Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: 20KeMllvRBkG2GbD0LcdYevIoK7GyO0zqZr+U8v6os4=
Subject key identifier: DC:7E:60:2A:68:DD:6F:15:8A:D4:21:A2:1A:1B:52:39:2C:EF:8F:DD
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019F90C805C95DBFFF5066594F7F9144AA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0E97
Signing time: Thu 23 Jul 2026 21:00:55 +0000
Manifest this update: Thu 23 Jul 2026 21:00:55 +0000
Manifest next update: Fri 24 Jul 2026 21:00:55 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: kGxEIePKj0uiAe1UBNgqRR1iMPi7yQTseW5E6O6BeXk=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:05:c9:5d:bf:ff:50:66:59:4f:7f:91:44:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jul 23 21:00:55 2026 GMT
Not After : Jul 24 21:00:55 2026 GMT
Subject: CN=dc7e602a68dd6f158ad421a21a1b52392cef8fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:fe:a7:b2:4e:bb:a3:bc:6d:b9:ea:a6:de:
82:7a:35:39:1f:cb:49:d8:8b:cd:2a:9e:6c:eb:87:
8c:f1:08:94:d5:a2:b5:8f:13:f2:fd:34:4c:79:5f:
27:6b:2d:b7:a2:b4:02:34:53:3f:32:12:71:64:a5:
3f:00:7d:e1:84:a9:59:85:f1:70:82:15:74:82:61:
39:b7:96:d6:3e:93:47:99:7d:b2:36:73:ab:03:ff:
bb:21:5d:c6:04:7e:1d:45:a1:57:fb:a3:21:9c:20:
bf:7e:65:1b:98:9f:31:93:05:75:c5:9b:1d:d6:53:
c7:e7:33:b4:c2:c4:f5:8c:02:db:a0:29:d0:18:d2:
13:47:2f:ec:84:c8:af:d8:fe:e6:3c:67:fd:ac:d3:
69:55:3c:90:4e:7b:f7:9d:4c:4e:d1:8c:a3:3f:fa:
7b:4f:71:7d:7e:fb:b0:50:6e:c8:8a:07:84:bb:b3:
3e:a0:ca:49:3a:18:10:99:96:85:fb:56:7f:23:f0:
80:ff:62:31:8e:3f:5c:3b:a5:5c:13:8f:06:d8:ee:
78:a8:c3:a1:11:98:3b:f0:86:31:20:81:d9:19:4e:
c9:a7:1b:0d:c7:c4:a2:a4:1f:29:cd:af:22:05:ed:
69:df:a4:7d:be:a8:71:7e:b9:96:5a:0d:50:6c:ec:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:60:2A:68:DD:6F:15:8A:D4:21:A2:1A:1B:52:39:2C:EF:8F:DD
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4b:16:e9:bf:90:2d:b8:97:53:e3:f1:bc:b7:72:c8:31:db:
f2:1a:b5:88:f7:77:90:c4:0d:cb:db:31:d3:23:fc:2f:1b:73:
d7:13:1f:37:a6:2a:31:e7:3e:f2:87:ea:b1:3d:1c:ae:69:71:
98:85:6e:a1:51:a5:65:07:ff:03:74:c8:3d:e5:a2:18:8e:20:
a4:fc:7c:64:70:bd:17:ad:3b:ae:04:1d:34:19:9f:6a:03:00:
ed:30:f0:fe:81:66:9e:85:a0:a7:e0:2e:7a:3f:1b:f8:34:96:
13:a1:2c:8d:5e:42:67:f9:e3:fb:ae:01:cc:03:ec:1f:12:1c:
59:1f:9d:e5:5a:1a:d9:66:84:bf:94:d8:95:e7:f3:b0:4d:d5:
d5:49:34:39:e6:d9:6f:ce:48:57:11:c2:c3:14:d4:0f:71:7e:
98:d3:f7:e5:9c:df:9b:da:c6:4e:6f:21:d9:b6:79:67:e7:14:
29:b0:36:1d:ae:90:fe:2c:a8:f0:0a:58:ba:18:9e:09:fb:ce:
63:36:74:63:ca:4e:b4:f6:dd:b5:1e:93:1b:d8:f7:b5:ad:74:
9b:79:8a:84:c9:ff:60:d6:12:dd:38:de:fa:bc:c0:37:d4:74:
b9:b9:93:af:f6:a6:12:c1:7a:1b:d4:bf:8c:be:5b:d1:30:22:
fe:c2:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:09 2026 by rpki-client