Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: E0MJCNDx/Tcm4OKJtAr4zUMgqiyrN4erXhUOa9kPBic=
Subject key identifier: 07:D0:1E:03:7A:F4:67:44:47:41:FB:9B:54:72:AF:38:48:78:D8:BC
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019F90C7B0303578A7153C62F07B2F18C939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0A2D
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: CMkb3bvVWOfAAlSgNJE2znU6ll2klQLk5IiklTdhz+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b0:30:35:78:a7:15:3c:62:f0:7b:2f:18:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=07d01e037af467444741fb9b5472af384878d8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:6a:bd:ca:df:e5:4f:ad:34:e8:aa:15:d4:
98:e3:5b:74:d0:68:9b:89:fa:fc:f3:e4:5e:d7:10:
be:77:a7:d8:73:3e:b7:be:c1:b3:52:f9:ed:c1:c8:
73:fb:eb:34:c2:03:0b:59:c9:df:23:2e:45:a9:ee:
2c:9c:0b:d7:34:a0:c3:d0:8d:52:55:f2:d9:31:f6:
65:b6:c9:16:12:10:c5:02:97:a4:2b:f1:4f:30:95:
97:6e:04:73:07:bf:80:e9:db:f4:90:10:f6:86:10:
7a:75:83:09:9c:2c:07:7d:53:55:f1:3d:73:7a:74:
56:53:6e:4d:b6:97:3f:cd:8c:ad:c9:26:0d:a6:c8:
ef:89:4b:4e:30:92:76:93:4a:a1:5f:64:f0:b1:6a:
13:05:98:aa:84:43:ee:9a:1e:e1:f1:e9:34:53:48:
b6:a6:71:76:f1:d1:a7:40:f0:9b:ca:fa:d4:9c:00:
98:88:90:c4:42:69:50:b1:3e:36:03:8b:c1:09:2b:
14:d1:fd:a2:87:b5:e8:eb:70:a5:2f:38:99:21:9c:
0b:25:ea:ae:1c:9c:47:45:46:1b:7c:a6:76:04:8e:
83:f1:f3:e1:75:3c:32:45:1d:34:7c:92:60:b2:af:
dc:f0:db:74:8d:03:08:27:67:a7:92:5c:29:c0:c1:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:1E:03:7A:F4:67:44:47:41:FB:9B:54:72:AF:38:48:78:D8:BC
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:d6:24:6e:4c:ae:02:9a:d1:89:70:21:5e:72:e5:9c:51:
c0:cb:49:11:be:f2:ab:72:4c:54:59:2a:c3:ac:36:b4:cf:f4:
f1:a7:69:52:47:8d:12:3e:87:b8:a2:6f:f1:41:7e:af:6a:2b:
c8:95:34:1f:ed:17:f5:57:e0:d1:96:a8:3f:bc:48:0f:d9:43:
bf:9a:02:02:cf:ae:e2:6e:5f:e7:10:e0:35:fb:28:11:8b:08:
f5:ce:7e:7b:5f:89:5c:65:a9:cd:20:b8:9a:5d:45:82:8e:75:
32:63:4d:a9:92:48:91:1a:97:32:72:2e:d1:f4:ac:8b:00:40:
53:0e:e4:fd:ba:1f:81:85:56:7e:a4:84:3d:8b:35:e7:c1:4d:
eb:f9:3c:b3:47:1b:01:ad:17:2c:f7:10:19:3b:ff:7f:b4:d0:
43:2c:c0:0c:68:60:41:5b:3b:fd:78:3b:97:92:ac:ed:6d:78:
d7:76:23:bc:d2:d7:5a:78:33:ea:a4:d2:7a:95:72:c9:d2:13:
73:ba:d5:2a:63:b5:ea:14:64:da:5a:16:e8:7b:ed:52:a8:2f:
7c:05:84:ee:07:9e:f4:4f:c6:19:d1:b9:a5:fc:98:30:13:31:
4c:38:08:b8:dd:55:4c:40:52:de:91:be:77:39:ec:50:62:00:
86:95:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:08 2026 by rpki-client