Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: jMUnTkZholoklJ11lTO0xZVZWVY/yi5GFJXtybVuk7A=
Subject key identifier: 01:B7:20:5F:F3:06:B7:63:47:1C:8D:2B:0B:8C:A8:44:F5:2F:31:E8
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019F92EDCE40F3A8DAD1A7DAB0A71C436A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0E0C
Signing time: Fri 24 Jul 2026 07:01:26 +0000
Manifest this update: Fri 24 Jul 2026 07:01:26 +0000
Manifest next update: Sat 25 Jul 2026 07:01:26 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: z8agdsZ4ViI60SI7eEcv6SWDRX4PsysOzC0RfFmGACg=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ce:40:f3:a8:da:d1:a7:da:b0:a7:1c:43:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jul 24 07:01:26 2026 GMT
Not After : Jul 25 07:01:26 2026 GMT
Subject: CN=01b7205ff306b763471c8d2b0b8ca844f52f31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:0c:60:3f:9c:f1:6b:31:ee:29:cc:cd:46:
96:a9:f1:3a:92:00:58:78:7c:f5:40:d4:0e:42:db:
1d:f1:6c:f2:4e:d9:d9:fc:01:10:9d:ad:94:f4:2b:
1d:6c:96:1d:70:62:d7:20:e5:50:bd:15:c6:dd:ff:
57:64:74:6f:c7:b1:7a:e8:2c:98:9d:2b:18:fb:d9:
1d:96:63:02:18:09:a2:40:aa:76:69:27:b4:65:f5:
35:0d:19:9c:ff:6b:22:f5:34:3e:5e:f9:3e:85:e8:
b6:28:13:14:e9:45:35:6c:f5:a5:df:51:30:db:b4:
16:c9:b4:0f:3f:81:4c:c4:9e:cb:2f:67:41:bd:55:
2c:e7:a0:ce:37:8f:f6:bf:06:9f:ff:18:02:6a:cb:
96:36:b2:d6:e7:b3:22:75:82:84:49:46:5a:85:7a:
87:a9:eb:6e:0c:16:fb:ac:9e:58:9c:43:58:16:11:
e8:55:ad:7f:52:c5:ec:4d:35:9b:a1:b6:2b:24:9b:
40:12:fc:3b:37:d2:4a:18:6d:b2:f9:d2:5b:a5:7f:
1e:ef:48:cb:a2:a6:1a:cd:b1:32:26:a6:5f:3c:f4:
3d:38:45:59:9a:21:0e:f4:5d:be:b8:94:a5:46:18:
91:de:31:16:ed:a0:73:ec:1b:14:80:00:8c:10:da:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:20:5F:F3:06:B7:63:47:1C:8D:2B:0B:8C:A8:44:F5:2F:31:E8
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:f7:6f:a3:2e:93:8f:01:fd:c1:03:08:da:75:9f:04:c9:
0e:a5:7d:cc:28:f8:09:2f:9c:66:df:05:d4:86:07:4f:f3:62:
32:05:f9:19:82:06:0d:67:13:a6:22:33:9f:bd:a5:24:a8:3b:
f6:7e:41:2d:d4:7a:0d:cf:60:ad:6a:e9:b2:46:d0:6d:68:d2:
d1:75:7d:c6:fa:66:90:39:51:24:05:b4:d8:5e:7a:ba:76:ab:
17:c9:ed:a2:02:65:c0:a4:15:ca:cf:45:fb:08:7c:d3:77:f6:
0a:04:8c:bb:43:fe:b6:31:d9:b9:f5:24:74:48:a8:ae:9a:8a:
9b:d9:09:36:b3:af:e8:01:58:5c:c6:6b:41:6c:9d:ac:c3:d6:
89:93:f9:51:a2:ef:9a:b3:7f:b9:47:ca:87:42:27:c3:8d:89:
e1:c7:97:9c:07:a8:e3:ab:8a:c9:fb:2d:5f:cd:44:d8:5a:78:
ed:1b:a7:ef:46:86:54:f6:ca:a2:0d:b0:58:74:e0:14:e5:25:
3b:d7:60:08:ce:f1:b7:54:f6:91:7e:37:9f:d6:16:51:d4:95:
2c:fe:77:51:97:25:d8:9a:fc:bc:d2:fa:8c:74:6b:4d:33:c4:
2f:e7:73:6c:8d:bc:ea:c2:ff:07:e5:e0:d9:a2:55:ff:1f:34:
42:12:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:24 2026 by rpki-client