Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: hmhWNQ80A6hRWDuDrr2q3+Fhou6Kp0ACmBcqZ/fnILE=
Subject key identifier: 56:9A:74:20:F5:2D:F2:18:14:18:61:3B:C6:A6:5B:4B:B2:3F:CD:A6
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 019F916CFD9B05D2572BB73CE7837808FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 010D
Signing time: Fri 24 Jul 2026 00:01:06 +0000
Manifest this update: Fri 24 Jul 2026 00:01:06 +0000
Manifest next update: Sat 25 Jul 2026 00:01:06 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: Y3Cl1/JoPC6m6FfeLZgcpRXjIsO1JSNlwYRqv2ROqbQ=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:fd:9b:05:d2:57:2b:b7:3c:e7:83:78:08:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Jul 24 00:01:06 2026 GMT
Not After : Jul 25 00:01:06 2026 GMT
Subject: CN=569a7420f52df2181418613bc6a65b4bb23fcda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:a3:c6:8b:25:70:06:a9:8a:4a:f8:fd:b9:
df:0e:f4:1a:01:fa:21:ea:8f:0d:e1:5f:e3:3c:ca:
44:9a:b5:8e:07:b8:8b:63:ba:71:bd:80:83:f4:b4:
e0:c7:51:77:2e:70:51:61:54:a2:e0:74:d1:87:f1:
9b:68:c9:6a:d5:f6:02:4b:0f:2c:86:61:56:f8:56:
cf:17:71:f3:23:19:1f:18:2a:5c:91:46:bc:ae:4c:
de:54:33:71:51:b9:d1:77:31:92:a1:fb:b2:7b:08:
98:d7:12:b5:0f:9e:50:ec:70:88:dd:89:93:67:57:
e0:f4:7b:e7:7a:f8:b6:38:22:a2:ae:78:30:06:15:
fd:9a:a1:ce:8d:7f:ef:86:0e:87:c9:7e:33:b4:16:
ea:78:b4:3e:67:70:1e:c3:3d:4b:39:25:f9:48:0c:
68:da:ca:89:5f:88:f8:00:91:80:f7:4b:13:ec:d5:
76:ec:1d:7a:e9:2a:5c:0e:3b:81:24:d9:ba:43:54:
3e:61:71:36:bb:e8:71:5a:38:1b:12:8f:ae:aa:14:
52:5e:3d:31:e2:74:52:a6:12:38:74:98:f7:28:de:
33:ca:c6:8a:78:61:a0:ef:70:9e:69:28:82:bc:83:
39:4e:b1:b6:04:ca:68:39:f5:7d:a4:39:9b:31:c8:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:74:20:F5:2D:F2:18:14:18:61:3B:C6:A6:5B:4B:B2:3F:CD:A6
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:df:b9:b5:c6:28:89:01:e2:85:02:36:60:81:ba:ed:0f:3c:
b9:57:f0:8c:7e:06:eb:79:33:64:f3:93:05:0e:2d:41:42:ce:
aa:a6:6b:5a:41:ff:62:44:c0:30:38:16:ec:9e:60:e9:e1:f4:
f3:82:08:fa:2c:2b:36:e1:e6:71:fa:38:56:df:12:70:6d:19:
cc:32:e2:16:13:3a:3e:78:a2:a4:37:05:b3:6e:99:92:5a:36:
3a:f2:9c:37:6b:d7:41:be:4e:30:a5:a8:b6:2c:98:ef:10:54:
da:4d:88:26:8b:b3:17:27:d4:58:30:2e:cd:aa:ac:9c:03:f3:
ba:37:0a:6a:f5:4f:e8:ce:32:19:ca:13:c1:7e:69:e1:af:d2:
52:86:e0:cd:ef:92:27:b9:54:61:df:df:3f:79:25:c3:12:61:
a9:d0:e3:30:03:e0:56:cd:6d:f1:60:72:41:8d:ca:33:7c:26:
b5:4e:81:86:0c:8c:0e:45:e6:43:75:bb:71:ae:15:3a:bb:2e:
a9:cb:ad:c6:e9:40:cd:4c:3c:d6:2d:55:d0:7d:9a:a8:a6:13:
18:5f:f7:7f:d1:13:be:85:70:40:ec:28:e4:8d:73:89:f4:2f:
4c:e5:46:3f:62:66:22:6e:4b:a4:98:26:95:27:0b:d1:21:ce:
fe:b8:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:36 2026 by rpki-client