Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: 6GGt2hrE5J7IhLGsWd2jJjiE0WlcNnY9bvi077ecEoA=
Subject key identifier: C6:EB:F1:5B:41:AA:F0:E3:68:25:FB:8B:CD:0C:16:C0:28:F8:6E:67
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019F9022DED7F50E37E73C0BA2275898C64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:32 +0000
Manifest this update: Thu 23 Jul 2026 18:00:32 +0000
Manifest next update: Fri 24 Jul 2026 18:00:32 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: kE0zEoRUr3IDf/bkfAqpjfRZb56y+eh/3vvalWmU0Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:de:d7:f5:0e:37:e7:3c:0b:a2:27:58:98:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jul 23 18:00:32 2026 GMT
Not After : Jul 24 18:00:32 2026 GMT
Subject: CN=c6ebf15b41aaf0e36825fb8bcd0c16c028f86e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:20:8e:51:33:bc:43:0b:0c:24:66:16:32:
00:96:4b:9f:ca:a2:50:01:81:22:3d:72:7d:7d:45:
f9:8f:49:02:05:b9:48:06:96:27:66:02:8c:9f:d1:
fe:9d:72:6f:dc:a4:6b:7a:35:41:83:95:fd:eb:56:
3e:3f:c1:52:52:57:b5:e8:34:ca:e9:ba:e1:ed:58:
0b:72:40:a3:f2:38:9d:17:20:22:e8:fc:dc:a6:a1:
c3:1a:8a:32:49:39:35:24:62:28:ac:21:db:eb:62:
1d:34:7d:54:f8:00:2a:8b:07:f0:98:13:79:8b:37:
62:02:b7:b1:e3:f2:6f:7d:40:74:df:05:b2:f0:54:
07:63:78:7e:d4:a3:12:c6:9d:ac:78:89:a2:5e:ae:
20:6f:22:e6:99:a8:35:01:e1:c4:f7:41:9f:cd:f5:
4b:07:50:80:a7:a8:7d:22:66:b2:77:61:7d:dd:58:
23:ae:54:57:6d:89:82:b9:14:e1:28:95:1c:85:45:
0c:c7:c3:6b:ab:cc:63:5e:9e:86:f1:f2:6e:c7:73:
00:37:27:b3:c2:07:98:f5:40:63:4f:db:2d:2c:b7:
02:1d:a7:83:2e:8a:33:f0:a0:9e:79:27:a2:41:5f:
c8:c1:bc:04:ab:28:4d:58:84:64:a0:8f:06:25:42:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:F1:5B:41:AA:F0:E3:68:25:FB:8B:CD:0C:16:C0:28:F8:6E:67
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:09:83:82:a0:4e:4b:4b:4d:2c:42:9e:62:8b:9f:6f:cc:
e1:0d:e3:e5:16:d6:a6:3a:20:65:d8:b8:a3:9e:b7:75:1d:dd:
5b:6a:87:21:5b:6a:fb:66:3c:89:5a:d5:6a:bd:60:e7:46:b1:
8d:a4:6b:09:f2:ff:c8:0e:d3:d9:b8:a6:3b:20:fa:1e:c4:a4:
3d:69:71:01:6d:d9:1a:da:ab:21:d0:0a:b7:b7:54:78:c9:4d:
9a:35:7c:3c:0b:1c:83:c7:39:2e:e4:14:5f:78:fe:85:db:b4:
10:c5:1a:c7:a1:bf:28:e5:34:d6:f8:e0:8c:7a:50:13:0e:14:
f5:ec:2a:ce:77:19:3f:c2:ad:44:3c:d5:76:04:1b:04:56:1d:
79:73:db:69:30:4e:38:a4:29:e2:4f:93:f2:4c:43:4b:4a:08:
a6:48:5a:4a:a3:c5:89:34:de:bf:e7:67:f9:a5:9c:4d:10:74:
19:05:83:94:f3:28:72:55:06:23:1b:48:3d:9b:c3:23:bc:7f:
3a:a5:23:17:7a:8c:af:54:78:27:99:6b:fd:c6:db:b4:3a:57:
f6:03:39:ea:eb:27:0a:79:2b:b7:36:4e:f8:c7:78:c5:08:fb:
bd:3a:a0:8c:d4:4d:40:9a:79:9f:bd:6f:ec:49:df:94:3e:47:
60:f8:68:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIt7X9Q435zwLoidYmMZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0
YjAyNDcwHhcNMjYwNzIzMTgwMDMyWhcNMjYwNzI0MTgwMDMyWjAzMTEwLwYDVQQD
EyhjNmViZjE1YjQxYWFmMGUzNjgyNWZiOGJjZDBjMTZjMDI4Zjg2ZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoAgjlEzvEMLDCRmFjIAlkufyqJQ
AYEiPXJ9fUX5j0kCBblIBpYnZgKMn9H+nXJv3KRrejVBg5X961Y+P8FSUle16DTK
6brh7VgLckCj8jidFyAi6PzcpqHDGooySTk1JGIorCHb62IdNH1U+AAqiwfwmBN5
izdiArex4/JvfUB03wWy8FQHY3h+1KMSxp2seImiXq4gbyLmmag1AeHE90GfzfVL
B1CAp6h9Imayd2F93VgjrlRXbYmCuRThKJUchUUMx8Nrq8xjXp6G8fJux3MANyez
wgeY9UBjT9stLLcCHaeDLooz8KCeeSeiQV/IwbwEqyhNWIRkoI8GJULIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbr8VtBqvDjaCX7i80MFsAo+G5nMB8GA1UdIwQY
MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt
MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj
LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJUJg4Kg
TktLTSxCnmKLn2/M4Q3j5RbWpjogZdi4o563dR3dW2qHIVtq+2Y8iVrVar1g50ax
jaRrCfL/yA7T2bimOyD6HsSkPWlxAW3ZGtqrIdAKt7dUeMlNmjV8PAscg8c5LuQU
X3j+hdu0EMUax6G/KOU01vjgjHpQEw4U9ewqzncZP8KtRDzVdgQbBFYdeXPbaTBO
OKQp4k+T8kxDS0oIpkhaSqPFiTTev+dn+aWcTRB0GQWDlPMoclUGIxtIPZvDI7x/
OqUjF3qMr1R4J5lr/cbbtDpX9gM56usnCnkrtzZO+Md4xQj7vTqgjNRNQJp5n71v
7EnflD5HYPhoyw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:23 2026 by rpki-client