Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: FQoNAeAKGv5CWbWtroKJSEx5mXCP1x9oQbPDuX2s/iE=
Subject key identifier: E4:0D:C2:84:DB:8F:57:98:3C:B5:7C:08:D0:C2:75:90:A1:46:38:16
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019F91DA914B059D863D1E5DF15D033A328F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: Bh2horK6bYTI6w/EL1APj9peVDpFlJDspY8ts0ttQBI=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:91:4b:05:9d:86:3d:1e:5d:f1:5d:03:3a:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=e40dc284db8f57983cb57c08d0c27590a1463816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:a2:ff:45:91:8f:bf:c9:98:71:a5:d8:16:
b2:60:5b:a9:35:ce:c5:b5:3a:f6:eb:29:9f:02:de:
9b:72:d0:d2:59:66:1d:85:10:1b:ca:a3:17:c2:d1:
f5:4d:79:09:7f:5e:eb:20:3a:bd:14:50:e7:42:dd:
5a:d8:f3:87:a4:e5:cf:d8:11:8d:6f:72:f3:06:68:
21:ea:3e:ea:ea:cd:92:26:5a:18:4d:1f:41:91:26:
c4:33:57:20:ed:67:cd:21:03:8a:ff:20:c9:ea:d3:
a0:6c:c1:89:83:98:5c:4e:85:87:64:80:66:88:a5:
0b:f4:e2:13:d1:33:de:b9:c7:31:90:e4:79:0a:86:
b3:dc:1e:b8:b8:bf:17:be:b3:88:86:1d:73:9d:7f:
81:22:bf:c6:16:66:7d:8b:24:b9:f6:50:50:5e:13:
9e:b4:cb:93:41:ae:43:49:8d:4e:3b:1b:75:cc:73:
b8:d7:a8:81:74:65:7e:cb:5f:46:96:c0:b1:3b:5e:
11:7a:a7:46:17:c7:a5:24:31:20:94:2b:be:20:b9:
35:f7:93:60:a2:fa:1e:d0:d4:df:6e:4b:9a:da:b2:
ab:62:27:39:91:3f:4c:cc:82:0a:17:04:62:76:77:
6a:07:d1:73:87:f6:0d:be:d0:b0:d5:eb:bf:48:4d:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:C2:84:DB:8F:57:98:3C:B5:7C:08:D0:C2:75:90:A1:46:38:16
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:43:fe:27:b3:73:2d:d0:a8:29:87:13:c3:3b:a3:97:9f:1e:
7a:45:30:16:4f:6d:14:c4:e9:12:99:9b:93:a7:64:59:5b:b3:
aa:d0:be:8c:24:e3:ee:52:30:c7:5f:9d:d0:1c:ef:fc:7b:06:
0f:53:73:8f:48:bb:ac:f6:38:97:c4:e5:28:76:9c:60:ea:12:
09:4b:0f:c6:f6:ef:23:ec:1a:95:28:3f:cb:b0:2a:e1:35:22:
41:86:98:89:bc:bb:4e:b5:fd:09:97:3b:1a:59:6d:f3:2a:ce:
a5:21:91:a4:6d:08:22:64:3e:f0:b6:ad:0e:62:8d:64:3d:9a:
b2:ea:de:27:ed:69:4f:4c:9a:5c:71:73:7d:22:3e:aa:cf:8d:
cd:19:b5:d6:f7:b2:0a:88:27:f5:6d:ac:81:3c:79:9c:93:e5:
fc:3b:a3:9f:f7:b4:e3:f7:5c:2b:1a:5a:cd:64:9f:4b:59:77:
1f:73:fd:57:34:8e:96:df:1d:38:14:06:21:f4:2d:5f:33:4a:
f4:53:7b:49:df:cf:aa:95:7f:e2:55:9d:72:e3:7d:51:1d:2c:
b9:6c:7b:98:90:57:4f:db:8c:3d:cd:ea:82:49:8e:e2:ad:33:
5b:9d:84:69:36:e8:0f:e9:57:25:b6:72:37:33:8e:57:4a:87:
a4:1c:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:25 2026 by rpki-client