Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: CikyFCwFfkQArovv6Xbm49Pe9KVdA3X0REfz/TzUoKI=
Subject key identifier: 5F:40:F3:56:FF:60:04:C6:E7:8F:CF:77:39:3E:6E:CD:47:D6:94:3F
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 019F92B5EF9FDBB76E000D767B021264BBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 06:00:24 +0000
Manifest this update: Fri 24 Jul 2026 06:00:24 +0000
Manifest next update: Sat 25 Jul 2026 06:00:24 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: GkoGmBaH50QSRZ7yf5NoINpHJfnmAeOmIdCJzPlsncY=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ef:9f:db:b7:6e:00:0d:76:7b:02:12:64:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Jul 24 06:00:24 2026 GMT
Not After : Jul 25 06:00:24 2026 GMT
Subject: CN=5f40f356ff6004c6e78fcf77393e6ecd47d6943f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:42:e5:1c:fd:37:2d:9b:e1:34:70:98:29:
a2:99:d5:15:51:89:0f:83:da:04:a2:79:a2:f4:cd:
2d:65:73:52:fb:20:34:d2:bc:ad:89:2c:18:b0:07:
df:06:61:69:58:fc:c8:20:18:a4:a5:19:4a:a6:95:
52:da:66:3c:92:5d:f9:27:19:78:af:f5:b5:33:ea:
bc:2a:44:54:fa:d9:a2:5d:88:73:c3:2a:08:6a:d9:
88:3f:cd:57:44:74:99:db:af:db:15:08:ba:c1:12:
f6:44:0f:85:85:85:85:67:2c:47:30:4a:fe:30:ce:
5f:eb:b6:83:4f:44:fe:9a:68:56:53:b4:69:ce:19:
e0:e2:67:2c:65:f6:e1:a0:f1:c5:2c:28:a1:07:41:
39:24:52:87:14:0e:e8:fb:fc:84:29:f3:09:04:d6:
6f:91:fe:2a:59:c0:b7:ff:90:34:ec:60:83:44:28:
d8:df:85:66:b4:7f:69:b4:fb:1d:dc:ac:6e:82:5d:
9e:5f:62:ba:5d:ed:2f:63:e6:91:52:0c:a1:31:2d:
ab:d5:b6:c9:f0:e4:e3:bf:10:7a:22:ca:47:f3:dd:
fd:3b:54:98:56:53:5f:8e:61:a0:09:4e:db:ca:bb:
b7:7c:e3:22:2d:05:1d:3d:25:54:e3:fd:c2:d5:62:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:F3:56:FF:60:04:C6:E7:8F:CF:77:39:3E:6E:CD:47:D6:94:3F
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:27:ae:6d:8b:5a:b0:9a:25:9a:9d:c0:97:74:9a:6f:eb:4b:
c0:e8:ea:60:de:89:53:7a:4f:33:c2:d4:4a:e9:df:c2:8c:ce:
1c:ad:6c:ff:e8:64:70:d5:20:d9:27:7d:8a:b6:45:30:cb:f0:
35:2e:24:b6:5b:a6:d0:e1:6f:7d:16:63:8d:86:73:5d:89:14:
a1:17:9a:fa:8d:bf:63:75:6c:4a:f4:53:39:ed:4a:ba:39:94:
05:cf:08:a6:aa:b1:b7:23:64:e8:57:52:9a:9c:65:31:33:b8:
73:c0:11:9d:b1:a4:a8:c4:88:69:7d:3f:08:32:1b:d5:ff:f5:
e4:03:1c:ab:a4:5b:39:d9:1e:42:e9:bc:33:51:87:8b:73:27:
be:1b:42:c0:4f:4c:32:9c:e4:b8:46:a3:bd:15:0e:a9:f4:ea:
96:a4:8a:8a:59:26:82:4f:0a:1f:60:fe:fc:7f:29:a7:37:42:
8e:7b:cf:e3:fb:37:ae:33:07:82:b9:d8:a7:fc:46:d7:40:0d:
d7:8d:e2:81:b2:eb:09:93:56:54:3b:7a:22:a2:dd:90:0c:13:
ba:7f:31:e0:d3:b7:54:5d:14:76:e5:35:7a:b8:3a:67:f7:f3:
a6:23:93:65:28:44:c9:61:6f:95:16:6c:36:bf:1a:81:38:e3:
6e:db:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:25 2026 by rpki-client