Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: K4VDlldUQuGtoPW0Nzb9doejYF/HQWXwAc8BVgSb/Oc=
Subject key identifier: F2:80:A7:C5:E1:1C:CA:35:8D:29:28:87:93:FD:DD:88:B1:B2:56:6C
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019F943680B42F013A172F5CCC7FED314140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 13:00:27 +0000
Manifest this update: Fri 24 Jul 2026 13:00:27 +0000
Manifest next update: Sat 25 Jul 2026 13:00:27 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: t6Ii6DmOeNxiVC9oE51Q4jbjbAisdjughxInetJ1U3s=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:80:b4:2f:01:3a:17:2f:5c:cc:7f:ed:31:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jul 24 13:00:27 2026 GMT
Not After : Jul 25 13:00:27 2026 GMT
Subject: CN=f280a7c5e11cca358d29288793fddd88b1b2566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:1c:fc:7d:9e:6f:4b:50:78:6d:03:d5:92:
f5:b5:55:73:5d:f5:2e:10:cd:85:29:c7:70:f1:67:
e9:37:8d:38:f6:4b:fe:c5:00:a1:e0:b7:11:c3:44:
ef:94:c9:c1:2e:ce:75:dc:91:57:a9:63:17:bb:e1:
f4:d5:c3:18:05:5d:63:e8:1c:41:24:1b:de:0e:4b:
d9:a8:66:e3:d7:5f:43:d0:22:8b:bd:5b:3e:2e:06:
7c:f4:90:48:59:e0:60:58:5b:fc:c6:61:96:c4:1f:
ee:81:55:e1:8d:b8:a4:b0:ad:54:7d:71:ba:d2:c4:
c8:1a:15:e6:9f:0b:0b:e2:d6:28:4f:cc:a2:df:bf:
44:56:b4:12:3e:d9:a7:9b:a7:9f:02:53:27:96:88:
6d:57:59:cf:65:f5:41:57:8c:47:2d:9f:29:83:4c:
83:3d:d6:a5:6e:24:4f:3f:43:7a:51:fa:1e:00:ff:
f7:65:d5:d1:3a:58:42:d3:a1:01:be:fa:43:b6:08:
68:9b:c5:9b:d8:cc:4b:fb:a6:ee:1a:7b:b8:01:45:
1f:ac:84:fb:91:27:d6:24:8f:3a:1b:49:48:32:1a:
8b:b7:5d:64:49:58:08:cd:57:8b:44:e2:34:e9:46:
f4:c1:06:57:8f:a2:d7:92:52:d0:da:c9:ab:98:b3:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:A7:C5:E1:1C:CA:35:8D:29:28:87:93:FD:DD:88:B1:B2:56:6C
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:f4:a3:5b:c3:0d:ff:53:7f:72:bd:46:d6:69:47:58:9d:
95:35:eb:32:58:3d:f9:be:d0:99:47:43:f7:40:f6:d5:c3:0d:
a6:e2:22:b6:a6:41:69:a4:8e:23:3c:82:82:95:d1:2f:1d:f3:
db:d4:e1:8f:61:a0:6c:1f:b6:29:9a:97:39:85:22:45:bd:53:
1b:b4:ff:21:fc:9a:b8:36:97:79:31:be:6e:28:71:29:8c:ca:
51:85:11:bd:50:23:b7:2e:36:0e:2a:b5:91:52:6c:c5:61:3d:
4b:4f:d8:61:7f:ce:9b:32:c3:bf:a5:b1:05:b6:b5:3b:3b:c6:
2a:96:4f:6d:66:65:94:69:1b:14:df:c7:37:25:09:c3:cf:db:
64:6f:ec:6c:f2:fb:18:10:4f:a5:45:28:14:47:fa:33:41:13:
c4:57:22:8d:0f:d5:c6:f3:6a:e4:64:aa:aa:a1:8d:3d:64:42:
8b:75:53:32:08:5b:a2:8f:c7:f2:c5:8c:af:37:19:4c:0d:19:
29:73:f3:85:18:69:6a:c6:c2:a4:2d:df:c2:52:94:6d:3c:46:
15:c7:11:8e:7f:9a:19:44:ec:86:81:ab:b3:31:5f:de:df:c9:
00:a6:1f:b6:2c:66:84:b9:ef:31:76:e5:1d:23:56:a0:18:6e:
c1:0d:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:20 2026 by rpki-client