Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: 1DDvHBfxkIIOKoN1s0GDVI+pc/84Op9IiYFoBWf+qUI=
Subject key identifier: 3A:3E:72:22:1F:CC:FB:27:12:D2:C5:8A:11:EB:FA:28:15:A1:AC:F3
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 019F905A4D07D31E0B3B82C351CE00AAC6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 0A84
Signing time: Thu 23 Jul 2026 19:01:04 +0000
Manifest this update: Thu 23 Jul 2026 19:01:04 +0000
Manifest next update: Fri 24 Jul 2026 19:01:04 +0000
Files and hashes: 1: 6WscQ8tiDx9m3v4sx_CKg9wEEnE.roa (hash: QpRl5gulsjXB/beShhOtBcm8ekjd5kSr4bAzu9gdErs=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: 3FWU2Ejrn4xcsmknE1akL3u8khPN52kcvfcEPYahMGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:4d:07:d3:1e:0b:3b:82:c3:51:ce:00:aa:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Jul 23 19:01:04 2026 GMT
Not After : Jul 24 19:01:04 2026 GMT
Subject: CN=3a3e72221fccfb2712d2c58a11ebfa2815a1acf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:0d:1f:5d:cc:28:99:64:f2:c5:92:74:d6:
aa:f5:3c:f5:d0:0e:32:19:a9:72:91:bf:f7:69:cb:
3c:44:39:69:4d:d2:f8:61:cf:47:fc:7c:3c:42:56:
c1:1e:22:ee:74:ac:77:3a:e0:f6:4e:77:f0:5f:6c:
28:dd:4f:7b:cc:20:4d:c4:ef:75:c7:fa:c6:22:36:
99:29:81:bf:67:b1:af:f4:ab:45:9c:17:28:42:6b:
c5:c9:e3:6c:0e:31:60:09:5a:9c:78:6d:b3:71:98:
b8:7b:67:be:43:7f:89:dd:96:83:86:2d:b0:bd:4d:
e9:10:2e:7d:39:fd:ff:d8:83:b3:81:ae:94:65:f8:
9e:f9:d2:00:2b:0e:e7:65:16:9c:b7:ec:0f:85:3b:
d9:d9:62:ea:a2:7d:79:8d:35:94:9f:43:b1:49:9c:
c5:a6:30:f1:a1:2b:c4:3c:ee:3e:1e:c1:72:da:8a:
da:80:99:b6:b5:5e:0f:1d:9e:00:db:69:e2:c6:f8:
48:60:b2:75:72:33:0f:d6:dd:8c:0b:6d:15:b3:dc:
ac:41:67:e6:63:c8:42:46:27:f8:53:62:ca:c8:95:
d2:d9:a1:2c:73:c9:d6:07:c0:2b:23:99:4e:42:6d:
1e:42:23:db:58:90:e0:c9:26:03:88:8a:a9:1a:70:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:72:22:1F:CC:FB:27:12:D2:C5:8A:11:EB:FA:28:15:A1:AC:F3
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b2:92:4e:2c:08:8e:50:62:c6:94:98:69:19:7c:d7:66:aa:
4f:7b:0e:a5:b3:9a:8b:f5:d0:3b:c8:19:da:7f:74:9a:2d:f7:
f7:3d:31:d2:a7:53:04:b0:51:67:61:9d:99:ec:30:6c:bc:24:
34:da:46:c7:3d:cd:10:cd:95:35:b2:8a:00:db:ff:74:11:51:
34:49:5e:a4:ce:af:c2:41:26:8a:f2:23:2e:ab:8c:cd:03:94:
d5:0d:89:56:11:44:20:96:b2:bc:a2:c1:14:72:c9:b7:46:27:
60:19:78:79:fa:19:0a:98:7c:a9:34:5c:ea:40:0e:36:fc:be:
6a:49:5c:95:39:72:af:bd:3c:8b:ca:fa:11:4c:ad:7e:27:60:
fe:fe:9d:f6:37:a4:7d:bb:a4:6e:8c:70:d5:7d:af:ee:3b:40:
e3:3e:61:dc:74:a0:3a:94:21:f5:28:3b:ef:32:d9:f7:d0:41:
da:db:f4:15:c2:b4:cd:7d:c7:28:61:09:c3:7f:14:fa:98:a0:
06:8c:2f:61:42:bb:58:73:5e:ca:d9:d5:e8:94:3e:fb:6d:c1:
13:8c:bc:76:79:26:41:6e:5d:02:1e:9b:16:c6:f2:e6:bd:69:
bd:98:38:b3:79:e4:45:a5:d7:09:02:1f:ea:c6:3f:9f:81:55:
d9:16:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:51 2026 by rpki-client