Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: 7ZpK2IWhTPJRM5IDvODAfiXKO2ZGy9USSPnsNxlzBhI=
Subject key identifier: 68:E8:51:41:02:03:DC:99:24:FC:48:2C:79:96:E8:46:F1:D4:CE:A9
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019F90C803800C01AA265BB882B3E4F8DA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 12B7
Signing time: Thu 23 Jul 2026 21:00:54 +0000
Manifest this update: Thu 23 Jul 2026 21:00:54 +0000
Manifest next update: Fri 24 Jul 2026 21:00:54 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: yW4Vy8rR7wU+bpCSNt5+5x8Qtn9Tz9+a/cheItIEsgA=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:03:80:0c:01:aa:26:5b:b8:82:b3:e4:f8:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Jul 23 21:00:54 2026 GMT
Not After : Jul 24 21:00:54 2026 GMT
Subject: CN=68e851410203dc9924fc482c7996e846f1d4cea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:a3:46:a6:14:27:ac:f1:a0:34:b0:17:94:
5c:9c:35:fd:9d:a2:ac:23:b0:55:6c:90:94:ec:99:
13:e4:d2:fc:10:0b:4c:e7:a0:06:28:ec:cb:4b:ca:
83:a7:d7:d3:22:76:e2:bc:5b:5a:ef:ea:41:f8:91:
14:20:7a:13:7f:fd:56:2b:f9:c9:ae:23:20:68:5f:
27:32:6f:98:a0:cd:1e:a6:e3:c5:c1:20:70:dc:aa:
6b:72:64:4b:07:64:13:30:24:e4:4a:92:2f:ab:bb:
0a:59:99:a4:bf:1b:ee:2e:f4:1f:a5:a8:b1:87:fa:
20:0f:7a:15:40:22:c6:77:63:56:2f:a7:12:48:d6:
3e:84:d9:60:cc:4e:f2:87:ac:7f:3b:a7:70:75:67:
99:6a:00:0d:7f:8f:6b:a6:57:15:7b:97:51:f3:7a:
03:fb:1e:85:01:31:ac:c9:4b:b5:87:8d:93:59:97:
67:cc:26:b5:89:1c:71:3e:ff:02:d6:b5:5a:50:14:
fe:85:26:23:8b:7d:5b:57:55:7d:dc:01:14:cd:cb:
5b:25:02:0b:d2:96:8e:1a:21:a7:96:fe:33:91:d1:
7c:65:63:d6:56:c1:36:02:d9:ec:91:a5:1f:3f:0e:
bf:b7:07:18:62:59:3a:b8:41:a8:17:fd:b7:7d:6e:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:51:41:02:03:DC:99:24:FC:48:2C:79:96:E8:46:F1:D4:CE:A9
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:d1:5d:c9:4d:f6:c1:5e:28:46:cb:73:a8:6b:5a:a1:c0:
df:79:6a:b7:54:af:a4:64:e2:f5:7f:8e:ca:4d:9a:2d:65:40:
ed:7b:4a:58:c4:b8:31:64:bd:70:1f:df:1f:94:6f:fe:fb:6d:
66:bb:5f:a7:48:16:61:d5:0f:66:f4:a4:06:a0:da:bc:ca:74:
18:66:8d:b7:d6:13:99:1d:bf:4c:2d:01:af:80:50:2f:15:54:
43:ae:49:55:90:1a:f1:49:94:ed:72:9c:5a:62:55:e1:f5:9d:
92:5e:45:8a:8c:c6:fc:43:26:fa:03:f1:c4:44:24:06:a4:37:
fd:19:d9:35:4f:b7:6a:5e:4d:86:d4:77:c7:b9:8a:08:39:ad:
ce:8f:7b:18:b2:a6:93:0a:41:18:d4:f5:d1:31:21:90:02:ed:
b5:c7:8a:57:85:cb:d3:ae:a8:5c:b7:3b:40:54:45:7b:e5:63:
a8:30:89:e2:1b:c3:3f:9b:b2:78:8f:18:33:41:24:c3:99:47:
ee:15:d7:88:06:27:49:ce:99:26:a2:84:5b:4f:88:88:6d:3f:
c0:fd:35:81:ef:b4:64:7b:14:72:3d:0c:44:46:f0:02:22:c4:
0f:6d:08:e7:38:10:48:76:87:48:7f:12:00:70:ba:cb:27:f0:
65:2e:ff:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyAOADAGqJlu4grPk+NqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2E0ODEyYTE1OWVmNmE5ZTkyOTcyZTc1NzJhZDY2MmQ3
MjIxNWEwHhcNMjYwNzIzMjEwMDU0WhcNMjYwNzI0MjEwMDU0WjAzMTEwLwYDVQQD
Eyg2OGU4NTE0MTAyMDNkYzk5MjRmYzQ4MmM3OTk2ZTg0NmYxZDRjZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6jRqYUJ6zxoDSwF5RcnDX9naKs
I7BVbJCU7JkT5NL8EAtM56AGKOzLS8qDp9fTInbivFta7+pB+JEUIHoTf/1WK/nJ
riMgaF8nMm+YoM0epuPFwSBw3KprcmRLB2QTMCTkSpIvq7sKWZmkvxvuLvQfpaix
h/ogD3oVQCLGd2NWL6cSSNY+hNlgzE7yh6x/O6dwdWeZagANf49rplcVe5dR83oD
+x6FATGsyUu1h42TWZdnzCa1iRxxPv8C1rVaUBT+hSYji31bV1V93AEUzctbJQIL
0paOGiGnlv4zkdF8ZWPWVsE2AtnskaUfPw6/twcYYlk6uEGoF/23fW5v5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjoUUECA9yZJPxILHmW6Ebx1M6pMB8GA1UdIwQY
MBaAFPV6SBKhWe9qnpKXLnVyrWYtciFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYt
YmViNzBmZDQxNWNhLzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYtYmViNzBmZDQxNWNh
LzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLLRXclN
9sFeKEbLc6hrWqHA33lqt1SvpGTi9X+Oyk2aLWVA7XtKWMS4MWS9cB/fH5Rv/vtt
Zrtfp0gWYdUPZvSkBqDavMp0GGaNt9YTmR2/TC0Br4BQLxVUQ65JVZAa8UmU7XKc
WmJV4fWdkl5FiozG/EMm+gPxxEQkBqQ3/RnZNU+3al5NhtR3x7mKCDmtzo97GLKm
kwpBGNT10TEhkALttceKV4XL066oXLc7QFRFe+VjqDCJ4hvDP5uyeI8YM0Ekw5lH
7hXXiAYnSc6ZJqKEW0+IiG0/wP01ge+0ZHsUcj0MREbwAiLED20I5zgQSHaHSH8S
AHC6yyfwZS7/RA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:26 2026 by rpki-client