Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: aSoZDKwp1SuC5z81EmVR3ab1ZA7CNCJFErBhbu2yyS4=
Subject key identifier: 9E:AF:19:9E:B2:A3:6B:C1:90:C3:89:B1:EB:0A:FA:0D:35:07:75:C1
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019F9090DFD96DF9DDCB5D7025CE32C7C26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 20:00:41 +0000
Manifest this update: Thu 23 Jul 2026 20:00:41 +0000
Manifest next update: Fri 24 Jul 2026 20:00:41 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: ItnpEV+eqmoWOJZXzzzvq2qMlpwyTKzdp7ifTZTLt68=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:df:d9:6d:f9:dd:cb:5d:70:25:ce:32:c7:c2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jul 23 20:00:41 2026 GMT
Not After : Jul 24 20:00:41 2026 GMT
Subject: CN=9eaf199eb2a36bc190c389b1eb0afa0d350775c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:a3:b7:13:5b:e7:76:9b:8f:f3:1a:24:f0:
73:9b:ee:01:39:bd:be:4f:ed:bf:58:20:fc:9d:11:
f4:29:22:3e:35:19:50:4b:da:28:d6:e6:05:05:86:
09:b0:06:f6:38:38:75:05:c4:e8:0f:a9:3c:57:0e:
ef:ea:1a:3d:46:cd:d4:5f:b8:80:1f:df:96:21:e7:
5a:66:97:ae:ee:ac:13:3a:55:52:61:c8:0d:69:ca:
95:3f:a2:33:02:b9:ab:2c:38:e0:52:7a:f3:68:3f:
a0:bb:0c:8d:75:09:73:43:64:a5:d5:50:e5:8a:d5:
0b:0b:f0:a9:7a:3c:65:ec:87:ad:9a:af:81:19:6a:
99:5c:3f:e5:05:72:c8:e9:19:89:e5:93:a6:b4:ca:
e0:c9:48:2f:03:e8:01:a6:f1:6f:83:ab:66:e4:f0:
03:41:b7:bc:64:ad:f4:26:af:88:95:ce:ab:6f:dd:
c1:4d:7a:be:70:e7:f9:8c:8f:ce:af:90:fd:94:2e:
fe:51:43:cc:bf:1b:54:9a:81:a6:cc:78:1b:9e:f4:
98:30:9f:fa:f4:fb:f8:01:f5:22:03:aa:1c:88:3b:
13:18:08:f7:03:78:db:86:7d:67:43:5e:b8:8b:ad:
4e:1e:75:5c:73:d9:31:24:1f:14:86:b5:a6:ad:b9:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:19:9E:B2:A3:6B:C1:90:C3:89:B1:EB:0A:FA:0D:35:07:75:C1
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:30:f6:f5:06:74:c0:9e:63:99:5c:1a:9b:c6:82:1e:8a:44:
a2:ab:a5:41:0b:fa:1f:7e:77:b1:ac:f4:7d:96:72:12:60:fc:
83:85:2e:c4:70:70:9a:ba:ef:c1:23:17:7d:38:7d:46:63:ac:
01:9b:b2:22:29:fe:fd:71:af:c5:89:ff:8e:92:d8:48:5c:a9:
22:82:ab:17:30:c6:f3:3e:19:21:b2:cf:70:6e:71:f9:2c:86:
6f:66:ea:02:a7:ea:3d:03:28:b5:39:0b:a8:5a:34:8b:b6:b5:
dc:38:0b:4d:e6:c0:8e:4c:53:f8:38:07:f8:72:19:20:76:eb:
10:73:1d:b9:53:13:cc:5b:13:8e:e7:7c:1a:79:29:94:56:59:
b4:57:52:d9:f2:41:6c:22:16:7a:8e:e9:a8:8d:4b:2b:00:3f:
e5:92:40:f4:30:af:c8:a3:06:a7:b9:c7:f7:3a:aa:ef:a3:ca:
fe:2c:4b:7f:96:80:09:52:fd:9d:b8:f5:f3:6d:9c:95:8c:85:
96:c1:6f:56:d4:a8:49:5e:05:32:80:98:c7:06:10:e6:03:a4:
68:ea:1b:36:aa:87:49:14:7a:04:45:77:ad:58:2a:13:86:17:
f2:e1:9a:11:89:96:99:5e:10:f6:ad:c2:4c:ad:e3:6b:4c:73:
e7:4f:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:01 2026 by rpki-client