Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: oU/DPSmfMZLyrzigLv3wYh0iNUhu+LozyTe+sC5d0/A=
Subject key identifier: 35:AA:DF:85:8F:9D:6D:14:96:9E:58:C5:47:18:0A:78:44:E6:A4:83
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019F935BCAA6E0CB89E77F70882AE96910C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 1703
Signing time: Fri 24 Jul 2026 09:01:34 +0000
Manifest this update: Fri 24 Jul 2026 09:01:34 +0000
Manifest next update: Sat 25 Jul 2026 09:01:34 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: vF/u6DJjdEFPXhKb7hJJEPLYoDygaxiuFs2rZDIcV+w=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ca:a6:e0:cb:89:e7:7f:70:88:2a:e9:69:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Jul 24 09:01:34 2026 GMT
Not After : Jul 25 09:01:34 2026 GMT
Subject: CN=35aadf858f9d6d14969e58c547180a7844e6a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:c6:b3:e6:1e:7d:ff:d4:e9:bc:9f:10:6c:
14:7d:eb:da:3a:2f:d8:17:ca:c8:3e:ad:e5:bd:9f:
c2:16:74:19:48:48:cb:cd:7e:bd:f1:f8:06:38:6f:
42:fe:af:f2:92:03:b9:3f:da:c9:0d:dd:9e:e4:15:
61:cb:3d:bb:52:cd:0c:19:cc:78:97:52:13:32:d8:
fd:3c:27:a1:f4:3e:df:47:79:be:6b:53:96:4d:10:
fb:f0:c9:e1:cf:a5:23:7c:4f:33:d8:0c:ef:9a:2d:
a3:ca:04:9f:17:16:c5:e0:e6:78:cb:f0:0b:b0:84:
96:f3:d6:75:0c:64:24:6d:12:b9:f6:8f:0e:48:78:
e6:ad:71:5b:b6:c2:d0:cf:dd:f4:cd:bf:c8:29:82:
ac:b8:a0:40:ff:12:29:31:33:61:4b:ec:87:07:b1:
37:bd:a6:1c:7e:48:c0:ea:b2:d9:08:29:59:6e:ce:
c8:81:77:10:4d:4a:82:26:00:08:ca:76:8e:61:07:
15:39:37:94:3c:ca:5e:39:28:f4:65:10:d1:c0:e0:
c2:cd:36:4b:7c:ca:b3:81:a6:98:65:9e:6e:91:3b:
f5:2b:73:7d:83:6a:9e:ec:21:ca:a0:5b:25:7e:b1:
56:69:1f:ee:eb:9a:cc:4e:67:08:96:3f:c9:00:c7:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:DF:85:8F:9D:6D:14:96:9E:58:C5:47:18:0A:78:44:E6:A4:83
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:74:bb:e9:31:40:ec:ed:f0:45:b7:3a:99:5c:36:93:b9:
d2:45:b0:ce:f9:2d:35:57:6f:3e:b9:ca:b8:f0:20:49:8c:c9:
65:0e:60:9e:c1:37:2f:b7:ee:7f:e8:45:8c:68:4f:bb:34:0e:
69:a5:ed:ea:2e:b0:d9:34:64:bb:32:36:12:77:cc:88:56:35:
9c:3f:56:a0:72:6c:3f:8e:5f:f7:14:79:d4:fc:70:a3:83:f7:
88:6b:c0:27:7f:5d:df:8e:b9:3e:4c:e0:ee:8f:6a:ee:9d:cd:
81:7e:5f:52:89:5f:fe:7e:a8:fc:f4:fb:fb:a1:0e:86:84:ef:
2c:5c:2e:41:9f:83:44:3c:84:42:75:4f:3a:99:84:da:38:5f:
1a:e3:da:34:3e:db:8e:ad:61:57:92:31:2b:b5:6c:a4:6d:8e:
5e:ab:f1:a3:d4:3d:94:dc:e9:a7:5d:28:da:52:2d:1b:7e:f9:
b0:be:09:d4:d8:a3:1c:e2:35:f0:59:66:a8:36:84:c6:75:d1:
c4:fb:69:96:bb:49:f4:35:a7:06:a3:cf:b6:ff:64:6c:f8:5b:
dc:b5:b5:d0:be:94:25:df:b6:6f:0d:94:eb:e0:f0:0b:d2:b9:
62:94:9a:a6:f8:d0:ea:6b:b7:df:2e:dc:a2:08:d7:0f:1d:1f:
e0:3c:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:30 2026 by rpki-client