Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: ncCZCayLdtpE4iUk7cn48r5XtXYKRoenKRrRLJ+8Wog=
Subject key identifier: 6B:8E:3F:39:42:08:40:48:8D:4C:35:6B:BE:21:F8:D4:83:BE:59:E5
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 019F92B63473494A535A8635110BD25FE4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0AE7
Signing time: Fri 24 Jul 2026 06:00:41 +0000
Manifest this update: Fri 24 Jul 2026 06:00:41 +0000
Manifest next update: Sat 25 Jul 2026 06:00:41 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: BfKA96cRaT1SIGZJJRGXcYUmobOV9+WkNVeQSotlW2M=)
2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:34:73:49:4a:53:5a:86:35:11:0b:d2:5f:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Jul 24 06:00:41 2026 GMT
Not After : Jul 25 06:00:41 2026 GMT
Subject: CN=6b8e3f39420840488d4c356bbe21f8d483be59e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:7a:d9:3b:32:e0:6e:8c:7b:9b:a3:4d:bb:
e8:45:88:db:8d:6f:9a:9a:d2:2c:15:3a:41:51:c6:
66:10:65:8d:4b:ee:72:f7:39:ef:04:75:c0:30:81:
d7:2b:18:27:f6:a0:04:6f:13:82:47:de:68:44:2f:
18:30:e1:0c:14:68:eb:98:0b:15:9c:99:81:32:dd:
25:44:cd:a6:27:bf:fb:f2:f1:3f:a1:47:81:b2:41:
c5:5e:06:85:76:32:78:24:59:7e:9f:5b:e9:de:21:
bf:07:62:9e:de:95:72:eb:03:bd:22:0a:dc:a5:cc:
44:58:cd:b7:77:60:38:fd:9e:9b:bf:43:85:37:a8:
84:3b:26:10:b5:3f:ad:91:bb:22:e2:f8:88:94:40:
f1:e2:99:ea:16:d8:f6:96:ea:b0:f4:26:63:1b:0b:
9f:9f:87:8e:b3:15:f3:d9:61:04:27:c0:61:8e:82:
b5:93:36:75:5d:92:7e:db:c5:6e:c9:78:eb:e4:78:
ac:0c:ae:55:d9:af:80:82:97:34:aa:cd:7c:61:54:
6c:09:58:77:e4:08:f1:ce:e4:1e:53:0d:12:96:a7:
71:7e:f6:80:4a:cd:45:bf:e9:d4:57:3e:10:23:a6:
3c:95:3d:5f:5f:99:42:53:35:d8:36:e5:a8:e4:7d:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:3F:39:42:08:40:48:8D:4C:35:6B:BE:21:F8:D4:83:BE:59:E5
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0a:03:94:35:bb:bf:da:01:50:e6:65:c7:89:cc:2b:8b:2a:
90:72:ca:93:4d:2f:98:2b:1f:2c:02:08:45:7d:a7:c7:c2:0d:
75:0c:6b:20:6e:76:9c:78:12:8a:b5:e1:89:f9:24:0a:f6:51:
a4:23:29:76:5d:41:df:f5:33:8e:ad:a7:62:00:d7:b7:cc:15:
e9:ba:55:e5:43:83:78:c7:aa:71:c1:83:ff:83:1c:bb:5c:45:
4e:bc:fa:4c:40:2d:18:a1:6c:2f:85:cb:91:4f:ab:6d:7b:e7:
0c:a4:7a:a9:4f:2c:f8:c4:98:ee:91:43:99:f6:50:56:d6:0f:
9c:92:df:91:d5:57:1c:e6:ba:ee:cb:c2:9c:6e:df:d8:6a:0f:
f7:c5:13:d3:bf:5a:17:a9:ca:ea:9e:93:86:27:a2:af:6d:df:
b1:21:59:76:b3:61:7b:6a:d5:41:5e:40:ef:8d:61:65:b8:7e:
06:3b:9c:c4:3d:fa:92:69:db:5c:9a:87:c3:5c:9a:4f:06:28:
13:c6:53:a3:79:9b:c5:e2:60:ec:d9:f6:07:c8:a4:2a:0c:11:
ff:90:16:72:43:69:fe:c4:59:1e:65:9e:82:10:77:53:17:fd:
26:97:bf:2c:69:3b:e4:2c:3d:86:75:54:5b:cc:e1:3c:ad:9e:
47:bb:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:48 2026 by rpki-client