Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: niyzbig05nijUJETirp+CJSBbO2DQTm+1NMNHx4ZCsY=
Subject key identifier: B9:7A:B9:D1:9E:F2:94:D0:C1:7B:F8:55:2A:BD:D5:A0:86:97:D2:1D
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019F9022A2F8B6224108718AB569500D2C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 19FB
Signing time: Thu 23 Jul 2026 18:00:16 +0000
Manifest this update: Thu 23 Jul 2026 18:00:16 +0000
Manifest next update: Fri 24 Jul 2026 18:00:16 +0000
Files and hashes: 1: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
2: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: mjTeXpco6sTc6r67bG/dhchQw2J8zVWLUln2HTwNdUo=)
4: MQ1U78oWAmsdfBjipimRQxhaZUQ.roa (hash: tfXkEvSI0LPBTOF9HaPkhhqnpC/Uebo4bMhTqO5iftI=)
5: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
6: afKpLSzkRBXzV4BjT3BpJM7Spxc.roa (hash: j0zroS1QN9AcRS6ak5G4uapit2hUYLDInrxtzYQvIDc=)
7: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
8: kGPfhXxpreZtjaPga5IzFyy5BYc.roa (hash: i9y196dGRt0WCvB/nvKsvdx4WF+EKGdHmOuGX6kQ6qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:a2:f8:b6:22:41:08:71:8a:b5:69:50:0d:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jul 23 18:00:16 2026 GMT
Not After : Jul 24 18:00:16 2026 GMT
Subject: CN=b97ab9d19ef294d0c17bf8552abdd5a08697d21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:ff:02:78:8d:77:a4:24:da:07:11:f5:d1:
49:31:0f:b1:d7:45:8d:97:41:ff:6c:db:be:97:63:
ef:a0:6e:7c:d2:1a:6c:d2:b5:e7:1f:8d:aa:e0:15:
39:fc:36:b0:bd:d2:5c:b3:38:89:2c:01:a1:f5:6f:
5a:18:d9:f5:0d:15:49:26:7d:42:52:72:8f:9e:fe:
6b:5e:74:17:1e:44:2b:fa:f2:88:cd:80:c0:df:56:
f6:55:5d:7c:49:07:b3:7a:cc:60:d9:d1:d7:cc:76:
d4:f0:13:a5:68:86:27:d1:e2:f7:dd:d4:5f:a2:8a:
d0:c3:9e:7f:4f:e5:18:8f:18:8e:5e:f8:52:4c:30:
dd:d9:c2:5f:a4:50:af:97:ce:5b:0d:75:80:6f:b0:
36:ff:fa:7f:89:dc:a0:f8:5d:0e:90:a4:b6:0e:2b:
be:a7:b0:3b:63:d0:4d:1f:38:a1:f0:41:06:bf:5e:
a2:03:66:25:83:54:a3:42:f0:ce:12:b8:b5:5c:67:
99:67:d4:60:d7:df:35:6c:5e:c1:0f:36:e3:99:a1:
1a:28:65:b6:27:7e:2d:e0:7e:3f:1a:2b:ab:f1:66:
9d:d0:b3:0e:96:1d:29:34:60:ba:fa:4b:39:0a:29:
20:a8:a5:79:d7:4b:eb:ee:a5:8e:dd:fd:8a:e8:0b:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:B9:D1:9E:F2:94:D0:C1:7B:F8:55:2A:BD:D5:A0:86:97:D2:1D
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:95:1b:1e:2c:2e:df:dc:35:dc:4b:d8:d2:2d:81:b7:fe:8e:
49:c6:29:1b:93:1c:87:96:76:92:1a:8f:cb:31:dc:ae:79:d8:
96:c4:f5:6f:8e:50:0d:d1:9e:63:ae:a6:f8:59:40:70:7c:ac:
de:97:43:37:b7:04:77:88:72:3d:55:6d:2e:80:e7:3f:5c:9b:
39:81:e5:9d:86:a7:c7:19:bd:5c:70:20:ec:67:42:4e:f3:08:
50:4d:33:5d:31:3d:07:0b:ba:1a:a1:a0:06:cd:e7:6a:5a:f6:
12:28:0f:f8:a5:ed:73:34:5a:4b:72:d5:fc:72:28:c7:b2:d2:
3a:e6:aa:53:f1:4d:d9:74:bf:ed:13:94:e4:a2:75:49:d3:02:
f1:ca:d2:74:ca:83:c6:2c:60:48:76:24:5f:66:06:81:dd:c1:
c6:4b:0e:51:8a:4a:57:d0:5d:f7:d9:1f:32:a8:ba:8d:4a:90:
87:0b:ea:34:7a:ed:ca:18:67:17:7e:e5:53:e0:65:72:e3:c3:
a4:02:72:ad:e0:7b:91:fa:cf:47:50:8b:21:e4:4a:f4:aa:a5:
d5:20:6e:a3:8a:08:18:71:b8:07:fd:d3:32:e5:fe:05:f3:90:
05:22:c5:58:04:b8:89:e0:54:e0:d4:df:95:41:47:85:79:b4:
1c:f1:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:23 2026 by rpki-client