Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: pLAKdEs/7ifB+XFcroc5xZ99S/S5WxiYzU97A+uDmT4=
Subject key identifier: AA:E3:31:8E:25:0C:DE:BA:61:06:16:52:52:39:1A:51:52:80:D0:ED
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 019F90FE6FCD3B99FD7B819784BD522B6921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1654
Signing time: Thu 23 Jul 2026 22:00:21 +0000
Manifest this update: Thu 23 Jul 2026 22:00:21 +0000
Manifest next update: Fri 24 Jul 2026 22:00:21 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: 5mTOM2p/uKL1SDNuN7HyAtioQ/0R8nm5+4Nijng5D8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:6f:cd:3b:99:fd:7b:81:97:84:bd:52:2b:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Jul 23 22:00:21 2026 GMT
Not After : Jul 24 22:00:21 2026 GMT
Subject: CN=aae3318e250cdeba6106165252391a515280d0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:08:6a:2f:aa:a0:a0:52:45:ae:2f:f3:5d:
58:e9:63:78:3a:68:ef:9c:7f:89:ed:09:61:80:43:
8f:ec:9d:bf:5a:97:e7:73:7c:6b:3f:0f:19:f5:be:
e1:84:56:65:b2:c7:f0:31:57:79:4e:c8:a1:c0:bc:
a3:75:a5:93:1f:b7:12:57:5f:39:e6:3e:09:8d:fb:
7d:da:63:fe:02:3f:82:f6:bb:ae:5d:fc:84:a8:85:
72:97:b0:55:f8:a3:66:29:d3:c7:f4:bd:da:02:b2:
22:09:5e:7f:9d:54:2a:bf:9e:6a:fd:65:7f:1a:70:
a9:76:52:32:19:9d:8d:b8:ca:92:7b:bb:93:99:57:
18:e2:37:07:8e:74:a1:d7:bb:45:93:3e:31:8b:a2:
c7:0d:f9:28:73:b6:b1:2f:5a:c6:eb:58:1c:45:6c:
6c:8a:45:64:c7:da:d1:b7:46:d3:71:0c:ef:8b:a8:
4c:cc:da:86:00:3e:c2:b4:63:8f:c8:07:d3:2c:f3:
0b:ee:bb:a3:a2:df:0c:7a:db:76:a4:ea:8c:aa:6b:
8b:83:50:76:7a:58:08:e8:61:ba:59:02:eb:1c:ca:
17:b8:19:dd:e6:f0:5a:ae:b0:72:d4:45:ff:01:6c:
3f:7d:af:3c:cb:1d:e4:78:03:88:c9:73:d6:bf:a5:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:31:8E:25:0C:DE:BA:61:06:16:52:52:39:1A:51:52:80:D0:ED
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ee:9b:e0:b4:31:6f:e4:86:d9:bf:9c:05:43:2f:d3:ef:14:
22:7a:c0:63:bc:5a:54:da:7a:e6:52:2f:ef:a2:3c:f4:d3:fe:
20:a4:87:29:a1:65:a9:ed:b2:e5:a8:e5:58:81:99:f2:96:7a:
a4:6a:9c:4a:04:8c:2d:da:72:ba:19:5e:5a:60:b7:25:cd:c4:
a2:5c:0e:ba:ad:95:8d:11:66:e2:b3:89:a3:8c:0c:3e:fc:5c:
eb:54:3d:0f:8c:75:9d:e8:48:30:20:1e:fd:e3:ed:0e:55:77:
6e:06:d6:db:41:57:e9:66:12:d7:71:77:8a:6a:c7:ce:b7:82:
6d:b3:68:76:09:6c:87:83:54:b5:19:e2:38:1f:f4:77:eb:9c:
0b:8d:d1:a9:b5:74:7e:bd:63:3a:b9:78:64:44:47:6e:c6:8f:
f3:ee:47:67:cd:06:b4:dd:ae:43:2e:fd:a1:e7:76:91:05:cd:
d4:ce:55:71:71:a2:1d:01:e6:95:21:33:76:87:b2:f7:91:03:
07:ba:e0:65:3a:7b:a2:8b:2c:0d:2b:ab:fe:dd:22:9a:68:7c:
c5:11:89:10:06:57:ff:0b:6d:1d:0d:46:69:2a:f4:92:7a:f5:
52:18:49:c8:61:c4:f3:06:a4:60:66:5c:12:87:f8:09:bb:d5:
7a:0f:24:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/m/NO5n9e4GXhL1SK2khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjYwNzIzMjIwMDIxWhcNMjYwNzI0MjIwMDIxWjAzMTEwLwYDVQQD
EyhhYWUzMzE4ZTI1MGNkZWJhNjEwNjE2NTI1MjM5MWE1MTUyODBkMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx8Iai+qoKBSRa4v811Y6WN4Omjv
nH+J7QlhgEOP7J2/Wpfnc3xrPw8Z9b7hhFZlssfwMVd5TsihwLyjdaWTH7cSV185
5j4Jjft92mP+Aj+C9ruuXfyEqIVyl7BV+KNmKdPH9L3aArIiCV5/nVQqv55q/WV/
GnCpdlIyGZ2NuMqSe7uTmVcY4jcHjnSh17tFkz4xi6LHDfkoc7axL1rG61gcRWxs
ikVkx9rRt0bTcQzvi6hMzNqGAD7CtGOPyAfTLPML7rujot8Mett2pOqMqmuLg1B2
elgI6GG6WQLrHMoXuBnd5vBarrBy1EX/AWw/fa88yx3keAOIyXPWv6UWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrjMY4lDN66YQYWUlI5GlFSgNDtMB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou6b4LQx
b+SG2b+cBUMv0+8UInrAY7xaVNp65lIv76I89NP+IKSHKaFlqe2y5ajlWIGZ8pZ6
pGqcSgSMLdpyuhleWmC3Jc3EolwOuq2VjRFm4rOJo4wMPvxc61Q9D4x1nehIMCAe
/ePtDlV3bgbW20FX6WYS13F3imrHzreCbbNodglsh4NUtRniOB/0d+ucC43RqbV0
fr1jOrl4ZERHbsaP8+5HZ80GtN2uQy79oed2kQXN1M5VcXGiHQHmlSEzdoey95ED
B7rgZTp7oossDSur/t0immh8xRGJEAZX/wttHQ1GaSr0knr1UhhJyGHE8wakYGZc
Eof4CbvVeg8k0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:20 2026 by rpki-client