Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: UbkcJZrcErNglR+Cfifi3wrKEBXNjnr+UB5evR7ovAE=
Subject key identifier: 99:31:43:59:DD:E3:BA:57:CD:FF:F1:D2:F9:38:95:8C:6F:4B:BD:67
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019F90C7B802D6162C66E335A5D2FCC55D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0CF8
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: DxloolnKdnjgy9tGrRHUm+jNc5lUrXEtY2eE03K1eV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b8:02:d6:16:2c:66:e3:35:a5:d2:fc:c5:5d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=99314359dde3ba57cdfff1d2f938958c6f4bbd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:78:a0:e0:32:39:3d:3e:e6:cf:75:f3:96:
99:c0:e3:f1:50:ce:d1:ec:90:12:e6:f3:64:5c:82:
a8:40:33:4d:c8:a8:70:df:fc:2f:29:43:62:64:81:
c9:df:a4:3b:3b:2d:a1:0e:a9:55:d9:09:c5:f5:1c:
e3:18:31:bc:f6:b9:d0:21:d5:4c:3f:00:6e:73:cc:
49:bd:e9:2d:93:34:6e:db:b4:09:c3:48:08:66:1f:
eb:ca:9b:69:68:90:05:f0:74:c3:0e:0c:f3:6f:d3:
ef:66:d2:0b:c4:cf:c7:51:fc:ca:ac:4b:31:26:b4:
04:c0:10:64:a7:43:42:78:9c:95:fb:f5:fa:71:de:
b0:8b:b1:3f:40:e8:fc:fa:16:9a:5a:47:3f:f7:14:
6e:aa:21:dd:43:b2:5b:1c:07:05:91:d4:20:d0:91:
db:37:8c:c4:31:ab:22:86:29:4c:e8:e2:68:ba:1c:
ee:5c:78:c8:e8:ed:d7:23:0d:d5:a9:e6:97:ac:1d:
11:37:63:eb:a8:cd:6c:6f:bd:ff:5c:75:6c:1e:c4:
8d:6d:97:a2:bf:6f:d0:78:ff:9f:9b:9b:93:13:12:
5b:9b:1c:65:9a:24:52:86:31:c0:6d:73:67:59:03:
b1:41:64:eb:bd:64:f0:03:b9:57:30:fe:d7:da:8f:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:43:59:DD:E3:BA:57:CD:FF:F1:D2:F9:38:95:8C:6F:4B:BD:67
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1a:8e:12:9d:22:53:6f:36:aa:70:59:2b:6c:29:62:2c:43:
b1:fa:d3:d8:88:fb:e2:02:db:46:cd:7a:4b:f3:57:1c:21:5b:
90:42:8e:5f:ee:02:5a:0a:c1:34:aa:fb:43:14:24:23:77:47:
6a:c5:f8:f1:7b:e9:84:33:86:2d:65:b4:9d:6a:bd:b8:d4:16:
a7:04:40:6c:c9:05:df:73:12:09:49:c8:c6:84:9d:67:7f:c4:
fa:bf:07:7d:2d:95:df:03:c9:46:88:3e:60:57:a5:a9:99:10:
8b:db:d1:7a:73:dc:7e:ad:f3:e4:1a:06:68:ea:ac:2f:e4:dd:
24:3a:1a:6a:d5:5a:e0:ad:ba:29:9f:bf:97:22:f5:46:f1:3e:
d5:0f:2a:c3:62:88:36:7c:53:42:95:d2:50:a2:26:80:59:fa:
7e:d3:c1:af:f4:76:0e:0e:7f:6d:da:4b:62:d9:47:b8:97:8b:
b8:ae:df:eb:4f:77:00:99:5e:05:bd:46:80:ab:fe:a7:c6:0b:
7e:c9:3a:74:e1:a8:6c:ea:69:2c:24:bc:ae:d9:0f:27:b5:5c:
cd:7a:4f:6e:1a:02:54:75:a4:77:e5:4c:8a:c1:40:9e:36:aa:
19:91:65:c5:77:fc:97:91:a1:4c:90:7c:bf:32:e1:b6:4a:d3:
83:2a:cd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx7gC1hYsZuM1pdL8xV2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjYwNzIzMjEwMDM1WhcNMjYwNzI0MjEwMDM1WjAzMTEwLwYDVQQD
Eyg5OTMxNDM1OWRkZTNiYTU3Y2RmZmYxZDJmOTM4OTU4YzZmNGJiZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC14oOAyOT0+5s9185aZwOPxUM7R
7JAS5vNkXIKoQDNNyKhw3/wvKUNiZIHJ36Q7Oy2hDqlV2QnF9RzjGDG89rnQIdVM
PwBuc8xJvektkzRu27QJw0gIZh/ryptpaJAF8HTDDgzzb9PvZtILxM/HUfzKrEsx
JrQEwBBkp0NCeJyV+/X6cd6wi7E/QOj8+haaWkc/9xRuqiHdQ7JbHAcFkdQg0JHb
N4zEMasihilM6OJouhzuXHjI6O3XIw3VqeaXrB0RN2PrqM1sb73/XHVsHsSNbZei
v2/QeP+fm5uTExJbmxxlmiRShjHAbXNnWQOxQWTrvWTwA7lXMP7X2o9B9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxQ1nd47pXzf/x0vk4lYxvS71nMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRqOEp0i
U282qnBZK2wpYixDsfrT2Ij74gLbRs16S/NXHCFbkEKOX+4CWgrBNKr7QxQkI3dH
asX48XvphDOGLWW0nWq9uNQWpwRAbMkF33MSCUnIxoSdZ3/E+r8HfS2V3wPJRog+
YFelqZkQi9vRenPcfq3z5BoGaOqsL+TdJDoaatVa4K26KZ+/lyL1RvE+1Q8qw2KI
NnxTQpXSUKImgFn6ftPBr/R2Dg5/bdpLYtlHuJeLuK7f6093AJleBb1GgKv+p8YL
fsk6dOGobOppLCS8rtkPJ7VczXpPbhoCVHWkd+VMisFAnjaqGZFlxXf8l5GhTJB8
vzLhtkrTgyrNCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:26 2026 by rpki-client