Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: nFu79YHBWva1DTreiRslaye+isDhL97ZPykH61a1XsA=
Subject key identifier: 49:BB:2C:96:EB:E4:21:A2:1D:B8:5C:CD:2C:EC:59:BA:32:13:73:36
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019F9090C51789BE325DA3A8EE10007F6BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:00:34 +0000
Manifest this update: Thu 23 Jul 2026 20:00:34 +0000
Manifest next update: Fri 24 Jul 2026 20:00:34 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 5+MxbPXzwE2yl53msHG/XQ+HyST4iaq5DM6O9UzMNs8=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c5:17:89:be:32:5d:a3:a8:ee:10:00:7f:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jul 23 20:00:34 2026 GMT
Not After : Jul 24 20:00:34 2026 GMT
Subject: CN=49bb2c96ebe421a21db85ccd2cec59ba32137336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:1f:9c:e1:39:39:31:16:27:83:a1:9f:59:
56:2f:a2:6c:ed:67:ff:06:04:e7:57:ec:05:da:25:
69:1f:9f:82:7c:ab:f4:96:ab:9d:d5:7a:88:1e:df:
f3:bb:0d:ff:c8:a8:f6:31:b6:dc:03:15:39:c5:41:
57:bd:bc:54:7c:f5:11:19:b0:c9:2d:18:bb:77:b1:
46:1c:b6:7f:1e:d5:65:06:60:3b:d7:32:3d:54:4e:
f8:bf:1c:6b:63:e3:d1:e2:b9:97:4b:91:0d:fa:46:
fb:37:a2:56:f6:0a:a8:89:ce:1c:af:a8:f7:14:21:
56:f0:6c:4d:95:1e:e7:a3:99:a0:0b:01:46:14:16:
af:4e:8f:b2:f4:51:e7:9d:09:f5:a7:8c:00:be:b4:
ed:0c:da:c0:67:d5:f2:76:77:a1:69:41:7e:26:07:
46:e0:3c:32:99:a4:91:b9:5f:17:f0:0d:20:55:0c:
fa:99:c2:64:2e:3c:1c:e3:bf:f3:c9:be:47:7e:a2:
57:f8:b3:38:65:e5:32:c2:d4:d4:13:a1:86:2d:63:
d2:76:2c:7d:ff:d0:22:92:97:93:4e:ac:ae:21:45:
5b:5d:51:6b:0e:d4:0b:0a:de:c6:0f:ba:1a:63:b3:
52:b5:49:0c:7a:2b:b4:af:da:e3:f7:f2:b7:42:39:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:2C:96:EB:E4:21:A2:1D:B8:5C:CD:2C:EC:59:BA:32:13:73:36
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:72:04:3e:c2:b6:23:c8:6c:a7:bb:09:f4:51:a3:92:da:c0:
ad:d4:cf:f9:a6:80:f4:f5:47:df:bf:c1:b7:bd:46:23:63:30:
57:6a:f1:67:65:83:d9:53:00:af:36:c3:94:00:d7:aa:b0:16:
af:0e:a9:db:90:5e:6b:0b:67:fe:66:22:7c:34:71:b8:49:5d:
ae:a5:76:e5:9d:d3:1c:4b:f8:8b:91:40:2d:0f:72:ba:28:7d:
de:ae:1a:fb:50:c5:a3:9f:20:39:cd:53:6d:4d:7d:60:2d:51:
ec:93:1f:0b:57:64:e2:09:04:1c:c6:8a:49:fd:7b:59:fe:4d:
bf:c5:af:82:6e:7a:c5:64:e7:e6:24:d2:b7:97:91:81:27:7a:
42:df:7b:1a:2f:b0:22:cc:a2:b7:30:96:d1:1b:67:36:bb:ad:
36:4a:6b:59:84:c8:39:c6:ed:bf:51:fa:63:63:cb:51:17:11:
b0:50:59:a4:d3:aa:f8:52:20:7d:60:9c:23:f8:ba:c7:1d:d0:
f6:32:9a:eb:ce:36:3b:96:79:a7:73:71:f2:00:38:a8:74:f5:
f5:58:96:28:83:73:5e:f8:0f:a2:e7:a9:38:48:3f:64:9e:fd:
d5:99:d9:2f:73:ee:4b:75:f7:f8:8c:05:69:50:af:11:2b:d2:
7d:30:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:01 2026 by rpki-client