Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json)
Hash identifier: Bt4X38aPpuNu611wQfjrNJhtAwR6hLsW7VxyzKeDuVI=
Subject key identifier: D9:20:6B:52:C6:00:80:BF:58:96:7E:2B:41:EF:E1:F7:14:39:02:A3
Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176
Certificate serial: 019F90C839A11FB3889D889E4275DA36A7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
Manifest number: 0327
Signing time: Thu 23 Jul 2026 21:01:08 +0000
Manifest this update: Thu 23 Jul 2026 21:01:08 +0000
Manifest next update: Fri 24 Jul 2026 21:01:08 +0000
Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: He91+h719ug0Qy9NV4SMygrOL1XK73UUMcJlXJPTK0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:39:a1:1f:b3:88:9d:88:9e:42:75:da:36:a7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176
Validity
Not Before: Jul 23 21:01:08 2026 GMT
Not After : Jul 24 21:01:08 2026 GMT
Subject: CN=d9206b52c60080bf58967e2b41efe1f7143902a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:e8:54:27:59:1e:a8:8b:63:f1:e3:77:12:
1e:63:f7:c5:a9:b3:14:4c:a7:27:9e:30:17:cd:5a:
fa:ff:5b:51:80:bb:fb:38:cb:25:35:bd:a1:4c:3f:
81:2d:cc:2a:6b:73:98:b8:0a:a7:61:ae:df:b6:e3:
03:ef:19:7b:ac:f7:f8:66:81:10:ef:3b:07:49:f0:
c7:97:02:7d:6f:1d:27:53:ea:65:f5:0f:78:20:dc:
b2:61:55:6d:da:d3:cc:70:bc:66:d3:30:c3:73:94:
a2:9d:cf:e4:12:d8:16:d8:28:e5:b9:b3:a7:8c:fe:
9c:cc:3a:82:fd:09:ce:ed:a6:1f:7e:34:36:3f:61:
7f:89:26:b0:18:27:89:ca:a3:28:56:cb:e8:94:f0:
b0:69:ae:ad:e5:8a:b9:2a:b0:be:ea:c7:71:db:dd:
ee:d0:bc:28:2c:c4:85:51:13:c8:4e:5e:ec:0d:57:
bb:90:0a:21:72:0e:77:af:d0:de:fa:7d:5f:9c:86:
79:f2:4e:a1:ef:b8:9c:63:73:83:f3:d3:d1:d9:56:
0e:d8:95:bc:bc:d6:40:68:94:26:15:a5:20:c3:9f:
cf:cb:33:c4:6b:92:8d:f4:b4:1e:1f:33:c7:66:c9:
84:f8:f8:8e:d3:eb:3e:a8:21:46:ac:47:9f:08:be:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:6B:52:C6:00:80:BF:58:96:7E:2B:41:EF:E1:F7:14:39:02:A3
X509v3 Authority Key Identifier:
keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:65:3f:51:64:3f:9a:b9:6a:ed:5c:f3:99:f9:64:95:74:d9:
b5:e2:d0:79:16:58:f8:f8:91:b3:d4:5e:c1:a0:7f:6f:10:bd:
a3:c1:bf:a2:9d:50:2d:b9:89:fe:ea:cb:5d:e0:26:a2:dc:52:
b5:25:a8:1b:a7:21:d7:be:18:be:3a:7e:9b:22:3c:d5:ff:61:
18:99:ba:99:83:2b:1a:d4:21:60:00:4b:f3:cf:0e:81:2e:f2:
1c:cb:4a:3b:ef:85:31:f0:47:b9:0b:3b:42:4e:ce:29:3b:aa:
a9:f9:ec:b6:da:b8:7f:bc:8d:8d:93:7c:a0:e8:3d:6d:76:7e:
28:06:46:91:76:4d:1d:9a:8f:cf:4a:aa:e9:ea:62:03:95:42:
0e:d1:db:f1:ed:8b:da:22:50:89:a1:d0:7f:af:25:4f:d3:8e:
74:51:90:f4:e7:2c:51:d0:65:45:24:ca:99:72:6f:9e:b2:92:
66:f3:3c:20:4f:fb:85:f4:13:84:14:16:64:4e:04:70:9e:c2:
8f:00:52:e2:17:52:4f:26:1e:24:67:f5:87:fa:b8:38:63:49:
4c:c1:73:e3:14:d8:79:41:0d:b1:1b:1a:2f:1b:4e:2d:08:3b:
5d:f8:bf:ee:97:c1:46:ea:e5:50:2d:98:b6:82:d9:17:b1:9f:
93:c0:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:32 2026 by rpki-client