Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: dSU96D/gd5oQnj5ApHoGIZ1DLSk8MoZ87WShtq+J7A0=
Subject key identifier: 0F:58:0E:6B:70:02:5A:9F:32:58:67:19:3F:D8:CA:F8:B0:24:35:AB
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 019F935BF83F0EF7B1B23ADE165CC40E3156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 1226
Signing time: Fri 24 Jul 2026 09:01:45 +0000
Manifest this update: Fri 24 Jul 2026 09:01:45 +0000
Manifest next update: Sat 25 Jul 2026 09:01:45 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: qQWp9A8BC+5lJ6m9LdKIxxeRDnCIlXepU/fKTr0O0nQ=)
2: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (hash: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f8:3f:0e:f7:b1:b2:3a:de:16:5c:c4:0e:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Jul 24 09:01:45 2026 GMT
Not After : Jul 25 09:01:45 2026 GMT
Subject: CN=0f580e6b70025a9f325867193fd8caf8b02435ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:1b:c7:5b:0a:bf:28:02:a3:56:c9:eb:43:
d7:5a:7f:f6:59:91:b2:33:5c:9c:9a:05:a9:81:ec:
e6:be:3d:6d:94:3e:fc:40:9f:cc:04:05:77:2c:fe:
28:90:e0:89:e6:af:4c:72:13:77:e2:4e:a7:02:94:
91:b9:3a:e3:cb:8b:6f:28:0b:7b:9e:51:de:23:2b:
c8:e5:00:d6:ab:14:43:91:d8:bd:ea:c5:0b:96:b2:
cb:6a:2f:c2:bb:43:a1:6f:e1:3a:37:cb:b8:50:44:
e3:fe:41:1e:f8:fa:26:2e:b5:6b:5b:9b:d4:96:2d:
95:47:44:b2:9c:64:56:ac:ba:e2:44:0b:3f:a9:e2:
01:3e:d6:aa:26:44:89:43:b4:ab:af:2c:ec:22:aa:
6c:9e:c5:07:9e:43:6e:9f:6e:d5:79:e0:80:e2:a3:
0d:a5:b7:06:ed:d1:63:49:b5:ea:d5:1d:3b:94:2d:
1b:cf:12:20:5e:cf:49:9f:54:a2:cb:92:38:57:a0:
b2:4e:a8:7a:6a:ca:66:64:d5:c1:a6:e2:85:fc:f5:
50:f0:e6:e1:59:78:b6:5a:91:91:58:11:75:64:c4:
5e:50:7c:f7:11:c0:d8:4c:7f:22:8c:68:3e:9a:e2:
f9:3c:e7:d5:ad:f1:a8:fb:0e:e4:86:63:b1:eb:26:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:0E:6B:70:02:5A:9F:32:58:67:19:3F:D8:CA:F8:B0:24:35:AB
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:4f:2b:89:47:40:95:f2:33:43:87:ca:2a:bc:e5:35:80:
58:85:8a:8b:9c:a7:e7:92:fd:38:39:db:10:34:60:a0:19:d1:
d7:bc:52:a5:10:42:70:4c:5a:e9:1b:7d:0f:5d:dc:ca:a4:f9:
1f:9a:9f:09:ff:f1:74:48:29:ad:d6:12:87:40:64:ce:38:f0:
68:17:8f:14:6c:a7:11:ae:48:ba:b5:5f:3e:f5:b5:ce:77:55:
33:69:50:fb:41:03:be:11:be:ec:65:99:31:2e:f2:f5:df:51:
64:11:45:62:80:ba:b4:2b:ad:42:47:f0:45:5d:49:0f:8c:d8:
71:b5:d5:2c:f4:44:2e:5f:d6:7d:91:62:2d:15:5a:fd:0e:24:
cf:91:80:10:c9:31:53:e7:79:e9:36:f8:b1:73:bc:5e:ba:66:
c6:fb:d6:35:79:f4:e7:89:cf:ff:28:78:c8:0d:12:f4:0f:84:
0a:86:f5:1c:55:18:83:56:55:69:3b:57:23:4b:62:8a:31:d3:
b5:c5:df:70:87:52:86:c4:dc:0b:16:99:36:06:44:81:fc:f0:
4d:63:0b:3f:7c:1d:78:59:8e:10:5d:de:40:98:65:40:a0:9b:
4d:02:b6:72:ce:48:f8:92:3e:a1:e7:ac:90:69:3e:30:b8:69:
c3:3d:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:18 2026 by rpki-client