Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: 99nINo5tZUsIyEJvHD3jfWUZP2rl7cdBuM5TiVoSq0A=
Subject key identifier: BE:84:C0:7E:61:38:C1:A4:CD:29:D1:A5:66:DF:67:B3:46:28:82:79
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 019FA9071933D66C14299E3EC597092A616D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 01F0
Signing time: Tue 28 Jul 2026 14:00:42 +0000
Manifest this update: Tue 28 Jul 2026 14:00:42 +0000
Manifest next update: Wed 29 Jul 2026 14:00:42 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: 0Kklq02SBJNFPDlu5mAEeYeXkp4J2ydUb55YARV9/Mc=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:19:33:d6:6c:14:29:9e:3e:c5:97:09:2a:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Jul 28 14:00:42 2026 GMT
Not After : Jul 29 14:00:42 2026 GMT
Subject: CN=be84c07e6138c1a4cd29d1a566df67b346288279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:27:58:6c:2c:8e:23:86:22:77:a5:af:f0:
4d:1e:24:d4:c8:44:e1:d7:da:42:12:e5:2f:34:ff:
7b:3a:54:2f:50:ef:d5:d8:45:5a:3c:28:b5:85:3e:
c7:3d:cb:c7:91:8d:d4:dd:35:bb:04:4f:29:c0:f1:
e6:70:f4:8d:b7:40:85:f6:15:2d:7d:9d:3e:4b:9f:
4f:6d:72:eb:6c:5b:0b:bf:6c:7c:36:00:fc:5d:6e:
fd:c6:05:b9:25:89:b2:5a:a9:8f:0c:3f:d8:64:5c:
21:45:d5:8c:a7:41:8b:4f:01:44:61:dc:ee:7a:21:
67:da:4e:cb:aa:64:62:95:39:1b:a3:0c:2c:70:33:
e5:b2:11:a4:8d:c7:e8:b8:e4:37:99:9c:1c:7e:f7:
c8:85:ff:7c:9d:08:91:30:76:e1:62:12:0f:1d:ac:
c5:a6:17:3d:43:8b:f6:cf:19:35:62:fc:40:2c:46:
a2:47:fb:b2:23:36:1e:22:5d:15:0f:df:8b:6b:19:
01:e7:8a:5f:ea:79:a0:fd:f0:30:76:9f:9c:f2:43:
6c:71:e0:cb:6c:7d:f3:c9:fc:0b:9e:0c:69:7e:76:
a2:4f:98:c1:51:94:d0:23:20:99:af:c2:1a:5b:8a:
9e:d5:0c:32:30:e1:73:75:27:23:a0:8c:52:fd:1a:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:C0:7E:61:38:C1:A4:CD:29:D1:A5:66:DF:67:B3:46:28:82:79
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:41:68:a3:d0:ea:cd:24:b6:5e:1b:11:25:9e:0b:d3:eb:0b:
a6:11:26:cd:5f:8b:f3:cf:b9:3c:4b:89:6f:e2:8f:82:d9:c6:
d6:03:23:55:cb:eb:8d:27:11:15:5f:b4:9b:eb:07:77:58:7a:
1a:2c:08:a6:48:7b:7d:d1:fb:f5:2c:3d:7e:80:2d:7e:7d:69:
bd:c2:87:9d:92:9f:b0:17:d4:b9:b1:34:67:2f:87:85:fc:eb:
80:ff:e2:50:1e:40:73:fe:5a:d8:72:c5:18:e1:66:8e:fd:01:
79:25:39:7e:69:07:ba:8b:02:22:a9:e7:9a:e1:2c:b4:36:07:
bd:67:71:a2:be:61:36:d8:5a:1f:72:a4:01:5d:49:3a:d5:5a:
a3:06:60:7d:d2:8f:8a:4f:18:48:af:b4:13:b2:c6:a9:9c:53:
76:2b:d3:7a:70:54:46:2e:55:f7:db:2e:82:8f:e7:d8:6f:45:
96:57:34:4d:4d:2c:5c:9d:86:18:be:a0:a4:f1:e3:86:2f:29:
b3:a7:83:a7:59:03:a2:38:2a:ef:6e:c5:9d:bc:ae:15:8c:f1:
2c:dd:c1:7c:be:fa:93:44:54:ae:0c:d5:24:ca:6f:df:e1:2f:
ef:7d:87:d0:74:57:8a:1a:9c:3d:85:3f:53:a5:c9:95:0e:06:
d7:9f:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:26 2026 by rpki-client