Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File: 9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier: PVBfnZu/3shuamtrAu5bR8huLhAWC50VNMatbkN/pqQ=
Subject key identifier: F7:AA:0C:34:61:13:F5:6F:9D:3B:8C:25:26:8D:3D:49:FE:4C:EF:E9
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer: /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial: 019F91A3D45CB52DF5F47BE577966460A6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number: 018E
Signing time: Fri 24 Jul 2026 01:01:00 +0000
Manifest this update: Fri 24 Jul 2026 01:01:00 +0000
Manifest next update: Sat 25 Jul 2026 01:01:00 +0000
Files and hashes: 1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: XBREeMf2dVlACzjieRnn07mZuKVb85vwMB/pX6c9A2c=)
2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d4:5c:b5:2d:f5:f4:7b:e5:77:96:64:60:a6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Validity
Not Before: Jul 24 01:01:00 2026 GMT
Not After : Jul 25 01:01:00 2026 GMT
Subject: CN=f7aa0c346113f56f9d3b8c25268d3d49fe4cefe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:0b:9f:c1:4e:09:28:fb:6d:e3:6b:c7:01:
70:6c:58:aa:53:ef:86:69:87:60:c4:4d:60:5a:d1:
e9:7d:6a:08:71:e2:76:24:21:17:9f:12:e3:98:dc:
8f:88:7a:d6:4c:7d:35:21:38:51:ea:e8:53:60:b3:
c0:09:80:c2:df:fd:5c:ff:61:2b:e2:65:d2:9d:a7:
4b:6e:b8:86:c7:f9:5f:0d:8e:78:ac:68:ae:80:90:
9b:40:d4:0c:76:d1:ec:91:17:23:74:cd:ae:1f:bf:
52:62:66:2c:66:36:9e:e7:4e:1b:ae:e0:55:1a:46:
4c:71:6c:80:a4:67:c5:a8:a9:4c:81:10:6a:5d:69:
49:62:11:ca:78:05:85:d5:86:77:b5:a8:c3:2f:e1:
04:fb:a4:5d:71:11:51:58:f1:df:53:f0:68:c6:4f:
54:cf:b6:3c:48:e6:f4:ec:19:8b:33:52:e6:09:07:
45:8e:a3:c3:74:43:0e:40:e7:df:95:aa:fc:30:bd:
29:1f:10:1f:cf:2f:07:34:2a:49:f7:fc:30:0c:cc:
99:78:4d:dd:14:76:3f:0e:61:39:65:cc:d2:7b:96:
98:5c:bd:f9:9d:fd:c0:63:1b:b2:44:58:b9:62:02:
c2:94:70:2d:90:c1:89:69:23:b8:a1:c0:6b:29:15:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:0C:34:61:13:F5:6F:9D:3B:8C:25:26:8D:3D:49:FE:4C:EF:E9
X509v3 Authority Key Identifier:
keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:68:bf:c4:bf:9a:b1:ee:fc:59:52:b8:b3:f4:51:86:eb:
a7:11:07:a0:ce:2a:65:8b:14:a8:cf:78:81:76:03:98:a7:47:
20:aa:ec:7d:7a:d6:0b:7a:c5:69:a3:78:ea:85:73:8a:fb:e2:
93:e5:08:f6:c6:1d:94:13:37:ab:1d:44:0d:28:7c:4f:7f:8c:
07:c1:45:ea:89:23:27:6d:e3:cb:23:e3:0c:b7:d9:f2:c8:db:
8c:55:a9:ba:a6:37:ff:6c:74:12:0d:5e:9d:8c:86:d7:30:1d:
1a:30:63:83:e4:d8:61:f9:33:4c:40:d4:3a:72:85:7c:30:cc:
5b:43:02:61:04:db:68:53:d6:17:ef:5a:6b:c7:02:7b:d0:a2:
44:88:a7:cb:f4:47:e5:03:65:0f:9e:bd:b0:9d:99:76:14:a2:
cc:a2:11:c5:92:5d:da:31:ec:f0:e1:f5:62:d7:38:27:22:8f:
99:6d:b3:5a:92:7c:7b:d6:0d:79:f8:2b:ce:d5:4d:1c:ff:48:
d2:53:9e:ca:07:ad:10:67:c8:44:b7:4c:83:5d:e9:05:b6:33:
28:13:af:df:fd:94:1f:d8:6c:04:53:97:cc:77:d8:63:51:85:
dc:e9:1e:51:2f:92:cc:bc:b1:1d:48:9f:a7:f6:47:d6:6a:a7:
92:47:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:19 2026 by rpki-client