Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: fBEwJTuh9Rm3rt6htWVY9ooeuMka4advMGdp/WqiMr8=
Subject key identifier: 85:F9:1A:40:17:0B:17:78:A0:CD:AD:6C:00:11:6D:E9:1D:50:9B:88
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019F8F46E6B82FEC25CBF05B6DF3AA31016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 10A6
Signing time: Thu 23 Jul 2026 14:00:16 +0000
Manifest this update: Thu 23 Jul 2026 14:00:16 +0000
Manifest next update: Fri 24 Jul 2026 14:00:16 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: wYH6vIE2bgsMgTajQrJaELMJp5wHxt8DsaefyZV2QdA=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e6:b8:2f:ec:25:cb:f0:5b:6d:f3:aa:31:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jul 23 14:00:16 2026 GMT
Not After : Jul 24 14:00:16 2026 GMT
Subject: CN=85f91a40170b1778a0cdad6c00116de91d509b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:63:74:00:13:18:4a:31:21:39:9b:ae:07:
7e:cc:83:5e:9b:cc:5d:14:63:22:13:35:89:56:89:
64:62:8d:d8:13:e8:cd:8b:ef:13:24:48:89:7f:d7:
ab:9c:e3:7e:a6:b0:18:1d:bc:29:fa:8e:b6:02:20:
90:80:29:08:b8:eb:ec:e8:af:b6:0b:a6:15:b7:64:
25:36:5d:24:b0:fb:fc:a9:dc:28:ce:6b:a3:a1:c3:
9f:0b:42:7a:31:d9:7a:ce:66:ee:18:e1:4b:d4:92:
79:29:3a:af:f7:0d:6c:8a:c5:31:8a:c1:c5:06:70:
3e:25:81:42:94:8f:0c:29:10:b3:76:cf:75:e6:a1:
41:61:4d:42:b2:42:5a:ff:b5:98:06:07:cf:ee:2d:
7f:a8:3a:4f:36:85:1f:e5:ad:3d:b4:59:ff:64:66:
85:85:ea:64:b1:84:be:38:a3:2e:f0:b6:d7:ea:54:
e4:02:84:fb:77:9c:19:e9:5b:11:88:da:14:d1:08:
16:60:45:f9:9d:4c:e9:06:56:1e:fc:32:aa:3c:bc:
59:00:1f:04:65:52:ef:66:f7:3b:bd:8e:eb:41:4b:
75:a6:46:54:2f:2e:c3:29:0e:d3:f0:71:a3:bf:bf:
20:f3:04:d4:de:b1:4c:ae:b4:01:12:bd:18:3f:af:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:1A:40:17:0B:17:78:A0:CD:AD:6C:00:11:6D:E9:1D:50:9B:88
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:fd:bc:77:18:1a:37:7a:a6:cc:e1:0e:2f:12:1f:ee:19:
2b:3c:40:1c:8e:1f:12:79:f4:db:35:2d:de:8a:f7:80:26:e2:
a8:91:97:9b:f2:9d:59:38:1e:70:8d:09:bd:0b:7c:e8:14:53:
c8:ef:46:a3:8c:ab:a6:ca:f2:97:6f:13:bd:3d:be:6b:72:5c:
61:1a:6c:3c:9c:f0:d4:2e:1f:f5:25:2e:7d:46:a1:bb:3d:df:
94:3b:c2:5e:8a:a2:7e:52:9b:c4:0d:29:41:18:60:71:62:f1:
1d:5c:0a:3e:05:16:ca:58:bd:a7:2e:c9:7a:fc:9a:4f:2c:30:
5d:c9:36:06:50:0f:cc:3d:ee:92:3e:72:52:4b:f1:63:93:e7:
de:24:8b:0b:f6:9b:9f:f1:61:b0:d1:b5:77:d9:db:42:26:e8:
c7:41:52:37:95:66:b8:70:cc:9f:f7:a8:d3:3f:86:db:cd:88:
35:dd:75:1d:fd:c8:ec:9a:59:d2:a6:27:fc:bd:b3:7b:92:98:
2b:52:77:f1:85:95:4e:a2:f9:ff:99:85:1d:94:89:1f:23:81:
d0:1d:e3:67:2d:c9:c0:c8:fd:f2:ad:af:56:49:b8:ab:fd:84:
83:12:f9:b1:45:80:c2:ec:4e:d1:7e:fb:93:05:39:c1:19:56:
78:36:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:23 2026 by rpki-client