Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: mgvV+Bb6DvKJHxe1ICj+wjPgrTD3ZGtnbqV51z2WFcc=
Subject key identifier: 90:97:E9:E3:39:3A:72:75:F3:43:6F:EF:B7:93:F1:55:C0:9A:A1:CA
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019F9436A629FD37A3CC53CD71D233CD6633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:37 +0000
Manifest this update: Fri 24 Jul 2026 13:00:37 +0000
Manifest next update: Sat 25 Jul 2026 13:00:37 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 1BkXgl+OYzktB99/hf5AXuWK6X5QKdEDear1QGYAGzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:a6:29:fd:37:a3:cc:53:cd:71:d2:33:cd:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jul 24 13:00:37 2026 GMT
Not After : Jul 25 13:00:37 2026 GMT
Subject: CN=9097e9e3393a7275f3436fefb793f155c09aa1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:a0:5e:95:ba:12:03:95:86:a4:ca:ff:b4:
de:2e:b3:d6:dc:91:6d:98:23:5d:90:6c:52:c3:5f:
47:05:be:34:7f:69:75:e6:6d:6e:27:b7:91:4f:3d:
dd:c2:fb:4e:1f:b3:3c:c2:b7:b9:c0:4b:76:6b:1f:
6c:0d:c1:bb:ad:cc:db:34:68:34:a3:12:0b:b2:2c:
0e:b8:5a:0c:62:5f:65:13:6a:5e:e4:23:b0:2d:07:
88:a4:0e:53:ad:dd:1c:81:6a:06:5e:6d:64:9f:f5:
6d:f0:96:c1:55:26:57:08:c0:98:2d:bb:7e:49:62:
b0:64:06:af:83:eb:be:ce:07:1c:c7:2a:db:4e:3d:
16:e7:5d:73:b3:f4:5b:6d:77:44:09:2b:61:d5:1b:
1b:80:65:8a:b9:71:55:68:49:25:75:12:ca:82:94:
f8:c1:d4:44:a1:d4:7c:98:a4:7e:27:ec:a8:61:00:
b4:7c:97:f2:ff:4e:39:38:79:be:d3:c9:2d:23:43:
49:63:42:db:e5:2f:d1:87:a6:7d:d4:8e:28:01:d4:
82:0a:f1:96:13:2b:41:1a:39:26:a2:ad:a2:07:0d:
90:ff:f2:e9:8e:8d:15:da:05:00:7a:2e:81:f3:b5:
5d:d7:c6:51:33:3e:65:a5:8f:b0:09:18:b0:87:c4:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:E9:E3:39:3A:72:75:F3:43:6F:EF:B7:93:F1:55:C0:9A:A1:CA
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5d:09:bc:6f:e0:d0:8a:04:b7:f9:6f:10:ba:be:66:8d:02:
a9:76:ee:02:ac:0e:5c:05:90:40:6e:11:8c:41:f9:89:34:14:
54:13:4b:f6:c1:3f:1b:cb:04:e4:0b:33:e3:64:71:bc:b6:e6:
0d:90:9d:60:6e:10:76:9e:0e:6f:5a:1f:3f:a0:8f:de:18:7d:
34:20:10:2f:77:ff:ee:67:82:ec:6e:9e:2b:d3:b3:89:ce:b7:
1f:bb:2e:b8:00:35:4f:64:ad:25:71:5a:49:19:54:99:3e:9d:
32:db:0e:78:da:fb:d7:53:fb:43:1a:0f:00:98:f0:46:27:2a:
0c:11:63:91:78:fc:49:78:8d:80:d6:34:0c:8d:64:e4:2f:5d:
b2:5c:7b:ff:75:25:2b:d9:e1:b9:37:71:f1:28:bd:87:c3:0f:
cb:4c:7b:95:c3:5d:d1:a3:16:97:bc:29:73:f1:4e:27:86:ac:
67:76:43:73:9f:6e:a9:75:bd:6a:aa:5f:ae:ee:82:ba:f5:a1:
8f:33:21:6c:6b:62:ab:8b:87:ed:eb:5f:51:11:a1:29:d0:af:
d4:47:3b:9c:a2:d2:94:8a:d1:48:59:55:f4:fb:56:f4:75:5d:
a2:1b:ed:43:a7:c6:fd:48:bc:5a:1d:2c:05:23:95:64:81:93:
f0:8d:d8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNqYp/TejzFPNcdIzzWYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw
Y2I2YTQwHhcNMjYwNzI0MTMwMDM3WhcNMjYwNzI1MTMwMDM3WjAzMTEwLwYDVQQD
Eyg5MDk3ZTllMzM5M2E3Mjc1ZjM0MzZmZWZiNzkzZjE1NWMwOWFhMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtygXpW6EgOVhqTK/7TeLrPW3JFt
mCNdkGxSw19HBb40f2l15m1uJ7eRTz3dwvtOH7M8wre5wEt2ax9sDcG7rczbNGg0
oxILsiwOuFoMYl9lE2pe5COwLQeIpA5Trd0cgWoGXm1kn/Vt8JbBVSZXCMCYLbt+
SWKwZAavg+u+zgccxyrbTj0W511zs/RbbXdECSth1RsbgGWKuXFVaEkldRLKgpT4
wdREodR8mKR+J+yoYQC0fJfy/045OHm+08ktI0NJY0Lb5S/Rh6Z91I4oAdSCCvGW
EytBGjkmoq2iBw2Q//Lpjo0V2gUAei6B87Vd18ZRMz5lpY+wCRiwh8Qa1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCX6eM5OnJ180Nv77eT8VXAmqHKMB8GA1UdIwQY
MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt
MmQ3ZmQwZmIyMmNlLzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl
LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkV0JvG/g
0IoEt/lvELq+Zo0CqXbuAqwOXAWQQG4RjEH5iTQUVBNL9sE/G8sE5Asz42RxvLbm
DZCdYG4Qdp4Ob1ofP6CP3hh9NCAQL3f/7meC7G6eK9Ozic63H7suuAA1T2StJXFa
SRlUmT6dMtsOeNr711P7QxoPAJjwRicqDBFjkXj8SXiNgNY0DI1k5C9dslx7/3Ul
K9nhuTdx8Si9h8MPy0x7lcNd0aMWl7wpc/FOJ4asZ3ZDc59uqXW9aqpfru6CuvWh
jzMhbGtiq4uH7etfURGhKdCv1Ec7nKLSlIrRSFlV9PtW9HVdohvtQ6fG/Ui8Wh0s
BSOVZIGT8I3YUw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:54 2026 by rpki-client