Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: cGwQ/ZBFkX5RL8U0WiAmUa1GB7o2eG1zOEgPkDR/znw=
Subject key identifier: 37:74:22:28:BD:C4:EE:7A:66:96:94:EF:71:37:CD:E4:D2:63:9C:3C
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 019F9323CD3DB32DB9B54A2075953FAF8F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 1654
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: 1-lOgfXr6z3ulgJm--XvyqYFnCkw.roa (hash: gyUyEbA+sluFWgU9QeypDRe8X2zOXF1Cp4BuVH8B2Is=)
2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: AjkiXSMORXHcpfMjgNgUxt5l7gQ36t8gbp1NBN4BPpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cd:3d:b3:2d:b9:b5:4a:20:75:95:3f:af:8f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=37742228bdc4ee7a669694ef7137cde4d2639c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:db:fe:c1:1b:5e:5c:55:b4:23:7a:4f:73:
91:1b:e3:0e:d7:d9:d6:54:37:9a:e5:24:6c:cb:f3:
48:6a:b1:b9:75:8e:fa:95:45:b2:85:8f:b0:38:a5:
7d:93:fe:09:fa:84:8c:4f:fc:bc:8c:6a:97:fb:86:
d0:29:e8:c4:4a:14:34:17:1f:70:ec:c4:e4:e6:80:
f9:a8:c0:ad:10:4d:62:cb:c5:0f:7a:1e:78:82:fd:
8a:54:81:ce:e4:91:42:51:ad:56:c5:9f:4a:b7:76:
49:9d:b9:21:3d:db:06:e6:62:f3:30:49:fd:c0:34:
b7:7d:56:c7:19:ce:23:27:a4:59:e8:6f:e8:95:91:
19:09:ae:11:67:6b:7c:e2:e0:c0:e1:96:e6:fe:e4:
b2:dd:1e:39:b0:7f:97:3a:74:65:a0:36:fd:36:a9:
a3:e7:bf:9a:99:dd:0d:e4:68:d5:e3:af:d1:12:87:
9f:88:69:12:ea:b6:9c:d6:e1:7e:e7:d1:6b:5c:37:
23:2e:f3:a0:f9:76:86:16:a0:d3:fa:ce:4a:44:9d:
e0:93:c2:43:5c:39:0d:75:86:b4:53:1e:01:60:20:
25:70:a5:a2:1f:92:41:41:29:e1:7c:66:df:09:5f:
8c:67:e6:9a:79:ee:9e:95:b5:3c:b6:48:42:c9:f8:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:22:28:BD:C4:EE:7A:66:96:94:EF:71:37:CD:E4:D2:63:9C:3C
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:49:43:74:0a:c2:63:d0:38:2b:45:fe:7f:86:f1:23:43:
c9:6a:86:5b:c8:64:47:e6:d7:83:75:23:3a:3d:9d:e2:51:b4:
50:6b:65:80:4d:fc:3d:03:19:07:fd:89:02:df:65:cb:bb:22:
8c:67:12:59:29:d1:5b:f1:f2:f2:9b:e4:2d:0d:dc:59:b6:48:
1e:2c:e9:35:b4:3c:36:7b:a1:5d:0e:6a:54:29:5b:1a:cd:39:
04:17:74:61:25:0d:e5:cf:be:9c:01:47:e8:94:6f:9d:91:6e:
2e:e8:2c:c7:4e:b7:bc:ee:ec:21:de:6f:82:27:a7:e5:ed:81:
ba:9d:e7:f7:2d:ae:78:f6:c4:d5:25:d4:aa:9f:25:0d:3a:22:
42:b1:96:d1:c2:6a:0d:6c:cf:92:85:80:56:50:32:92:03:2a:
1e:90:1a:0e:7f:4a:41:04:5b:fa:b6:b0:34:ec:60:af:ae:72:
e6:f1:69:0f:ce:aa:eb:6a:5a:31:cb:fa:7d:b2:13:28:5c:1e:
8d:15:c9:7f:9d:13:2b:7a:5d:0f:47:3c:a8:2e:78:f5:fc:aa:
d8:f7:ff:32:c8:a4:cb:10:88:91:35:1f:41:62:ce:95:e9:4a:
54:35:ea:fa:8c:e4:82:c8:a2:82:8d:da:80:17:48:b0:bc:a1:
4b:28:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:03 2026 by rpki-client