
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
File: 9-S-cMjIabsmSenLWJHpJ_TsiLE.mft (raw, json)
Hash identifier: Q2RrXaU3Z1aONicp/ixE4GZN/6yZUu5khgQq+TCluoE=
Subject key identifier: BC:2A:88:58:0C:84:8E:5C:CB:63:E3:63:DA:76:F9:B6:2D:17:60:0E
Authority key identifier: F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
Certificate issuer: /CN=f7e4be70c8c869bb2649e9cb5891e927f4ec88b1
Certificate serial: 019F916C5D2B8341F4688FE0C93E4ADB61FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:25 +0000
Manifest this update: Fri 24 Jul 2026 00:00:25 +0000
Manifest next update: Sat 25 Jul 2026 00:00:25 +0000
Files and hashes: 1: 9-S-cMjIabsmSenLWJHpJ_TsiLE.crl (hash: r/c8+H5xPZ49i2KmtZzresuuiApap0BPTr+EGV6h4uE=)
2: MqYbbxnxxd2l8E2Wyg96n63KYzA.roa (hash: 4dPDI82yOTVQJ0rKA6n7qAEvGI2ZyNWZlWVl+H4lZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5d:2b:83:41:f4:68:8f:e0:c9:3e:4a:db:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e4be70c8c869bb2649e9cb5891e927f4ec88b1
Validity
Not Before: Jul 24 00:00:25 2026 GMT
Not After : Jul 25 00:00:25 2026 GMT
Subject: CN=bc2a88580c848e5ccb63e363da76f9b62d17600e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:c0:eb:3d:eb:26:1f:7a:c1:2c:99:27:fd:
a3:71:d7:53:6d:9f:02:5e:5b:d3:83:92:ab:15:92:
73:1f:26:13:35:9c:56:62:ba:7f:15:80:a7:b6:15:
20:5f:9a:c9:41:b9:e9:24:52:63:92:74:99:b6:db:
76:eb:a4:49:35:5e:44:4d:8c:bd:27:76:1c:70:cc:
40:ca:91:dc:7e:1b:11:90:64:b7:00:a2:ed:84:e6:
15:ca:f2:52:81:ba:d8:cb:29:eb:e9:f9:9c:2b:18:
1a:13:10:ff:fd:49:72:c9:4b:e9:51:4b:2e:dc:51:
4c:82:b3:77:f8:5f:97:e4:26:fc:12:52:63:2f:7e:
02:63:a1:08:cf:40:af:2c:77:90:25:be:17:88:f2:
5d:bc:e4:11:b1:f3:74:df:3e:59:b7:c0:bb:62:af:
c4:24:f5:db:e9:79:5d:23:67:dc:8d:23:a8:70:07:
13:57:67:1d:11:2b:c0:4f:2f:45:7f:7e:6d:17:ef:
ec:71:83:ae:e6:d7:52:03:45:3b:8d:5a:ad:31:3d:
29:7d:4f:2d:8f:0a:8a:d3:df:eb:06:f4:53:0c:6f:
2a:4e:b9:81:ef:c8:1f:e4:e6:59:ba:99:66:01:ae:
24:d1:6f:00:09:ee:00:ec:21:25:0e:64:6c:1d:e2:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:88:58:0C:84:8E:5C:CB:63:E3:63:DA:76:F9:B6:2D:17:60:0E
X509v3 Authority Key Identifier:
keyid:F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:4c:b3:aa:ad:a3:ed:61:6a:7e:a5:30:64:ac:9e:8e:2d:
a0:9a:ac:4d:25:08:09:10:8e:0e:7d:2b:73:07:5a:75:90:d9:
3a:a3:87:62:c4:a6:22:72:bd:f4:1f:22:a2:0b:76:dc:94:ac:
50:c8:ac:21:17:8d:55:28:d1:02:e6:41:de:ff:61:09:34:ba:
70:dc:c5:8a:d5:55:27:11:69:f1:5e:c3:d8:91:f6:60:e6:9a:
b7:56:44:b9:7e:bf:ab:e4:6a:6d:23:e6:e8:6f:a2:c7:ea:d8:
0f:d9:c1:c4:8f:ef:75:ed:a8:ce:1d:70:a3:52:20:94:30:22:
dd:4e:3d:23:ec:bd:75:d6:45:ec:84:60:9e:95:46:ff:cb:25:
09:a5:54:95:56:e0:fc:9b:6f:67:9e:af:c2:46:54:19:1f:79:
71:b3:26:92:e1:0c:84:07:fb:c0:41:70:cd:51:7b:21:7b:14:
e0:84:ba:a4:4d:f4:82:69:23:07:da:ab:06:b2:68:ce:eb:97:
f2:c4:35:54:19:97:f9:d2:b9:1a:17:40:a6:e8:45:06:5f:c4:
00:90:ce:4e:78:b4:1c:ac:8c:64:1f:cf:f1:7c:39:38:14:62:
6c:51:b6:2a:86:3a:d2:15:d1:56:68:18:b6:db:6f:c8:6b:42:
bb:9b:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:59 2026 by rpki-client