Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: qbXzH9fHEFEnuvDKYpUZQzXJ2/3YkzX/OQqTKeLz43A=
Subject key identifier: 44:87:1C:08:04:9D:0D:51:89:66:F1:10:AA:0E:84:73:BB:D4:72:8F
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019F8FEC3F3FBD1C268DCE1E14D8CA9ADF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1956
Signing time: Thu 23 Jul 2026 17:00:52 +0000
Manifest this update: Thu 23 Jul 2026 17:00:52 +0000
Manifest next update: Fri 24 Jul 2026 17:00:52 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: vRxuDxGZChWqWiegL9DRMcNdL+0Nvu8sRkK/MhQV0GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:3f:3f:bd:1c:26:8d:ce:1e:14:d8:ca:9a:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jul 23 17:00:52 2026 GMT
Not After : Jul 24 17:00:52 2026 GMT
Subject: CN=44871c08049d0d518966f110aa0e8473bbd4728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:db:89:f1:8d:3d:70:d4:d6:49:fd:07:53:
d5:9d:5b:f4:84:1a:0b:0f:9b:d6:c6:b5:54:06:94:
b1:c7:12:14:cc:aa:3a:7b:4c:69:39:4d:93:b6:bd:
57:05:50:f7:01:ce:af:46:e8:71:d0:7e:92:cb:62:
47:af:ef:5a:db:d6:03:89:08:cb:64:39:49:84:88:
9c:5f:8c:40:2c:b1:78:aa:76:0f:27:55:1f:45:e5:
a1:92:06:3f:b7:f3:69:0e:db:7c:33:7a:86:1b:7a:
8b:e8:27:c3:8b:fc:3a:6a:57:d7:04:3b:e2:50:e3:
f7:91:30:e0:d4:67:15:eb:54:c5:cf:10:54:6a:14:
f2:f1:f7:d4:a3:94:53:6c:06:b0:c9:57:33:83:c3:
d1:bb:aa:93:6b:bc:34:e0:58:fc:21:bf:d3:4f:ad:
02:96:b1:1e:48:b2:9e:f3:d9:c0:f4:03:4d:88:9d:
f1:60:50:91:8e:11:e8:7a:d8:1f:ff:05:21:0b:b1:
f2:94:c5:08:a0:56:96:b9:29:a0:99:6f:39:6d:a0:
e4:38:49:ef:7f:2a:24:fb:65:21:93:17:54:38:3a:
ca:b2:11:fe:ed:b1:62:bc:72:71:10:c1:f3:8a:9e:
47:d0:9e:a3:2b:b1:fa:27:fb:12:ed:ba:13:d4:ea:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:87:1C:08:04:9D:0D:51:89:66:F1:10:AA:0E:84:73:BB:D4:72:8F
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:30:18:ac:56:b0:f1:e8:80:a6:0c:d7:44:8d:df:31:69:
88:7a:41:59:7b:e5:96:c6:92:8e:49:09:90:19:c0:86:e5:d2:
9c:51:7e:41:f8:c2:94:7e:66:ae:aa:72:4c:44:92:4b:11:16:
48:a5:e4:77:bf:63:45:04:b4:c4:4b:12:c6:49:52:88:1c:43:
a0:f6:e3:7a:c9:d4:4e:cf:7e:5e:fa:a6:2a:f4:bc:be:30:d3:
1e:45:bf:54:d9:e7:b1:77:ce:a1:b9:6d:8e:c8:a0:a0:37:7d:
4c:c5:d3:73:23:69:c7:1d:1e:8f:8a:e1:21:94:74:b6:8c:84:
56:b5:0f:b8:f5:2a:92:ca:09:d5:f1:ea:d7:34:22:f0:f9:8f:
70:a7:44:72:73:94:aa:c8:f7:d5:3c:d2:72:18:9f:ec:d0:37:
ef:3c:d0:d5:ca:c7:ca:8f:97:33:fb:57:2c:4c:c0:89:26:94:
82:2a:e9:ae:e0:10:7a:ff:1e:5d:5a:9a:27:be:1e:71:82:fe:
24:b1:bb:00:a1:c0:ad:8d:45:a8:95:0e:0e:8b:cd:a6:cc:d9:
dd:d9:d0:de:1c:15:a3:af:65:c4:a5:ce:7d:db:c3:ad:18:a0:
55:aa:32:06:b5:c6:0a:78:51:58:03:55:e6:e1:95:5f:b3:c8:
73:b5:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:56 2026 by rpki-client