Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: L9yH6/6dr9xoHP2tVYy3S2ZIF59Hv2C4iPQuvITf4Gc=
Subject key identifier: EA:36:4C:69:33:D6:5D:3F:B4:B2:44:74:74:83:9D:EF:FA:E1:2C:54
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019F97A5C9FBBEB2C568A6D2DB860706FA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 097F
Signing time: Sat 25 Jul 2026 05:00:52 +0000
Manifest this update: Sat 25 Jul 2026 05:00:52 +0000
Manifest next update: Sun 26 Jul 2026 05:00:52 +0000
Files and hashes: 1: AfKCe3eoQWEy1uxfoPuR6eANwYY.roa (hash: 91ThPj8ugGh8/5I3Q1tQOs17cu6H9LI8ziMSoHRM8QQ=)
2: VDZj_D0mJdmuFpACF6pwxY8L5ps.roa (hash: SB8GonjijdreEO57BgHYG/lJRJLCZOlEr7Hgg460VeY=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: bS67dF/tpVv5HwRpI1Irg8hpnPaX27Fl9/oKl9MrC0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a5:c9:fb:be:b2:c5:68:a6:d2:db:86:07:06:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jul 25 05:00:52 2026 GMT
Not After : Jul 26 05:00:52 2026 GMT
Subject: CN=ea364c6933d65d3fb4b2447474839deffae12c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:0b:42:0a:2f:c3:27:ff:11:57:06:f1:30:
29:e2:93:48:e0:5f:b3:f0:38:ab:15:a9:cd:85:f4:
01:05:65:fa:6f:4f:af:c3:48:04:95:94:be:24:39:
4e:68:6c:11:bb:c8:2b:9c:6f:ae:30:0c:f7:fb:53:
7a:bb:79:44:9f:76:0b:0c:ad:cd:f9:c0:ad:a8:be:
09:3c:89:24:c8:88:aa:8d:c2:57:e2:13:7c:70:4b:
b5:93:f1:5d:01:d4:d5:0f:0b:9d:ab:9f:b7:0d:be:
e4:67:54:57:dc:51:10:80:87:61:ef:f2:41:06:d2:
dc:43:6b:88:54:c0:0b:74:01:9a:e4:51:c6:8f:1f:
c6:b4:4c:35:a8:e1:f5:12:cd:84:0c:85:d3:45:d1:
11:df:44:61:27:44:22:b7:f9:4b:82:23:0a:5d:19:
03:1e:73:11:57:80:dc:e1:a5:51:12:c5:95:07:7e:
50:94:53:bc:2f:8e:f3:38:0a:ef:28:1d:ba:3b:5e:
8c:f2:c3:23:02:02:cc:38:7d:72:90:cb:e0:bb:28:
e4:54:ff:5c:1d:2a:10:a4:3b:8c:50:83:1b:fd:f6:
2b:76:ca:b7:42:eb:71:27:07:aa:04:c1:64:ad:9e:
a4:09:12:eb:f0:68:95:e6:b0:f7:40:db:14:ee:c5:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:4C:69:33:D6:5D:3F:B4:B2:44:74:74:83:9D:EF:FA:E1:2C:54
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6d:9e:b5:f6:c3:db:b6:de:c0:8f:88:03:e0:c0:b2:e9:1a:
d1:4f:f0:97:d3:5d:40:9e:21:d8:ad:f0:e2:2b:0c:1b:78:55:
1e:26:01:5a:c9:8f:89:48:ad:33:68:60:d9:93:e3:9c:f0:e7:
7d:05:86:ec:25:03:ab:db:4a:46:3c:8c:51:ef:91:d1:fb:e9:
66:b4:91:6d:c7:5a:98:f9:36:49:9b:90:44:ce:9e:6a:c8:2a:
11:b4:5b:0a:ad:80:c2:37:28:20:da:d5:7e:1d:73:24:a0:cf:
52:a1:84:ad:a0:8f:b6:bc:f8:e9:49:42:f0:b5:9d:16:b1:0f:
12:69:7c:1a:a7:19:0e:63:a7:e7:26:82:a1:3b:1d:12:21:63:
ad:8d:a8:d0:26:5d:5d:f9:44:59:b6:47:2b:61:3d:fb:ae:c9:
42:a8:b7:b5:f7:41:8e:af:4d:9e:e5:99:a8:e3:91:f4:b1:95:
40:ca:e3:3b:2c:7d:8a:ec:1d:9b:1b:c3:6b:2a:c2:a7:e0:b6:
b1:f7:94:a0:4d:2b:53:b6:c7:a6:95:d3:5d:cf:9e:1f:f7:63:
78:84:ba:b9:7a:6f:0b:92:98:3f:8f:73:64:61:55:b3:66:20:
b4:30:08:f7:5c:48:62:62:05:61:c7:c7:9d:76:c9:09:32:9a:
24:aa:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 09:19:11 2026 by rpki-client