
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: QqYtxFVByPQFtdeBXN2nk8TNW+JwwNebfTsUnd/MONA=
Subject key identifier: 23:F2:81:C7:2B:DD:A1:06:7E:45:55:AB:C7:5B:86:D3:A9:E4:CF:F3
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019F93FFCD61A43571D5603A537D4C3E0D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:42 +0000
Manifest this update: Fri 24 Jul 2026 12:00:42 +0000
Manifest next update: Sat 25 Jul 2026 12:00:42 +0000
Files and hashes: 1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 2mXBBN0lg1tEcfC0DFhZ6ILkiShxPl9Es4lcc5JKLEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:cd:61:a4:35:71:d5:60:3a:53:7d:4c:3e:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jul 24 12:00:42 2026 GMT
Not After : Jul 25 12:00:42 2026 GMT
Subject: CN=23f281c72bdda1067e4555abc75b86d3a9e4cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:bc:3e:59:9b:46:8a:af:83:8c:8f:a1:53:
ef:91:fc:f9:c4:26:0b:32:e7:39:22:54:34:25:65:
06:1b:e9:9b:21:b2:04:07:ea:76:b3:63:60:2f:c1:
32:95:3e:34:54:13:5d:46:40:88:89:44:9b:0f:6e:
16:74:10:77:36:c3:41:15:58:11:6e:6e:ec:7d:3d:
7b:d4:10:42:2d:3f:05:75:9a:f9:2b:2d:1f:e8:1f:
da:64:40:61:bf:3b:64:61:29:06:c5:29:24:44:9c:
63:80:26:73:2d:6a:19:07:0f:8e:38:47:48:4f:a4:
d0:d4:1d:ab:25:3a:f4:6b:b9:1f:da:46:45:39:14:
dd:a2:12:ac:92:31:6c:f1:b0:eb:a0:c9:db:f9:42:
a6:27:aa:6e:ed:21:25:a8:4c:a2:55:70:63:f8:55:
1e:e7:6f:87:67:44:9e:38:88:2b:01:0d:eb:1b:bf:
ff:33:bd:7d:e7:13:bd:89:0c:c3:51:c3:c0:4c:f6:
5f:8f:8d:f6:af:f8:09:59:49:68:9e:01:e0:83:be:
a3:92:d4:1f:8d:8a:3b:f0:3a:5c:7f:3b:3c:1c:49:
73:02:35:55:74:ab:eb:59:b7:45:c6:2a:e7:c2:8f:
70:09:5f:07:b4:67:62:5a:a5:53:d3:aa:40:b7:99:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:81:C7:2B:DD:A1:06:7E:45:55:AB:C7:5B:86:D3:A9:E4:CF:F3
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:c1:8b:ba:c9:cd:17:4d:0e:b5:51:ff:73:ea:03:e5:f5:
1d:45:cd:e9:24:5e:fa:c3:2e:7b:f1:6b:04:fe:9e:43:53:cc:
4d:a8:b0:63:a8:b2:f5:5d:5b:04:5b:0a:98:fa:fc:cd:15:e0:
6a:32:a7:5b:fb:fc:03:f0:f2:f2:9c:34:34:d9:ae:6e:ce:a0:
51:59:5e:91:ec:a1:90:6c:c3:81:31:f7:c4:49:43:0d:e7:64:
00:cf:24:40:94:a8:77:8d:d3:01:06:99:89:05:2a:c8:4c:52:
59:76:c8:75:c9:88:47:b8:63:d6:38:3f:ab:03:fb:73:0f:48:
51:89:c9:ec:7e:e2:4e:43:13:da:41:09:ab:a0:d8:85:de:5d:
b3:87:bb:34:00:72:67:2e:d9:4e:ad:b3:20:a9:4f:ed:dc:d6:
36:8f:bf:06:19:12:e6:72:54:e6:2e:04:5d:de:34:aa:5b:93:
9e:85:dc:d2:76:e3:c0:d0:11:a7:89:a2:21:f1:92:58:1c:ce:
4c:66:42:2f:f1:a3:7f:37:6a:3d:62:36:ba:64:fb:69:ba:d6:
c4:b7:ec:4a:13:3f:07:cf:f9:60:21:49:93:ea:af:f3:23:6d:
ef:0b:3c:7f:34:76:63:5a:f7:56:a4:52:45:be:89:f5:e3:36:
53:cc:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:09 2026 by rpki-client