
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
File: 9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft (raw, json)
Hash identifier: 6Lk53qKeaT62gdn8gN1kPEHhnEpXcN2RRrGQXFLYtIU=
Subject key identifier: 53:74:C7:21:A3:C7:56:E8:99:17:E9:4E:4A:77:7B:E8:E9:9F:9B:90
Authority key identifier: F5:66:E8:90:75:12:E8:1D:9C:B8:B8:DF:33:A1:9B:D7:36:C6:9E:44
Certificate issuer: /CN=f566e8907512e81d9cb8b8df33a19bd736c69e44
Certificate serial: 019F8ED967329355E08ED4F8CF015D0C186A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
Manifest number: 76
Signing time: Thu 23 Jul 2026 12:00:40 +0000
Manifest this update: Thu 23 Jul 2026 12:00:40 +0000
Manifest next update: Fri 24 Jul 2026 12:00:40 +0000
Files and hashes: 1: 9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl (hash: AwQFW82aZ0IANSZEoSoiGhl383yoyNWVt9mXbPYCf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:67:32:93:55:e0:8e:d4:f8:cf:01:5d:0c:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566e8907512e81d9cb8b8df33a19bd736c69e44
Validity
Not Before: Jul 23 12:00:40 2026 GMT
Not After : Jul 24 12:00:40 2026 GMT
Subject: CN=5374c721a3c756e89917e94e4a777be8e99f9b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:5a:e6:b4:0c:c1:53:33:02:6f:97:48:85:
f6:59:61:1a:b2:2d:35:44:a6:95:9c:2f:20:73:a0:
87:5e:62:93:d2:69:ab:4e:3c:90:8f:32:72:0a:db:
20:ac:8d:83:9b:3b:11:aa:be:4a:66:7e:94:e2:6e:
6c:43:ac:b8:3b:39:64:8a:64:1b:8d:31:95:da:56:
60:cb:cd:da:f9:e3:db:5f:63:5d:31:c1:dd:94:54:
7e:16:2c:b9:0f:b5:c9:5e:c2:63:62:68:68:ca:f5:
c1:e8:a5:9c:8b:f7:5f:bc:44:af:0f:60:d9:2a:0a:
59:3f:ab:8a:f1:94:c7:60:29:df:cf:77:9b:97:57:
89:5f:aa:54:53:2c:b7:02:62:00:82:40:ac:e5:79:
6f:83:0f:bd:54:67:3c:99:19:b8:51:4d:5c:5f:20:
c6:8a:17:23:59:a0:0e:76:e4:89:a3:ef:db:8b:93:
25:da:db:0d:84:1f:81:e6:32:64:c6:49:69:a1:ea:
be:09:1d:8a:11:84:56:8a:f8:a2:83:85:9c:b0:df:
0e:a9:a0:17:af:4f:e9:81:83:f1:a1:eb:23:4e:bd:
9f:e7:44:d4:b2:da:2a:a3:41:24:50:6b:86:ad:14:
43:dc:a7:71:a6:f4:68:a3:d9:56:21:1d:67:81:df:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:C7:21:A3:C7:56:E8:99:17:E9:4E:4A:77:7B:E8:E9:9F:9B:90
X509v3 Authority Key Identifier:
keyid:F5:66:E8:90:75:12:E8:1D:9C:B8:B8:DF:33:A1:9B:D7:36:C6:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:31:5e:d4:9a:54:7a:e2:61:88:a9:2d:d5:40:55:4e:94:f1:
40:c2:00:57:a2:f7:7b:a1:8f:51:3a:76:13:b7:d9:6e:c8:46:
5c:59:f9:e0:2c:70:8e:1e:a6:b5:ee:40:9b:21:f5:bf:df:c7:
cb:c2:97:e1:e6:25:d5:fe:d9:bb:3b:01:1e:0e:fb:25:9f:dc:
b7:49:a7:8b:a4:44:f9:3b:35:dd:99:d0:d3:12:12:92:d7:3a:
1c:f7:71:13:47:12:80:07:22:13:79:83:93:dd:67:5b:8c:33:
5d:27:7d:74:99:24:7c:9c:3f:0c:f4:48:81:69:d6:44:0a:3b:
6f:f5:71:1b:a6:6a:fa:60:fb:5f:ff:fc:2e:e9:58:ea:9e:8c:
ba:63:5c:b0:13:1c:bd:57:cd:da:4e:77:4e:d7:d7:83:9e:c3:
1f:f2:b3:a4:4d:54:d0:57:2e:8a:a1:01:0d:bd:26:7f:0c:68:
83:af:a9:36:f8:77:82:ce:50:30:5f:00:d0:14:5f:f2:ca:88:
41:c7:ad:87:92:8a:47:06:65:db:cb:7a:d4:62:7a:f0:03:a7:
3a:89:6f:04:1f:04:1a:27:a8:d6:db:d0:a4:cf:cb:d8:d4:dd:
19:a5:43:c5:0b:43:a9:8b:77:c7:23:16:69:6b:35:40:ad:76:
45:a1:a1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2Wcyk1XgjtT4zwFdDBhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjZlODkwNzUxMmU4MWQ5Y2I4YjhkZjMzYTE5YmQ3MzZj
NjllNDQwHhcNMjYwNzIzMTIwMDQwWhcNMjYwNzI0MTIwMDQwWjAzMTEwLwYDVQQD
Eyg1Mzc0YzcyMWEzYzc1NmU4OTkxN2U5NGU0YTc3N2JlOGU5OWY5YjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nNa5rQMwVMzAm+XSIX2WWEasi01
RKaVnC8gc6CHXmKT0mmrTjyQjzJyCtsgrI2DmzsRqr5KZn6U4m5sQ6y4OzlkimQb
jTGV2lZgy83a+ePbX2NdMcHdlFR+Fiy5D7XJXsJjYmhoyvXB6KWci/dfvESvD2DZ
KgpZP6uK8ZTHYCnfz3ebl1eJX6pUUyy3AmIAgkCs5Xlvgw+9VGc8mRm4UU1cXyDG
ihcjWaAOduSJo+/bi5Ml2tsNhB+B5jJkxklpoeq+CR2KEYRWiviig4WcsN8OqaAX
r0/pgYPxoesjTr2f50TUstoqo0EkUGuGrRRD3KdxpvRoo9lWIR1ngd8KTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN0xyGjx1bomRfpTkp3e+jpn5uQMB8GA1UdIwQY
MBaAFPVm6JB1EugdnLi43zOhm9c2xp5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMDBlY2QtYmRiOC00ZTNhLTgyNTQt
NThlYWVhYzA3MmEyLzEvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMDBlY2QtYmRiOC00ZTNhLTgyNTQtNThlYWVhYzA3MmEy
LzEvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADFe1JpU
euJhiKkt1UBVTpTxQMIAV6L3e6GPUTp2E7fZbshGXFn54Cxwjh6mte5AmyH1v9/H
y8KX4eYl1f7ZuzsBHg77JZ/ct0mni6RE+Ts13ZnQ0xISktc6HPdxE0cSgAciE3mD
k91nW4wzXSd9dJkkfJw/DPRIgWnWRAo7b/VxG6Zq+mD7X//8LulY6p6MumNcsBMc
vVfN2k53TtfXg57DH/KzpE1U0FcuiqEBDb0mfwxog6+pNvh3gs5QMF8A0BRf8sqI
Qceth5KKRwZl28t61GJ68AOnOolvBB8EGieo1tvQpM/L2NTdGaVDxQtDqYt3xyMW
aWs1QK12RaGhMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:34 2026 by rpki-client