Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: xZ8qHXZT+r/yc4Szs9BtPE/lkVPR8m2uDbLnbC0FeRM=
Subject key identifier: 9F:5D:EE:63:3C:F5:1A:D8:3B:3B:EC:75:C1:A5:3F:2A:68:3F:47:F3
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019F91358AF55E3B8D474D8F7D3226F8F5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 23:00:32 +0000
Manifest this update: Thu 23 Jul 2026 23:00:32 +0000
Manifest next update: Fri 24 Jul 2026 23:00:32 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: n70v4yvQ0eLyPYlQm6uI/V2Kj9SJSCu6dnFy/Z4hq74=)
2: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
3: R-jquJ8tPgdX2hMBpuIObNqROCE.asa (hash: /pp7yPdgOzqXU/03x41XGhPjeuP0jNCBbcWtApFlL0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:8a:f5:5e:3b:8d:47:4d:8f:7d:32:26:f8:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jul 23 23:00:32 2026 GMT
Not After : Jul 24 23:00:32 2026 GMT
Subject: CN=9f5dee633cf51ad83b3bec75c1a53f2a683f47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:bb:85:87:42:e8:32:d7:93:c2:e9:98:69:
b3:78:07:c6:94:1b:c1:a8:86:30:71:97:43:b4:e6:
21:0d:4d:4e:98:f6:ca:96:65:04:0c:9c:d2:44:18:
53:4d:ac:8f:c6:df:ae:2f:49:25:b5:e6:27:61:22:
9f:56:e1:4b:6f:27:7c:4e:d7:4b:10:63:3d:6f:76:
97:49:09:68:3b:4a:16:20:cb:8e:2f:b0:80:73:d7:
d0:23:27:28:e0:06:6e:5e:88:36:de:b5:82:3c:9b:
56:da:4e:db:3a:36:1f:4c:cb:d4:1e:1b:1a:a0:6c:
4b:94:d9:eb:79:0c:78:99:11:40:09:72:92:ba:6e:
8d:cb:2f:29:4d:72:3f:2b:a1:8c:be:05:2f:81:6f:
d2:3e:92:ff:b6:ab:2a:80:34:93:27:85:53:70:8f:
5e:94:0f:72:84:80:e3:40:43:5b:17:eb:8c:a9:ce:
80:2e:61:d8:43:6d:a8:33:56:60:db:bb:a2:35:5f:
e5:b2:c0:b8:cf:ba:d7:77:58:d7:1b:61:71:25:03:
a0:f6:f2:12:0e:97:0a:1f:88:e6:31:9c:01:19:62:
76:97:c7:d4:a2:4d:00:a3:53:3b:7c:be:fd:76:6e:
3d:ac:4e:2d:54:6e:6c:c9:7c:34:e1:62:fa:b8:a5:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:EE:63:3C:F5:1A:D8:3B:3B:EC:75:C1:A5:3F:2A:68:3F:47:F3
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:58:6c:a8:b0:d8:30:9f:4f:dc:f2:d2:55:9c:5e:e7:33:
08:92:a5:00:01:bc:2c:a8:8d:88:c6:8c:f6:88:00:6a:be:23:
6e:97:e8:be:39:88:0e:17:9e:59:8f:78:1a:a6:e8:dd:e2:22:
cc:9a:40:5a:4d:b9:d3:a5:c5:5b:e8:ac:ad:da:75:9d:9f:ad:
e5:c6:9d:49:77:42:a6:33:5c:47:5f:41:82:10:13:11:d8:07:
22:bd:7c:79:14:cf:46:ee:e1:5e:c0:65:24:f8:5c:d9:94:bd:
cc:9c:51:ba:37:4b:59:35:1a:6d:89:a2:a1:33:d2:ad:96:4a:
56:c2:70:b4:9a:45:5b:5e:10:bc:ac:15:77:47:a3:66:a0:69:
58:a9:3b:d6:90:ae:50:08:35:2d:a2:e5:70:7b:ce:7b:6e:ae:
07:27:f9:80:16:cd:82:cd:13:64:3d:c9:b2:33:1b:f4:02:e9:
f5:4e:0a:a0:5d:e1:03:0a:5a:d2:8a:96:86:26:48:ed:56:8d:
76:66:bd:ad:6d:73:54:64:a1:96:c2:48:f8:16:90:17:3d:0f:
d0:0c:b2:83:b7:7a:47:93:50:6d:d5:8c:ec:15:bf:21:76:dd:
7b:01:72:0c:a7:d5:91:e3:6d:11:06:d4:b9:3c:1b:59:a7:22:
30:71:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:43 2026 by rpki-client