Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: wN8Rbchfy3mFTj0IfDSD/jC0AOuWKQKRzVduepdTk7A=
Subject key identifier: C0:9F:C0:42:37:9A:16:26:05:9D:1F:F2:42:96:8F:CD:93:C3:52:4D
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 019F91A3EBE07BC53834841644786B8B325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: 0203
Signing time: Fri 24 Jul 2026 01:01:06 +0000
Manifest this update: Fri 24 Jul 2026 01:01:06 +0000
Manifest next update: Sat 25 Jul 2026 01:01:06 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: Yzo+clyzRX3138Nl/X/rC1Ozt9Jk2ckvXHpTzTgz5m0=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:eb:e0:7b:c5:38:34:84:16:44:78:6b:8b:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: Jul 24 01:01:06 2026 GMT
Not After : Jul 25 01:01:06 2026 GMT
Subject: CN=c09fc042379a1626059d1ff242968fcd93c3524d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:46:dd:c3:09:39:e2:66:81:bf:be:5f:0c:
31:c4:13:17:a0:25:ec:ff:a7:81:81:56:00:d8:b6:
62:93:c3:6b:a5:b0:0b:38:f1:3d:1c:f7:be:01:65:
c8:09:f5:6d:83:03:65:b0:9a:69:2c:33:c2:aa:64:
b6:3c:b0:66:d8:49:3b:a2:ba:74:c2:1a:1b:3e:50:
57:51:4a:3f:48:16:ae:50:84:01:2d:db:3c:44:18:
ab:78:71:0f:aa:b6:e6:7e:7f:0b:69:6c:21:1f:28:
2b:2c:ee:b9:60:4c:8d:b0:0c:22:2d:0c:04:ac:5e:
41:f5:92:1b:70:bc:cb:aa:23:eb:ad:e9:60:b5:ef:
93:b0:b2:56:fa:49:46:e1:b4:37:0c:c5:33:06:a5:
af:94:42:86:e2:7f:1c:f1:a4:70:13:b2:80:41:27:
d3:56:68:09:b9:ee:5f:4d:ec:18:81:d0:a2:39:84:
6a:b3:3c:2b:f0:eb:1c:9c:8e:36:f0:7f:34:ab:c5:
62:1d:77:4e:02:42:7c:e3:3d:d2:34:bf:38:03:06:
21:5c:ea:49:8a:a0:39:6f:b6:d2:4f:e2:cd:2e:9b:
34:49:88:33:ec:c9:30:43:b0:3e:98:b6:5a:1b:20:
25:1e:d0:94:06:66:20:cb:5f:f8:5b:49:54:af:22:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:C0:42:37:9A:16:26:05:9D:1F:F2:42:96:8F:CD:93:C3:52:4D
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:39:93:60:63:1c:e6:08:7f:57:55:51:2c:cc:7c:02:0f:
06:d1:0b:26:0e:24:c3:4e:fc:d0:0f:50:34:99:9c:e6:d0:30:
be:a8:b2:c1:f0:af:23:cd:b9:26:62:62:b3:52:d3:9d:b6:59:
00:ec:4a:ee:b1:54:b4:72:b1:bc:cc:06:da:e3:e6:2e:53:08:
47:94:c8:1c:6a:ed:a5:50:b4:8d:7a:cb:34:c9:19:db:db:38:
67:a0:80:e9:44:05:79:2c:77:95:76:ad:1e:dd:61:73:df:0c:
7a:44:a5:95:55:79:e5:c0:bb:79:8c:25:0b:53:6d:a1:90:11:
65:ec:57:ae:22:5e:1a:e0:a5:32:0e:56:63:e7:37:0a:90:2b:
32:1b:17:0f:97:1b:82:a0:9b:3c:8e:02:91:2f:49:ee:61:f3:
db:df:d8:e4:63:14:da:98:5e:fa:34:78:8c:e8:84:37:5c:4b:
67:4a:29:94:79:04:67:07:3e:2b:82:d0:3f:f1:98:69:89:03:
57:51:96:00:34:bc:4c:38:09:a3:59:f9:20:16:60:6e:36:8e:
dc:d6:3e:38:0b:f2:4f:a7:d7:c5:38:e7:7d:9e:4b:f2:b9:f4:
ee:d1:44:f5:c0:aa:e4:73:11:6c:d0:c7:a4:ae:fe:ea:a1:60:
6c:8d:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:08 2026 by rpki-client