Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: Es0b3vK61L0d60bMQ4ozA913DRh2icPyZ7zK7Qnun1o=
Subject key identifier: 0D:A5:26:71:D1:36:0D:8E:07:83:9C:35:CD:FD:19:23:10:77:3A:C3
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 019F9022F7A55EE979F66830E09BBFFB4F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0947
Signing time: Thu 23 Jul 2026 18:00:38 +0000
Manifest this update: Thu 23 Jul 2026 18:00:38 +0000
Manifest next update: Fri 24 Jul 2026 18:00:38 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: aiL7s7OaQZk+NaC5vgGwIAh1SGDHidJcP+um5dklbpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f7:a5:5e:e9:79:f6:68:30:e0:9b:bf:fb:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Jul 23 18:00:38 2026 GMT
Not After : Jul 24 18:00:38 2026 GMT
Subject: CN=0da52671d1360d8e07839c35cdfd192310773ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:50:4b:9b:9d:29:2e:cb:b5:78:24:33:db:
70:fe:3c:f9:60:3e:76:7b:9b:89:18:67:78:09:94:
07:31:14:3e:76:b4:70:75:fe:ac:75:db:59:62:73:
87:4a:5f:b1:4e:9f:ce:03:00:a7:64:01:a3:cb:fb:
89:72:a9:33:35:4c:a1:b8:5a:c9:d4:5a:70:b5:e2:
f3:76:3e:ea:40:55:5e:0c:a7:78:a9:3d:eb:02:70:
01:e1:9c:c8:0e:10:16:c6:79:7d:4b:78:32:c6:11:
37:0e:be:1b:c6:25:d1:8b:d4:27:69:18:6d:8e:e7:
87:c3:27:ae:7d:03:85:11:d2:ed:d1:30:95:e1:35:
04:00:f0:0b:67:7e:e2:8c:dd:96:8d:8a:51:02:59:
b4:25:4d:27:5b:f9:c4:cb:46:c4:b3:90:d4:2b:87:
fb:41:ea:2f:17:cf:c5:9d:3c:73:1f:87:25:f1:78:
67:47:07:d8:74:3d:c1:25:07:cd:fe:df:cd:19:23:
5a:22:87:98:96:09:16:28:92:ec:17:49:83:81:26:
96:cc:c4:11:17:e4:46:2f:d6:bc:59:dc:73:99:85:
51:6d:46:ee:b3:ef:ea:1a:7b:75:45:dd:d9:c3:ae:
fe:67:38:5f:9a:e6:5c:5b:78:20:5d:24:73:7e:e4:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:26:71:D1:36:0D:8E:07:83:9C:35:CD:FD:19:23:10:77:3A:C3
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:ac:e5:21:87:3b:91:5f:95:93:33:e7:1d:79:af:38:5f:
8f:53:88:b7:aa:6c:6b:a6:fb:44:18:1a:89:ce:27:93:0f:06:
5f:81:43:a3:d9:0d:76:00:c1:97:e9:f3:a9:39:88:3e:50:c4:
68:f4:81:75:05:80:a5:cf:13:f6:7c:e0:cf:d7:50:c8:51:ec:
32:7c:58:3c:ad:51:8b:8b:c6:8f:8f:cb:5a:5f:a6:a2:7c:22:
79:64:ee:2d:a5:d7:fa:f0:9b:a4:bb:7d:91:6e:34:c0:b9:ec:
3e:5a:e6:71:0b:2a:ba:7b:f4:79:87:78:d3:1f:b6:16:07:e4:
7d:fe:48:2b:93:09:84:f9:98:8a:9c:d5:f9:24:29:64:c9:6f:
4e:a0:d7:0d:96:48:6a:56:6c:45:d2:f5:6f:4d:95:3c:cf:62:
55:58:0b:fb:55:75:22:0e:71:57:be:84:68:a4:7b:2e:75:b9:
43:a2:ed:5c:31:6e:67:ba:31:49:b7:37:a7:90:41:b3:f1:83:
79:d3:6c:ee:e5:a4:20:5b:6a:47:41:38:72:83:b3:ed:24:d4:
3e:64:2c:84:80:36:3a:9c:cc:92:9d:8f:5c:50:00:34:a1:0f:
b0:fc:1f:18:c9:7e:35:f7:b3:6d:1a:78:70:a1:77:ad:ac:55:
a3:57:ce:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:03 2026 by rpki-client