Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: lUM6mR3O//2kpdgpn2I8M8RY8mA2esxTEMcGNQVNfok=
Subject key identifier: FA:0F:34:7B:63:EF:8F:99:22:49:FF:65:FF:CD:D4:4D:96:42:5A:D2
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019F8EA24D751D9AF7203E31151D68C80EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 024B
Signing time: Thu 23 Jul 2026 11:00:29 +0000
Manifest this update: Thu 23 Jul 2026 11:00:29 +0000
Manifest next update: Fri 24 Jul 2026 11:00:29 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: J6bMdURZCPQ1JpSHj1XtRBPtTYu22BRO8Q256a1m/qY=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:4d:75:1d:9a:f7:20:3e:31:15:1d:68:c8:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Jul 23 11:00:29 2026 GMT
Not After : Jul 24 11:00:29 2026 GMT
Subject: CN=fa0f347b63ef8f992249ff65ffcdd44d96425ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:26:fd:b9:61:ec:c9:96:ed:f6:2e:03:86:
f5:58:54:61:14:2e:64:92:50:47:93:1a:14:2b:3f:
f8:c2:32:8d:8f:39:54:67:bd:77:71:8b:af:c5:4f:
13:4b:92:66:66:13:2d:51:fb:92:19:c7:9f:6d:c4:
1d:ab:0b:d6:c0:76:a9:90:eb:16:79:63:50:a0:5c:
66:f0:4f:5b:18:07:f3:d0:85:9c:6f:19:2e:f7:1b:
a0:c2:8f:b2:60:17:7e:22:d7:9f:1d:b8:b5:ab:d0:
fe:77:2a:57:bf:e7:2a:27:38:d5:e5:f8:7f:7e:5b:
70:ed:3c:64:2b:90:e0:9d:13:e3:08:02:51:86:4b:
2f:74:9a:57:5d:86:b3:61:64:0a:1f:83:99:34:a3:
e1:ca:14:e7:7e:17:aa:29:ac:93:e7:6c:ac:e7:8a:
e6:e7:af:17:a1:20:04:dc:3d:04:4e:ef:83:ff:84:
53:80:19:ee:9b:b2:39:8d:7f:4b:6c:8c:0c:fe:1d:
a2:41:45:d1:e3:15:e9:46:24:28:3e:31:f5:0c:88:
21:1e:e9:1d:80:98:71:22:a1:ef:e6:20:26:54:56:
e3:42:c2:8b:d3:7f:b0:89:8e:55:60:b3:f6:46:bf:
f0:98:aa:49:18:be:44:b7:62:68:4a:6a:66:80:a6:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:34:7B:63:EF:8F:99:22:49:FF:65:FF:CD:D4:4D:96:42:5A:D2
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:40:9e:17:48:62:06:9c:17:81:f4:4e:f3:fe:5d:6d:a5:57:
04:25:fd:d1:cf:72:16:4d:37:5b:c8:8d:c7:bc:d8:13:e8:2d:
54:8a:03:85:f6:47:ab:18:b4:5f:dc:cf:c3:98:6d:64:52:21:
dc:c4:a0:9f:72:b5:0f:de:2b:4c:63:7f:f7:af:31:64:93:a8:
de:a9:1d:b1:62:91:b5:0e:bf:e6:63:73:c0:76:b8:e7:2b:a7:
01:a4:0b:b4:69:70:e9:3b:b8:29:c8:d7:55:ce:1a:bf:1f:b1:
ae:1e:18:51:80:96:4d:46:63:1f:81:d6:34:82:30:4e:33:bf:
69:51:61:19:0f:f5:88:5c:9d:46:26:11:c0:12:a6:f8:b3:6f:
0a:9c:ac:70:49:29:5e:fb:35:30:a2:fe:6c:d8:32:f7:dc:75:
a3:a7:db:86:14:8f:4f:4b:bb:af:df:4c:dd:88:7f:25:1b:7d:
1d:ba:b8:d9:e1:d7:9f:d3:51:c7:71:7f:bb:37:ed:0f:5a:3a:
b6:b8:db:5e:a0:e5:98:45:5a:f7:9a:62:e9:89:dc:e1:39:52:
d3:ee:63:f4:af:ff:72:84:b6:29:a4:fd:ee:01:ba:ed:91:cd:
ee:af:e9:12:58:d4:ec:ee:e9:6c:5b:87:90:3e:6b:89:51:ed:
70:35:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:57 2026 by rpki-client