Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: XjE8csNmeiuY+iGMZk2C53tAYG+bUqbwFoquz7UHwOo=
Subject key identifier: 58:0E:81:70:5B:2F:1E:CE:21:33:CF:ED:C2:C2:51:E4:2B:6C:DF:43
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019F90FEB91B1B5643DF6503F0E968351D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0DD2
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: OE3l0gaSNeZ2E+wyV4/ov+PexEx7fBlWTzfEtigxgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b9:1b:1b:56:43:df:65:03:f0:e9:68:35:1d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=580e81705b2f1ece2133cfedc2c251e42b6cdf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:a1:0f:10:ee:d0:14:14:1f:18:20:79:6e:
c7:0b:f0:fc:35:cc:00:73:36:a6:b5:b8:f6:17:ab:
af:f5:f1:5e:d8:d6:7e:8c:36:25:17:4f:17:ec:33:
35:fc:8f:ef:6c:fe:20:fa:7a:16:e0:03:cb:0a:53:
40:39:81:82:39:27:c7:f0:f4:90:2c:e9:bb:08:05:
32:bf:c8:b9:a5:e3:d0:35:13:8d:32:d6:21:aa:f2:
b5:a5:6c:9c:2f:7c:42:99:3c:c3:45:76:c7:73:f8:
a5:e5:72:16:b6:bd:1e:6c:25:20:07:4c:78:9b:42:
b1:de:e8:61:23:fc:d7:58:45:0a:9d:82:31:94:b3:
b6:ec:b8:3f:58:84:3d:cb:29:09:ea:6a:e5:7b:19:
6a:ab:c8:be:15:31:b1:26:da:4b:6b:4b:6c:89:68:
46:0d:ba:d8:67:02:4c:40:54:2b:6d:58:15:b4:cd:
81:76:17:94:25:e7:0d:49:cb:ea:c5:d2:d1:56:de:
f3:5b:c5:1e:d1:99:ea:c3:3b:66:3d:63:cb:42:8e:
e4:9d:5a:04:d6:ee:ed:03:9b:7e:2e:06:bf:14:be:
37:4d:9a:84:af:02:c9:d1:ef:88:cf:2b:84:65:6a:
40:fe:5e:c7:55:81:35:ca:60:04:6b:6d:d2:0e:99:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:81:70:5B:2F:1E:CE:21:33:CF:ED:C2:C2:51:E4:2B:6C:DF:43
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:14:21:cc:60:33:8e:22:61:3e:f7:9f:96:37:a1:f7:28:
d2:cb:50:30:b8:cb:50:ad:6f:11:3f:24:35:62:16:04:09:92:
00:97:92:43:3a:5d:55:75:5c:2e:89:9d:4e:6f:63:e7:60:54:
f8:d8:7d:80:42:a4:ce:8f:e9:7c:37:9a:3d:e1:e9:93:69:ec:
48:1a:e5:52:a2:24:45:5a:73:0f:ab:87:fd:45:bc:f9:7d:c6:
21:c9:26:02:4d:30:1c:95:05:d9:14:85:63:40:95:3a:ed:a1:
b7:5f:f5:05:61:ab:d8:c0:7c:b4:10:e0:67:35:73:21:b2:5e:
85:76:87:88:c8:64:04:2e:62:2c:41:38:bd:1d:a5:20:98:9c:
0f:cd:5a:72:05:67:0c:99:5d:d5:c0:b6:2a:4f:75:a0:2a:af:
55:94:09:6c:ea:b5:58:96:17:f8:c3:f7:5d:ac:ce:5c:d8:6d:
19:d7:5b:d7:e1:fa:fd:d6:a4:2d:0f:d1:53:b0:41:b7:1a:1b:
3e:14:37:bf:5a:08:b7:97:2f:09:31:2a:a2:6a:de:c0:e0:b9:
fc:3c:10:cf:ec:bf:a2:71:32:cc:fa:fe:ef:2a:f6:64:16:81:
89:f5:c0:e1:2b:11:f0:ca:88:7c:c8:13:25:85:08:f2:ab:be:
a7:e6:dd:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rkbG1ZD32UD8OloNR00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWQ1ZTVkYmJhMWVhYjZkMzk1OGU1OTQxODI5YzlkYTFi
MmM2N2YwHhcNMjYwNzIzMjIwMDQwWhcNMjYwNzI0MjIwMDQwWjAzMTEwLwYDVQQD
Eyg1ODBlODE3MDViMmYxZWNlMjEzM2NmZWRjMmMyNTFlNDJiNmNkZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjGhDxDu0BQUHxggeW7HC/D8NcwA
czamtbj2F6uv9fFe2NZ+jDYlF08X7DM1/I/vbP4g+noW4APLClNAOYGCOSfH8PSQ
LOm7CAUyv8i5pePQNRONMtYhqvK1pWycL3xCmTzDRXbHc/il5XIWtr0ebCUgB0x4
m0Kx3uhhI/zXWEUKnYIxlLO27Lg/WIQ9yykJ6mrlexlqq8i+FTGxJtpLa0tsiWhG
DbrYZwJMQFQrbVgVtM2BdheUJecNScvqxdLRVt7zW8Ue0ZnqwztmPWPLQo7knVoE
1u7tA5t+Lga/FL43TZqErwLJ0e+IzyuEZWpA/l7HVYE1ymAEa23SDpmiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgOgXBbLx7OITPP7cLCUeQrbN9DMB8GA1UdIwQY
MBaAFPTtXl27oeq205WOWUGCnJ2hssZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQt
ZGIxYTZiYmNiYjcyLzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQtZGIxYTZiYmNiYjcy
LzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRMUIcxg
M44iYT73n5Y3ofco0stQMLjLUK1vET8kNWIWBAmSAJeSQzpdVXVcLomdTm9j52BU
+Nh9gEKkzo/pfDeaPeHpk2nsSBrlUqIkRVpzD6uH/UW8+X3GIckmAk0wHJUF2RSF
Y0CVOu2ht1/1BWGr2MB8tBDgZzVzIbJehXaHiMhkBC5iLEE4vR2lIJicD81acgVn
DJld1cC2Kk91oCqvVZQJbOq1WJYX+MP3XazOXNhtGddb1+H6/dakLQ/RU7BBtxob
PhQ3v1oIt5cvCTEqomrewOC5/DwQz+y/onEyzPr+7yr2ZBaBifXA4SsR8MqIfMgT
JYUI8qu+p+bd/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:56 2026 by rpki-client