Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: sz4AzOwbRYsfYvIsOuHVsHffaHajZoLipjG5xoOQwvA=
Subject key identifier: 5A:A2:FB:DC:56:63:F0:E2:2F:F8:EF:20:78:BC:F0:C0:81:DA:61:C5
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019F91DA26EC5B508694E300214E09866688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 10E2
Signing time: Fri 24 Jul 2026 02:00:20 +0000
Manifest this update: Fri 24 Jul 2026 02:00:20 +0000
Manifest next update: Sat 25 Jul 2026 02:00:20 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: oqwFE5k2qbVgI7WpKitoSS0M8JghrLuBm6hnwiTr5hY=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:26:ec:5b:50:86:94:e3:00:21:4e:09:86:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jul 24 02:00:20 2026 GMT
Not After : Jul 25 02:00:20 2026 GMT
Subject: CN=5aa2fbdc5663f0e22ff8ef2078bcf0c081da61c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:2d:ad:7b:e5:01:48:a0:bb:8d:ff:b7:d7:
e3:3d:0b:6c:85:36:58:3d:be:90:37:a8:70:8e:9f:
9e:f5:7c:55:39:0e:47:86:ef:da:c6:6e:1d:e7:07:
c6:12:8e:a9:0d:b9:48:5a:b4:05:f3:fb:85:e7:a9:
06:e0:5a:b0:83:a3:5c:31:24:2f:d1:44:b0:3a:2f:
ea:ef:56:c8:51:91:a7:20:6c:4f:5d:8d:40:0b:9c:
62:2c:7a:35:bc:b1:33:63:ca:8b:90:b2:2f:b1:65:
84:d1:d8:06:e4:b2:90:26:fb:7b:bc:d2:66:0e:8c:
f6:c1:72:5f:99:3d:51:33:c8:2e:ab:cf:7b:fb:e6:
60:b7:81:ac:4b:8b:81:32:cb:d7:f4:ee:46:fc:6e:
ab:ec:4b:ce:3d:26:f4:a1:f3:be:d8:30:88:c6:1e:
1b:a2:fa:8f:24:60:d8:7e:e6:8f:88:a0:d0:c6:9f:
9e:19:72:da:1e:6d:ae:28:ef:a3:e3:23:ac:4d:fc:
f6:6a:06:8b:ba:f0:f8:19:38:38:f7:8b:ba:ce:ad:
bc:e2:37:63:0d:c7:2a:58:78:04:df:04:fd:78:8b:
cc:2b:5a:a0:55:74:4d:60:52:66:fd:7a:ae:79:29:
33:41:54:3d:4f:2b:85:87:67:c4:5a:a7:96:ba:76:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:FB:DC:56:63:F0:E2:2F:F8:EF:20:78:BC:F0:C0:81:DA:61:C5
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:5d:4c:f7:31:6d:53:64:ef:b1:01:aa:40:fe:cc:38:b1:
28:b7:fe:db:bb:95:dd:50:67:e7:58:0b:18:29:46:fb:62:a2:
19:fd:fa:a5:12:ae:4c:a7:0b:56:4d:fa:65:4f:76:43:ba:f2:
2f:c8:e6:52:eb:58:38:b8:75:9c:a8:a0:38:26:81:ca:e1:64:
45:22:34:a2:c7:87:1e:ec:ba:58:f4:54:2b:4f:3b:ec:a7:32:
ed:36:65:68:51:9c:ab:a1:3e:60:ac:4c:7a:70:fb:a8:73:3b:
87:03:f8:df:42:30:34:64:99:84:15:53:86:ff:36:c8:be:27:
3e:39:91:da:ce:79:98:f0:de:5f:10:1b:77:6a:a4:1d:fe:8b:
78:41:0d:b5:49:21:23:96:25:a6:5f:a3:99:ba:cc:ad:ab:89:
9d:77:8c:f7:14:8e:fb:17:f1:b9:09:03:09:03:1d:2c:b4:86:
60:4b:16:3b:d1:53:03:d4:06:df:fa:aa:02:67:ff:38:b1:ec:
b8:9e:da:8b:7c:4a:7b:a6:8c:6a:63:4a:3f:5b:03:b0:b2:55:
3c:70:0b:e0:82:95:c9:0a:a5:9d:91:f1:74:00:9d:d8:e1:70:
d0:c3:ef:4f:92:7b:16:ca:28:ed:10:ce:a7:d6:e7:0c:e7:92:
a9:e7:68:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2ibsW1CGlOMAIU4JhmaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjYwNzI0MDIwMDIwWhcNMjYwNzI1MDIwMDIwWjAzMTEwLwYDVQQD
Eyg1YWEyZmJkYzU2NjNmMGUyMmZmOGVmMjA3OGJjZjBjMDgxZGE2MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ4trXvlAUigu43/t9fjPQtshTZY
Pb6QN6hwjp+e9XxVOQ5Hhu/axm4d5wfGEo6pDblIWrQF8/uF56kG4Fqwg6NcMSQv
0USwOi/q71bIUZGnIGxPXY1AC5xiLHo1vLEzY8qLkLIvsWWE0dgG5LKQJvt7vNJm
Doz2wXJfmT1RM8guq897++Zgt4GsS4uBMsvX9O5G/G6r7EvOPSb0ofO+2DCIxh4b
ovqPJGDYfuaPiKDQxp+eGXLaHm2uKO+j4yOsTfz2agaLuvD4GTg494u6zq284jdj
DccqWHgE3wT9eIvMK1qgVXRNYFJm/XqueSkzQVQ9TyuFh2fEWqeWunb8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqi+9xWY/DiL/jvIHi88MCB2mHFMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeNdTPcx
bVNk77EBqkD+zDixKLf+27uV3VBn51gLGClG+2KiGf36pRKuTKcLVk36ZU92Q7ry
L8jmUutYOLh1nKigOCaByuFkRSI0oseHHuy6WPRUK0877Kcy7TZlaFGcq6E+YKxM
enD7qHM7hwP430IwNGSZhBVThv82yL4nPjmR2s55mPDeXxAbd2qkHf6LeEENtUkh
I5Ylpl+jmbrMrauJnXeM9xSO+xfxuQkDCQMdLLSGYEsWO9FTA9QG3/qqAmf/OLHs
uJ7ai3xKe6aMamNKP1sDsLJVPHAL4IKVyQqlnZHxdACd2OFw0MPvT5J7Fsoo7RDO
p9bnDOeSqedo3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:39 2026 by rpki-client