Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: j51Q2Jj7V1jEjFMAbWHspeUM+7MVscH1n/8896NIxbE=
Subject key identifier: 05:DF:5E:56:8E:EA:60:52:64:9D:39:67:C0:CA:5C:A6:B2:7D:0B:39
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 019F93241D9D7C01B0337B3FF0A390F45046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: IE6AIZcTC+43hrGhaqgiwFjF045cRx2DAFdx+DPAHCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1d:9d:7c:01:b0:33:7b:3f:f0:a3:90:f4:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=05df5e568eea6052649d3967c0ca5ca6b27d0b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:58:f5:fe:5c:9a:02:17:73:33:df:af:59:
d5:9c:af:3e:ad:5f:f5:56:d1:fd:d9:3b:05:6f:3f:
70:11:d7:5f:61:78:7c:01:ac:15:ef:6f:c6:c8:55:
66:5d:50:1e:20:b6:a7:7d:90:77:d9:8d:ef:f7:23:
59:cd:a7:38:e0:78:6e:8a:06:78:2d:a8:aa:5d:1e:
fa:d2:24:23:56:16:11:13:52:09:0c:fe:5e:5a:03:
4a:89:63:c8:83:62:a6:ac:e1:73:63:b3:80:1e:48:
d0:f6:9e:b8:1b:a6:1e:1a:7f:9e:03:30:4a:e6:9c:
e7:ba:5c:1c:ec:29:e6:92:96:fd:ca:41:07:d6:ca:
65:fa:3a:20:e3:27:39:82:c5:f7:48:c6:aa:e1:8e:
b8:af:17:90:b1:f8:7e:33:57:41:0c:5a:c5:2b:1f:
00:73:18:ef:78:02:31:96:80:36:75:5f:5d:9a:26:
7a:68:fe:3a:ce:04:4f:0e:88:20:c9:20:95:d3:26:
77:87:6b:60:e4:88:da:c4:38:f7:56:ed:08:60:88:
8c:aa:23:4d:78:a3:19:09:a0:bf:eb:98:be:49:6e:
2b:ae:fb:1d:b6:af:a1:77:58:62:d3:36:1d:b2:1d:
53:44:7f:a6:97:ce:12:18:9c:79:9a:fc:93:c1:b2:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:5E:56:8E:EA:60:52:64:9D:39:67:C0:CA:5C:A6:B2:7D:0B:39
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:d5:5f:29:15:b7:23:94:eb:82:91:5f:0f:c0:09:6f:81:
ca:0b:10:37:b9:f6:8f:3b:92:bd:8d:ba:4d:14:b7:9f:03:a2:
03:75:cc:bf:13:57:da:de:5c:80:1c:c2:c2:31:a0:5c:c8:e4:
66:2b:aa:ed:66:51:4a:aa:a1:0d:16:f2:a9:0b:f3:b0:51:c7:
85:58:76:c6:ad:20:33:71:14:4a:2d:10:36:bc:6c:b3:58:c9:
d5:c8:e2:00:99:3f:8d:00:3e:84:e2:51:84:93:ea:53:76:73:
27:af:74:97:bf:6e:7d:d1:68:ce:a3:51:50:05:ee:04:0e:96:
85:6a:d5:5c:ea:bf:bf:51:b2:87:bc:0d:98:65:61:d6:e9:06:
f0:50:0f:48:a1:19:dd:ae:1c:96:73:09:0e:75:1a:2e:5a:ec:
72:7a:18:d0:ec:f5:b9:25:9e:30:b9:6d:fe:ea:8e:02:01:a3:
77:9c:19:bd:c1:2e:9e:a3:9c:12:1a:a9:7c:1b:97:9a:8f:8e:
d4:0a:09:7d:5e:96:58:b0:cb:02:c8:35:4f:76:84:dc:0a:21:
a9:61:06:aa:67:9c:b5:a9:b8:0a:8b:9e:bd:cf:74:06:57:f0:
57:a3:d8:da:1b:04:bd:f5:71:ec:85:9d:7f:c7:54:aa:ac:9c:
69:f7:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:47 2026 by rpki-client