Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: Yo9fOiz69TaafRnDXBAj8AO3vVzOvZPIGp2xYoSAAN4=
Subject key identifier: 62:92:CE:5D:0E:F0:51:6C:10:A2:CB:1F:3B:A3:C4:50:8A:E3:1A:32
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019F94A4376BA67226FB13AC01F2D1D44D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 192E
Signing time: Fri 24 Jul 2026 15:00:17 +0000
Manifest this update: Fri 24 Jul 2026 15:00:17 +0000
Manifest next update: Sat 25 Jul 2026 15:00:17 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: tkDBRvDVnWU0w80XXdl0OM/6BxVYYo/QVfVE8M0ghpE=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:37:6b:a6:72:26:fb:13:ac:01:f2:d1:d4:4d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jul 24 15:00:17 2026 GMT
Not After : Jul 25 15:00:17 2026 GMT
Subject: CN=6292ce5d0ef0516c10a2cb1f3ba3c4508ae31a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:6b:26:0c:ae:f8:04:50:41:9f:38:44:29:
17:b6:b6:d8:1a:ed:3c:91:5b:97:2a:97:97:65:c0:
dc:7c:66:e3:f9:ad:44:3a:68:c3:c9:45:cf:6b:85:
5a:d1:88:14:17:d9:14:53:cb:5c:f6:6e:a5:07:62:
7f:8a:1b:4b:3f:49:89:a5:54:79:76:42:c9:56:2e:
b2:9d:f0:db:78:96:9f:55:7f:61:85:b4:7d:33:97:
cb:ee:c8:bf:b1:5e:1b:48:8f:05:61:45:a6:11:25:
2e:34:d1:b6:53:72:df:88:95:63:05:07:9c:26:2b:
95:5f:5f:89:34:81:74:03:e5:13:3c:9c:02:6b:d0:
a9:8e:dd:20:d2:fc:97:3e:6e:52:8d:1d:68:42:e0:
76:08:c2:30:af:a5:88:d4:af:19:a1:5f:eb:8c:7b:
a5:3a:29:5a:1e:1f:78:ab:34:fb:08:cc:39:42:d6:
3f:13:83:01:a6:65:23:25:8e:1f:16:b7:6f:4f:f8:
cc:9c:c9:0f:34:9c:b6:3c:b8:13:04:e7:8b:20:bf:
d7:25:7d:e5:cd:dd:43:98:2b:21:a6:6d:df:cb:31:
53:df:54:75:0d:fa:df:90:13:dc:c5:d7:7d:10:ad:
04:fa:7f:4f:24:d3:0a:0f:43:02:8f:10:1e:53:58:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:CE:5D:0E:F0:51:6C:10:A2:CB:1F:3B:A3:C4:50:8A:E3:1A:32
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:a4:fd:be:85:99:06:32:59:bd:d9:5a:2d:97:64:d1:33:
7b:ce:b7:2e:0c:f7:30:8b:2c:19:34:5f:3f:c4:67:a4:e2:04:
1f:a2:52:5f:4b:2d:f7:b2:2d:aa:77:78:70:9a:ac:e8:02:6a:
4d:b3:41:a9:73:41:d8:4e:30:4b:38:ac:36:cf:f6:23:4f:6a:
5f:b2:af:41:14:4f:06:26:01:1b:62:bf:95:fe:a3:c5:a2:dc:
a5:71:cb:e8:ac:ca:b4:c3:ec:2a:65:2b:d3:7a:b9:36:6e:27:
ec:f3:1d:a0:2d:08:6d:96:21:5c:b0:95:f7:b3:4c:64:ad:d7:
f6:b8:ea:73:7f:99:0c:1c:26:66:01:76:e5:48:a2:e9:44:7a:
c1:80:77:d3:29:c1:28:13:38:6d:2f:43:c2:54:15:45:a6:0e:
a4:98:95:92:05:0d:52:40:78:e5:f3:be:54:1d:2e:40:e1:48:
a1:cc:f4:c0:03:d4:20:65:9f:c0:0a:5a:7c:70:78:c6:66:82:
37:8b:ae:0d:ca:33:4f:cf:95:38:b7:7c:49:64:47:1c:0a:3f:
4e:be:cd:ab:45:88:ce:7a:6d:5d:2f:08:aa:a3:fc:de:83:3d:
09:72:dc:43:1f:91:78:42:46:7d:9f:1c:16:eb:a8:8f:98:72:
f0:bb:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:48 2026 by rpki-client