Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: Fm6wkM8KzQNPEs8Q1NSSxmr2TWPaUE4dpcDMz1flEpw=
Subject key identifier: 52:7D:9D:6F:CA:5D:BE:6D:81:31:56:AA:53:4E:5D:21:14:31:A1:4F
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019F92ED398929DB837811805597ED3B0164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 07:00:48 +0000
Manifest this update: Fri 24 Jul 2026 07:00:48 +0000
Manifest next update: Sat 25 Jul 2026 07:00:48 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: Wjveppa0Xti561bDuH7hQ1ysHgy/jFGNJ+SF/rMrgHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:39:89:29:db:83:78:11:80:55:97:ed:3b:01:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Jul 24 07:00:48 2026 GMT
Not After : Jul 25 07:00:48 2026 GMT
Subject: CN=527d9d6fca5dbe6d813156aa534e5d211431a14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:f2:5d:82:08:33:c5:47:5e:47:77:77:a4:
56:49:76:83:01:e3:36:14:4d:5e:c8:60:4c:99:ec:
cc:ea:66:39:22:bc:a0:e2:0a:30:dd:92:5f:a6:a0:
5c:fd:61:24:bf:22:5b:bb:73:42:0e:60:1e:f9:32:
90:a9:70:eb:86:7a:db:72:be:af:41:2f:39:e1:56:
0e:c5:70:67:a6:da:5c:13:a8:33:6e:8c:0b:83:e4:
91:1f:2c:26:96:93:b1:34:b3:4f:96:3f:52:7b:41:
4c:e1:cd:c3:33:24:8c:a7:e7:03:09:6f:0f:9d:b3:
61:fc:05:f4:08:96:5a:75:ae:dc:0c:ed:97:a2:28:
50:17:43:bf:dc:a8:10:e8:6a:69:86:a4:b9:e0:1a:
ac:ad:b0:de:ef:42:e4:97:fd:f9:7e:77:7d:0a:f8:
b0:5d:b0:95:20:32:34:ca:a1:d0:f9:df:5e:3a:7a:
db:2d:5d:2d:75:3c:7d:a2:8b:1f:27:62:31:f4:fb:
c1:15:67:7c:3c:6f:b1:93:f5:c2:5c:72:53:48:c0:
ad:57:3f:0e:60:46:36:b1:2a:c2:a7:13:1d:7e:69:
c1:60:b8:19:9d:f3:90:bc:d9:a9:37:1b:f4:3f:5e:
c2:d3:8a:c7:bd:fa:fa:2b:96:c2:08:3d:ac:8c:2c:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7D:9D:6F:CA:5D:BE:6D:81:31:56:AA:53:4E:5D:21:14:31:A1:4F
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:84:b4:10:2e:ca:e1:96:fe:92:d0:ec:41:a8:8e:81:c9:f7:
f5:fb:17:fb:29:4b:d3:a8:01:45:59:17:bd:a6:49:7d:34:91:
8e:eb:e4:bb:1e:69:8c:4b:a1:a7:84:8c:3a:c4:64:70:f7:62:
d2:89:2d:1c:c3:19:ed:0d:c6:ab:be:e4:d7:f3:21:81:7d:c1:
d1:61:75:8d:48:98:be:47:fd:78:f2:3c:46:c2:a3:80:e9:5b:
22:e0:57:5a:fe:5b:bb:fb:03:b2:cb:8c:d8:51:45:02:cd:b0:
a9:7b:02:b1:6e:5b:24:0e:56:6e:50:42:11:32:f7:7e:f0:99:
de:0b:b6:a5:16:d0:e5:94:79:f9:67:be:e8:f3:a0:a7:8c:fa:
cd:5c:98:ef:32:4a:8c:5e:c8:c9:a8:74:91:2c:d1:5f:9d:d2:
30:68:db:d6:6c:9a:09:e5:f3:f1:56:58:2c:0b:b2:64:f7:82:
32:b2:01:f0:ae:c2:8e:f8:8b:db:b1:b0:95:b1:cf:28:97:d5:
31:34:57:6a:d5:10:0c:f0:76:1c:b6:fd:10:4a:60:ae:4a:49:
fd:f1:28:cd:36:9d:83:7a:fe:fd:92:04:61:0d:1c:b3:9a:af:
6c:64:4b:ad:9f:71:e7:21:0f:d0:bc:ae:59:67:c6:75:aa:d9:
2f:a7:0a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7TmJKduDeBGAVZftOwFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjYwNzI0MDcwMDQ4WhcNMjYwNzI1MDcwMDQ4WjAzMTEwLwYDVQQD
Eyg1MjdkOWQ2ZmNhNWRiZTZkODEzMTU2YWE1MzRlNWQyMTE0MzFhMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNvyXYIIM8VHXkd3d6RWSXaDAeM2
FE1eyGBMmezM6mY5Iryg4gow3ZJfpqBc/WEkvyJbu3NCDmAe+TKQqXDrhnrbcr6v
QS854VYOxXBnptpcE6gzbowLg+SRHywmlpOxNLNPlj9Se0FM4c3DMySMp+cDCW8P
nbNh/AX0CJZada7cDO2XoihQF0O/3KgQ6GpphqS54BqsrbDe70Lkl/35fnd9Cviw
XbCVIDI0yqHQ+d9eOnrbLV0tdTx9oosfJ2Ix9PvBFWd8PG+xk/XCXHJTSMCtVz8O
YEY2sSrCpxMdfmnBYLgZnfOQvNmpNxv0P17C04rHvfr6K5bCCD2sjCwc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ9nW/KXb5tgTFWqlNOXSEUMaFPMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYS0EC7K
4Zb+ktDsQaiOgcn39fsX+ylL06gBRVkXvaZJfTSRjuvkux5pjEuhp4SMOsRkcPdi
0oktHMMZ7Q3Gq77k1/MhgX3B0WF1jUiYvkf9ePI8RsKjgOlbIuBXWv5bu/sDssuM
2FFFAs2wqXsCsW5bJA5WblBCETL3fvCZ3gu2pRbQ5ZR5+We+6POgp4z6zVyY7zJK
jF7Iyah0kSzRX53SMGjb1myaCeXz8VZYLAuyZPeCMrIB8K7CjviL27GwlbHPKJfV
MTRXatUQDPB2HLb9EEpgrkpJ/fEozTadg3r+/ZIEYQ0cs5qvbGRLrZ9x5yEP0Lyu
WWfGdarZL6cKzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:22 2026 by rpki-client