Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: CB0Dez+yFlOTdBVaIOSQu69qX6kmwuGX9x4oM4NpSB8=
Subject key identifier: 6D:3C:BD:FC:09:4A:C0:C9:5B:B1:34:CD:9B:FA:8D:A5:BB:53:07:07
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 019F916D2D285E6405402F92A7B2C2D5BA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 19C2
Signing time: Fri 24 Jul 2026 00:01:18 +0000
Manifest this update: Fri 24 Jul 2026 00:01:18 +0000
Manifest next update: Sat 25 Jul 2026 00:01:18 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: z+UQpmx1aDKJ4mXTiTJ4lDt63lc450+K9jnzxMATGVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:2d:28:5e:64:05:40:2f:92:a7:b2:c2:d5:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Jul 24 00:01:18 2026 GMT
Not After : Jul 25 00:01:18 2026 GMT
Subject: CN=6d3cbdfc094ac0c95bb134cd9bfa8da5bb530707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:17:f1:42:c9:c0:cf:f4:4b:9c:99:4e:d8:
48:5f:43:6c:48:53:9d:22:7b:44:b0:75:f2:f4:24:
be:a1:1a:a6:ba:af:3d:1a:ed:cc:9f:7b:b4:45:c3:
33:1a:66:d2:93:c0:32:e6:fd:d8:39:69:ef:bc:f7:
ed:59:09:92:17:db:cb:41:67:e6:ed:37:16:fc:c5:
cb:57:87:58:c3:71:5d:6b:cb:f6:28:39:58:ca:cd:
7b:87:69:6a:3e:a2:18:66:4e:01:0c:48:a9:ba:de:
08:9b:70:db:3c:bf:0e:d7:94:b7:1b:f4:5d:60:d8:
00:46:04:2e:b9:f5:b3:73:29:ba:2b:f8:e7:5e:db:
93:bb:f6:3d:e7:9f:04:3b:75:3e:4a:6c:66:6a:dc:
b0:b4:4f:78:fc:01:1b:eb:50:01:9e:0e:ee:2d:3f:
68:56:88:3c:ba:9e:7c:ec:d7:90:05:de:1b:32:c7:
db:3e:8e:51:65:45:43:0f:4d:bd:a5:28:c1:26:8c:
86:00:e8:e3:11:80:3b:e2:7c:fd:62:5a:8d:83:80:
53:75:74:d3:a9:3b:df:cb:40:13:a7:13:aa:e3:db:
ae:f2:0e:f9:7c:d0:af:41:0b:02:81:e0:d2:68:26:
46:48:89:06:55:6e:ec:ff:47:c9:72:cf:01:06:a7:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:BD:FC:09:4A:C0:C9:5B:B1:34:CD:9B:FA:8D:A5:BB:53:07:07
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:f0:5a:ba:4d:6e:d2:ef:3a:b6:3f:19:33:f0:97:9b:9f:
b2:90:f0:c3:4f:b9:85:6e:fa:f0:82:e2:6a:1a:26:e9:c6:d8:
f9:9e:8c:c6:63:86:2b:3d:4f:10:62:1e:05:4e:f3:f9:5d:bc:
cf:d8:2a:42:4d:dd:a5:75:aa:3a:17:e2:9b:46:b6:6d:0d:c9:
d5:ad:27:10:60:e4:99:f7:e7:49:a4:4a:bf:00:c0:c8:18:c1:
9f:5e:f7:5e:ee:ec:3d:27:be:11:cc:86:9c:65:b1:35:ce:59:
6e:2e:d3:49:67:90:2c:cb:eb:54:37:b5:67:d4:db:b3:a7:0c:
47:ce:af:fd:2c:7d:c7:5a:c8:b3:5f:f8:a6:ee:73:55:b5:cb:
8d:7e:20:6e:4a:74:18:42:27:1a:69:11:10:30:2b:0b:08:24:
cc:b2:1d:34:ef:6a:d6:c5:06:a2:d7:62:91:0a:55:72:53:0a:
4f:92:7a:ac:61:00:c7:7f:b6:75:6c:f8:73:22:83:4d:e6:1a:
7e:1f:1c:fe:c8:b6:f0:6f:77:bd:a8:44:7c:65:b4:70:67:7c:
4d:5d:0e:ae:3a:88:eb:6f:91:2e:4e:c4:bd:b9:3d:ce:32:c9:
f9:9c:30:69:14:f1:36:73:1f:d7:31:89:42:3f:70:02:3c:52:
74:4e:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:56 2026 by rpki-client