Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: VP2RA0AYHh+ll7HfC2BAszTyQjmjw94qCxktylZTHXI=
Subject key identifier: 8C:94:74:18:45:55:1F:33:76:09:1D:04:E6:B7:A5:6C:2F:6E:39:F5
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019F8F4777F899F1BE9AFC22DAE6369220F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 14:00:53 +0000
Manifest this update: Thu 23 Jul 2026 14:00:53 +0000
Manifest next update: Fri 24 Jul 2026 14:00:53 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: Hgkdtso/6KdjidooXZCz7hEZbuqNc09BdrDFehopLcE=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:77:f8:99:f1:be:9a:fc:22:da:e6:36:92:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Jul 23 14:00:53 2026 GMT
Not After : Jul 24 14:00:53 2026 GMT
Subject: CN=8c94741845551f3376091d04e6b7a56c2f6e39f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:44:90:3d:e8:5c:05:25:f8:9d:c9:4d:e2:
94:9c:5a:25:91:69:f1:57:0f:0d:9d:0a:54:b6:aa:
9b:cc:d0:55:73:a9:70:09:28:9c:90:09:83:ff:73:
e6:c9:41:7f:98:d9:d4:72:a8:8f:8c:ec:a5:3f:aa:
8c:86:e6:63:88:38:e7:67:61:40:d3:73:3d:5f:92:
d6:93:64:94:e0:66:4d:6b:67:7c:75:29:c8:b1:0b:
7a:f3:49:e3:11:c2:ba:9c:12:d2:d0:86:06:b3:ba:
47:24:e4:cb:e6:17:97:c4:a0:30:07:e6:86:9d:33:
6e:2b:c0:53:46:d0:5c:52:bd:25:2d:46:d7:44:e4:
65:1e:01:e0:b9:be:71:48:8e:b3:a7:4c:53:11:69:
3a:e2:d9:ca:db:e1:58:f0:49:97:ee:1f:78:b2:42:
23:2c:f6:80:d6:c5:49:76:a4:d5:22:f0:0b:60:38:
82:81:cb:25:13:7d:2f:6f:a3:27:a6:de:a5:64:4f:
29:1f:00:a7:92:20:ee:08:54:8d:63:4f:10:96:10:
b8:c3:f1:23:9a:c5:77:50:37:48:06:50:cf:e8:a4:
17:4f:9f:52:02:fd:17:b8:47:68:35:62:ab:b7:f2:
3a:91:99:f7:95:aa:2e:e5:a4:c1:b8:44:d4:c5:f3:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:74:18:45:55:1F:33:76:09:1D:04:E6:B7:A5:6C:2F:6E:39:F5
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4a:23:20:5c:d7:6d:7c:ba:a0:75:09:8a:86:a8:24:83:48:
d1:2b:b5:ef:4e:2e:bc:52:39:9d:e0:1e:63:c7:a1:0e:15:52:
0d:a0:da:cb:55:1c:90:7c:1f:b0:83:eb:7c:75:f0:58:5b:c3:
c6:1f:e0:54:b4:f5:52:69:1a:2d:f9:d0:6a:ff:3a:2d:d0:77:
3f:ca:ea:58:f3:15:45:c2:f9:c1:15:07:b4:0c:4b:fc:fc:54:
16:a3:49:25:0b:db:50:21:47:08:34:30:ce:f0:a7:b9:ed:56:
55:f9:82:b6:cd:c8:b7:30:68:64:6b:85:48:c6:c6:a1:c5:77:
8f:31:6e:8a:10:86:cc:80:d3:23:a2:82:83:f7:7f:16:85:41:
de:fe:ab:90:20:48:25:d5:4a:b3:f3:12:e8:91:52:ce:e9:10:
6f:92:d6:a4:3d:95:c8:dd:5f:4f:00:15:47:66:59:16:23:82:
3a:db:8d:1f:b9:92:00:54:68:c9:58:51:62:b2:00:23:07:62:
2b:e0:f3:52:61:06:c7:77:81:bc:0c:98:38:87:db:40:08:f7:
62:49:8e:3c:66:e4:5a:7d:f5:35:98:f4:12:b4:91:5b:5e:2f:
85:5c:35:0f:4d:98:c2:03:5b:ac:d0:26:29:8d:12:81:34:69:
74:c0:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:49 2026 by rpki-client