Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: NxB8oJOpguXnHuwWf8MJHbb8IhVl3O4swOrBywyINk0=
Subject key identifier: E9:E4:42:27:06:08:EF:35:64:B7:18:E3:43:28:2D:6B:DE:AD:0E:95
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019F9135FD129D9B7B455A9EBCDF5AE16C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0E41
Signing time: Thu 23 Jul 2026 23:01:02 +0000
Manifest this update: Thu 23 Jul 2026 23:01:02 +0000
Manifest next update: Fri 24 Jul 2026 23:01:02 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: GgMvJbu1/4ZFueBfHmKeGKJ6tIoIel0sPlhHr0+Ik7g=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:fd:12:9d:9b:7b:45:5a:9e:bc:df:5a:e1:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jul 23 23:01:02 2026 GMT
Not After : Jul 24 23:01:02 2026 GMT
Subject: CN=e9e442270608ef3564b718e343282d6bdead0e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:fd:1c:a2:37:8f:57:34:e1:df:12:af:a5:
cb:c4:db:c5:f6:61:7d:93:0e:00:87:ea:17:50:2a:
4f:a4:46:ee:25:58:e3:7a:0f:a1:5c:d5:4d:e0:dd:
14:b1:35:71:97:51:3f:de:17:cf:a2:ed:8d:41:a9:
69:ca:12:9d:a4:19:60:8a:c0:8b:5a:e5:8b:93:61:
91:83:b1:7b:0a:24:52:99:35:07:b7:0c:70:b0:be:
fa:05:3c:c9:0d:e1:59:e4:ff:70:a3:55:fc:19:ba:
45:69:cf:77:97:f7:43:5c:9b:ea:d1:c0:76:b8:6d:
ab:3c:87:cc:1e:fd:6e:ae:fe:6f:ad:58:3f:1e:2c:
8c:4a:9a:52:f5:56:a8:c3:06:2e:43:a6:d3:e7:09:
eb:64:17:d2:37:08:32:b3:d1:8b:3b:1d:cb:99:bb:
a6:82:1e:65:45:d0:e2:e2:33:a8:37:b4:f5:2c:05:
18:84:8c:79:d4:3f:2c:28:17:fa:12:0d:dd:18:d9:
1d:d0:44:62:39:22:43:d3:14:10:04:d2:2b:cd:e9:
16:34:4d:99:8f:3c:47:d0:74:4a:8a:2b:cc:18:f4:
61:57:9e:e0:29:5f:ad:4f:c8:f7:18:65:39:af:88:
3b:37:08:5c:6a:36:ab:00:26:71:a5:eb:aa:04:8b:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:42:27:06:08:EF:35:64:B7:18:E3:43:28:2D:6B:DE:AD:0E:95
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:19:66:e9:16:e3:54:22:42:f8:53:4f:c3:ba:cb:a2:dd:
21:cc:54:f4:e8:3c:6d:2b:0c:53:c0:f0:4b:6c:3b:71:53:10:
0e:fe:b8:57:e2:a6:1a:3b:01:2d:ec:e2:3b:36:4b:f9:55:d1:
8a:7f:c4:0c:56:5d:ef:70:b5:29:31:8a:08:07:c1:26:ef:0a:
71:86:51:f9:b8:57:9a:3b:f6:13:01:83:6a:8a:e0:30:e6:14:
0b:a7:1c:b2:f1:75:ea:0f:f3:ee:ef:38:29:b6:e9:7a:40:0f:
2a:57:f6:2c:15:4c:8f:ce:8a:b3:4b:31:75:34:46:52:5d:45:
b4:1a:98:fc:54:e1:0e:b8:0d:6d:9a:fe:79:92:70:90:59:91:
66:cf:bd:75:21:5e:5a:d1:d8:a9:6c:cf:bd:a4:d2:60:59:59:
e6:e6:50:73:64:f9:20:57:0d:b3:3e:8c:ae:d5:03:61:19:d1:
b3:89:8b:01:7a:6a:b3:98:96:86:58:6f:0b:1c:2b:dd:d4:86:
32:d8:a9:f3:9b:a5:5b:44:85:e4:e1:79:59:b3:cc:ae:8f:b7:
92:c8:64:e3:3c:ab:eb:22:89:a0:4a:e6:0b:d3:69:b2:40:8f:
17:87:10:eb:f5:96:13:b5:21:20:de:40:86:9c:01:66:42:81:
df:80:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:14 2026 by rpki-client