Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: j2EItxQHCoPFWL+Q8BjTosH66wp4cSTFrA9ATT7z31k=
Subject key identifier: AE:DA:84:82:BB:42:45:EA:D0:D6:F4:B4:F8:54:74:16:42:29:F1:87
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019F8FB56A70A02B899A6141BA0A8ECC35AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 10E4
Signing time: Thu 23 Jul 2026 16:00:58 +0000
Manifest this update: Thu 23 Jul 2026 16:00:58 +0000
Manifest next update: Fri 24 Jul 2026 16:00:58 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: KbfAYDKZsObwK05HMLwtCQvHvsJu3TL8PSq7TBI+3SQ=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:6a:70:a0:2b:89:9a:61:41:ba:0a:8e:cc:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jul 23 16:00:58 2026 GMT
Not After : Jul 24 16:00:58 2026 GMT
Subject: CN=aeda8482bb4245ead0d6f4b4f85474164229f187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:46:97:3a:0b:9d:8c:85:5a:05:48:cb:09:
2c:0c:5b:14:97:78:72:31:e2:19:bd:4b:75:cf:06:
2c:b1:80:1a:56:10:17:a6:f9:61:7c:21:94:aa:b3:
40:67:d4:93:3c:f3:3a:ea:6f:b3:55:9c:58:d4:8c:
d7:1a:76:b1:dd:9c:f7:2b:3e:7d:96:57:38:be:9d:
c3:14:ba:86:e2:96:46:23:e1:37:eb:6d:11:cb:5a:
66:f2:4b:47:a3:a0:34:54:78:03:a8:2e:28:10:f1:
91:5f:71:de:28:5d:bd:42:a9:5f:d6:ec:af:73:99:
2d:01:09:b0:f0:d1:4d:06:0d:4b:4c:fb:aa:34:14:
9a:66:43:a1:36:db:97:f9:37:3a:be:ba:5e:9f:7a:
03:e3:bf:77:74:fe:14:98:3a:29:24:a0:8f:f8:14:
00:71:d8:56:8b:f0:a3:af:9d:80:33:d9:bc:4f:f8:
cb:a8:77:bf:f1:9f:42:9d:6c:8c:79:ca:44:b3:b1:
dc:48:e2:45:d3:04:ed:8c:e8:2b:a4:69:03:fc:d9:
6a:78:af:f6:39:1f:61:36:2c:f5:ba:69:e3:9b:f8:
44:00:39:80:b9:31:b1:e9:64:0f:71:9a:b6:9f:b7:
36:64:11:07:45:4e:eb:ac:c4:5e:22:db:9c:4f:8d:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:84:82:BB:42:45:EA:D0:D6:F4:B4:F8:54:74:16:42:29:F1:87
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:39:4a:2a:e0:cf:6d:2a:2b:46:0f:fd:98:3e:33:c1:2b:
6f:f4:2f:11:60:51:c6:d5:6f:9b:d9:b4:71:9d:98:d0:8a:48:
38:46:a0:57:46:51:a2:ae:70:76:95:87:dd:8e:90:cb:a4:ee:
db:50:d2:73:15:c9:89:a6:19:1e:87:3b:32:ef:85:08:6b:a8:
29:b6:ea:ca:b8:40:f8:65:fa:89:c5:52:b6:af:77:aa:aa:e8:
8a:4e:77:f5:fc:99:68:c9:2d:3b:12:c6:e4:4c:4f:96:8b:4f:
aa:85:6e:2c:ee:28:4e:c3:d1:99:78:2b:b8:13:3c:3c:15:10:
44:fa:6c:24:69:d1:e8:83:8f:73:f7:5e:42:35:f7:92:7e:f9:
fe:32:3e:7c:77:bc:19:44:b6:cc:51:cb:3c:d6:b4:91:2d:7a:
3d:ab:71:2d:a8:f8:5f:b1:c4:6f:31:ce:ac:1d:5f:ef:9a:a2:
e5:80:e8:6e:0f:c7:8f:ec:79:e3:44:0d:ba:1f:ff:11:5b:4b:
76:30:12:49:03:47:05:b2:47:f4:4c:fb:fe:b3:0b:e0:b1:8e:
91:ab:fb:cc:2b:73:b7:bd:cb:28:e6:1d:b6:58:02:f0:84:d9:
6f:cf:c9:b3:71:3a:c7:1d:30:92:1f:54:0c:f6:13:4e:0f:c6:
6a:2b:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:11 2026 by rpki-client