b6:2d:a4:e2:d3:88:88:a0:31:3f:da:
03:bf:a7:e2:f9:96:80:70:ef:17:d2:53:34:a8:fb:
43:3d:08:60:ed:ea:a3:9d:dc:8f:b6:cc:eb:14:19:
cb:4f:f8:9d:19:d6:77:89:31:8a:29:9a:a5:7c:15:
9e:65:1c:d3:4c:b7:93:78:36:c0:7a:bc:b0:6d:86:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:43:BD:B8:AE:B3:51:26:C1:FF:31:8F:0C:A1:A9:F4:FD:7F:55
X509v3 Authority Key Identifier:
keyid:F6:42:65:77:FF:C0:E9:CA:96:0E:3A:2A:FB:CD:07:76:87:BA:EE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5a:e7:76:76:72:b8:55:b3:af:e6:07:01:83:4f:90:a2:fc:
91:d6:74:d5:3a:b3:77:32:37:26:a1:b7:98:ed:4a:1b:10:dd:
49:b8:59:36:10:ae:22:d1:c1:11:bb:fd:93:2c:a8:4c:5b:3b:
7a:a8:27:2a:1e:e3:33:8e:d0:fb:fb:e5:8d:18:27:a7:79:12:
2e:27:13:f2:70:5e:6d:8b:b3:34:17:d8:d0:85:38:74:73:64:
31:46:1b:94:fc:5a:34:db:88:55:72:17:07:97:ab:71:7e:14:
3b:ff:c2:56:b0:0a:cf:4c:40:47:f8:61:66:3d:42:c3:82:cb:
b5:81:53:a9:0c:bc:58:a8:ba:e6:d0:0b:76:a1:64:e9:2b:bc:
19:4d:d1:1f:67:6f:ef:55:52:0b:58:2d:83:14:8d:58:f4:e7:
de:9d:e8:59:1b:c4:5f:e3:62:0b:5c:46:71:21:d7:06:d0:80:
23:6a:b9:63:9e:05:11:44:5c:5e:f7:9f:da:df:db:0a:93:65:
52:35:20:fc:10:32:bd:f3:40:f8:0b:cc:7e:19:48:31:8c:e9:
23:d1:8d:a7:f6:bf:3b:89:5e:ca:7a:3a:6a:56:f7:58:21:57:
dd:24:42:89:5d:09:cd:a6:a3:01:47:fd:2d:81:7f:19:45:67:
41:cc:f4:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbHVqf9C/rTDh8jWk9yPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDI2NTc3ZmZjMGU5Y2E5NjBlM2EyYWZiY2QwNzc2ODdi
YWVlZDAwHhcNMjYwNzI0MDAwMDMxWhcNMjYwNzI1MDAwMDMxWjAzMTEwLwYDVQQD
Eyg1NjJkNDNiZGI4YWViMzUxMjZjMWZmMzE4ZjBjYTFhOWY0ZmQ3ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhtD75l8VBrNPRsdOuiN0cM2r5kU
lgKOGK8RNremHihXWHWSz/vMQHNfr20sSkROAHDlVOCRpQeDdsnv5yxG3GZOwpgy
bvUBzNaswImx99tf+hWp0PquNukPQi4pDNYqHsYuZukI2ay4qi3kokcRbojDlCJO
O4ZDKCXMuekdPyFuD/NFm7aB9NZD7BD9c8aujdhKWY69HQ6vaig9A2KeYFgpVaGZ
b+zN4BoyihCtbMpklIf1RNxOti2k4tOIiKAxP9oDv6fi+ZaAcO8X0lM0qPtDPQhg
7eqjndyPtszrFBnLT/idGdZ3iTGKKZqlfBWeZRzTTLeTeDbAerywbYYWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYtQ724rrNRJsH/MY8Moan0/X9VMB8GA1UdIwQY
MBaAFPZCZXf/wOnKlg46KvvNB3aHuu7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtKbGRfX0E2Y3FXRGpvcS04MEhkb2U2N3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGIt
NGEyYWFkNzk2ZmMxLzEvOWtKbGRfX0E2Y3FXRGpvcS04MEhkb2U2N3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGItNGEyYWFkNzk2ZmMx
LzEvOWtKbGRfX0E2Y3FXRGpvcS04MEhkb2U2N3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1rndnZy
uFWzr+YHAYNPkKL8kdZ01TqzdzI3JqG3mO1KGxDdSbhZNhCuItHBEbv9kyyoTFs7
eqgnKh7jM47Q+/vljRgnp3kSLicT8nBebYuzNBfY0IU4dHNkMUYblPxaNNuIVXIX
B5ercX4UO//CVrAKz0xAR/hhZj1Cw4LLtYFTqQy8WKi65tALdqFk6Su8GU3RH2dv
71VSC1gtgxSNWPTn3p3oWRvEX+NiC1xGcSHXBtCAI2q5Y54FEURcXvef2t/bCpNl
UjUg/BAyvfNA+AvMfhlIMYzpI9GNp/a/O4leyno6alb3WCFX3SRCiV0JzaajAUf9
LYF/GUVnQcz0Rg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:24 2026 by rpki-client