Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: yvu7tmyVpQIXA/0ITaat2hQMf2AFftweF3rs5TM0pgA=
Subject key identifier: 53:98:D6:2C:C8:81:33:E6:F1:F0:CE:EF:F0:15:C1:7F:47:DA:5B:78
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019F92483912C26C4E7579062C181BCCF529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 04:00:34 +0000
Manifest this update: Fri 24 Jul 2026 04:00:34 +0000
Manifest next update: Sat 25 Jul 2026 04:00:34 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: uW+1bh+dQbl5Tlaen2Ec1l4bv0iOQj//xiyehfkZqS4=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:39:12:c2:6c:4e:75:79:06:2c:18:1b:cc:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jul 24 04:00:34 2026 GMT
Not After : Jul 25 04:00:34 2026 GMT
Subject: CN=5398d62cc88133e6f1f0ceeff015c17f47da5b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:d3:8f:95:13:2b:ab:58:b4:79:28:28:33:
aa:dd:fa:14:c8:3c:8e:20:bc:6a:e9:d1:23:cb:ca:
7e:b8:77:a6:89:3a:4c:5a:a8:21:d7:c6:b7:9e:2d:
20:97:9e:b2:a5:75:ae:d8:c8:6a:90:c9:cc:26:88:
fa:56:82:be:02:62:96:5c:fc:7e:83:ac:0b:0d:43:
e2:d7:76:f7:20:81:3c:0f:9c:e1:42:ea:53:30:48:
63:c1:d1:63:41:cc:d3:2a:2f:2a:d8:92:b4:7e:5e:
61:5a:8e:b6:92:a9:f9:a9:a7:93:7c:5d:13:7e:77:
d9:46:83:a3:3d:92:7c:e7:4f:9c:50:86:6d:43:1c:
01:14:86:ac:a3:67:eb:a3:89:9a:5d:ec:e4:70:50:
be:15:49:9e:e7:70:bd:a5:77:db:ae:a0:99:e5:1a:
73:99:91:0e:70:87:fa:60:c6:5d:90:a1:8e:25:be:
b2:b5:12:2d:ec:a9:be:18:12:d4:0b:b4:72:11:45:
e8:c8:11:32:c3:02:3b:fb:a5:24:06:01:b7:e0:65:
09:45:d0:ad:85:ea:67:50:5a:08:5e:5f:35:5c:e0:
46:e0:69:77:0f:e3:03:1d:ce:13:45:96:ff:c7:24:
00:97:ce:00:c0:55:79:17:b1:4a:f4:fc:84:8a:80:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:D6:2C:C8:81:33:E6:F1:F0:CE:EF:F0:15:C1:7F:47:DA:5B:78
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:12:78:31:11:10:f7:e0:c6:a8:f7:b0:24:65:51:59:ab:
d9:16:c5:68:e3:84:ad:10:ce:b2:dc:c4:6c:0d:07:80:ba:78:
45:c9:26:1d:6b:4e:ae:ab:dc:10:d9:6e:45:38:41:91:4d:f5:
9b:32:bb:84:ab:0f:36:a1:74:bc:dd:5b:66:0e:dd:f3:75:1f:
e5:98:f8:60:ad:b9:e0:75:c4:2a:fc:34:15:d2:f1:fe:ea:88:
e3:21:e2:a1:30:fb:cf:2e:64:0d:af:72:44:ed:0d:3f:b4:1a:
96:b4:fa:f3:2d:33:cc:cd:1c:0d:28:dd:93:dc:6a:66:30:a3:
11:52:50:a0:ad:67:a1:61:7a:07:ff:88:15:43:ef:5c:9b:93:
11:6f:63:65:6e:d1:55:70:3c:2f:c3:e1:82:83:5b:82:74:5a:
1c:bf:ce:61:81:02:03:99:77:4f:27:45:69:59:1d:ba:44:5d:
44:c3:73:f2:de:d3:37:59:86:8d:87:28:ee:3e:f8:9a:2e:49:
20:f1:a6:56:5a:7c:3c:43:e7:74:93:2a:ed:75:6e:4e:28:41:
3a:36:d8:a1:6b:b8:06:68:be:ca:88:b4:b7:f8:7e:bd:54:51:
12:af:82:8d:3b:17:c7:87:3c:75:ba:c0:d4:69:ed:d0:1d:eb:
72:e2:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:09 2026 by rpki-client