Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: BmLcrBS/RwVDBVmtl1dRADmlXlfydbQ787VIh0rsz/k=
Subject key identifier: DD:D5:81:4E:9A:4A:E9:74:52:34:E9:35:17:05:F0:B3:A9:EF:88:7F
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019FAC0849855AF793E4DC0B45B0609B3A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 09A4
Signing time: Wed 29 Jul 2026 04:00:51 +0000
Manifest this update: Wed 29 Jul 2026 04:00:51 +0000
Manifest next update: Thu 30 Jul 2026 04:00:51 +0000
Files and hashes: 1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: miJX9WWBt8h72YH+MZb1uCFeWvqd3lkTe0lnYWk3xkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:49:85:5a:f7:93:e4:dc:0b:45:b0:60:9b:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Jul 29 04:00:51 2026 GMT
Not After : Jul 30 04:00:51 2026 GMT
Subject: CN=ddd5814e9a4ae9745234e9351705f0b3a9ef887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:ca:14:30:3b:34:14:1e:c3:4d:a7:56:a4:
02:bc:ef:e4:19:44:f5:76:6e:37:1d:c5:3c:68:0a:
48:6e:dc:28:3b:ee:bb:01:67:85:b3:47:2e:b6:02:
01:08:87:1b:b4:05:91:32:9d:e9:99:22:c5:55:a1:
d0:8e:11:e0:c5:72:37:a5:ad:93:f5:5f:61:b6:7c:
5e:d0:16:83:19:da:a3:18:31:0a:99:a8:e2:79:fd:
28:2c:4b:11:ba:b6:ff:33:94:07:e4:96:85:dd:e1:
fc:27:32:ec:a1:3d:9e:6e:3a:4a:a0:04:e1:61:d3:
9c:f2:40:5a:6c:55:a6:c0:08:27:1b:af:02:b9:00:
f4:83:a9:5f:32:83:6b:2e:12:58:b3:f1:55:45:f3:
27:0a:01:e5:d2:8a:1e:fb:09:6d:e5:fe:a6:f4:c0:
e2:84:8f:46:14:f4:f8:8f:7e:97:4b:4d:d4:11:08:
94:12:43:a7:c5:8d:3c:96:b3:b5:54:1c:99:28:64:
a4:d6:4a:ff:e2:2e:e1:fa:70:67:36:12:3b:05:46:
6f:78:b3:db:78:06:63:bc:22:70:af:9b:86:14:1f:
49:b1:bd:76:69:6f:e2:3a:fe:b6:f6:df:ab:71:69:
17:d8:74:86:0b:24:f2:61:71:c5:52:b9:c9:79:11:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D5:81:4E:9A:4A:E9:74:52:34:E9:35:17:05:F0:B3:A9:EF:88:7F
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:d2:c2:37:0f:97:23:0d:b5:37:f5:e8:38:c1:f4:8a:c8:
e0:91:c6:b6:d8:19:f6:d8:51:8a:67:c3:e6:db:f9:82:f0:54:
1f:aa:ba:5c:20:22:5c:61:d3:57:44:5f:4d:41:cc:09:7c:0a:
9a:8d:e7:bb:6b:b0:4e:a8:96:0c:4c:4f:37:84:42:08:bb:f8:
ce:ad:14:9f:11:b1:e7:97:f7:9f:6c:03:2d:3a:5f:5f:1f:97:
ff:10:b5:00:36:c9:35:08:14:65:0d:c2:76:dd:6f:02:b7:d5:
2a:ab:16:92:63:f6:77:e6:40:c0:4c:31:9a:e3:35:ec:ea:85:
a6:be:26:e1:67:a6:3b:00:d3:58:6d:d6:e6:42:8e:d4:8c:b4:
96:40:fc:5e:82:71:56:44:43:6c:95:86:49:15:74:7f:a8:37:
0d:e9:61:c7:cc:9a:b8:7a:10:3a:68:28:79:46:35:dd:80:70:
5c:11:82:1e:41:51:2f:9c:8b:48:ab:2a:67:82:9c:1e:6a:17:
b2:03:d7:5b:81:7e:36:36:17:31:df:0d:5c:95:e4:28:88:d8:
4e:bf:74:b3:27:1c:49:a2:17:26:12:b3:66:94:3a:53:5a:b8:
f0:73:80:23:c8:c3:53:4b:9d:2a:bb:30:85:7f:73:72:4a:15:
71:24:ec:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCEmFWveT5NwLRbBgmzohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3
ZmRmOGMwHhcNMjYwNzI5MDQwMDUxWhcNMjYwNzMwMDQwMDUxWjAzMTEwLwYDVQQD
EyhkZGQ1ODE0ZTlhNGFlOTc0NTIzNGU5MzUxNzA1ZjBiM2E5ZWY4ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6PKFDA7NBQew02nVqQCvO/kGUT1
dm43HcU8aApIbtwoO+67AWeFs0cutgIBCIcbtAWRMp3pmSLFVaHQjhHgxXI3pa2T
9V9htnxe0BaDGdqjGDEKmajief0oLEsRurb/M5QH5JaF3eH8JzLsoT2ebjpKoATh
YdOc8kBabFWmwAgnG68CuQD0g6lfMoNrLhJYs/FVRfMnCgHl0ooe+wlt5f6m9MDi
hI9GFPT4j36XS03UEQiUEkOnxY08lrO1VByZKGSk1kr/4i7h+nBnNhI7BUZveLPb
eAZjvCJwr5uGFB9Jsb12aW/iOv629t+rcWkX2HSGCyTyYXHFUrnJeRFcXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3VgU6aSul0UjTpNRcF8LOp74h/MB8GA1UdIwQY
MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt
ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh
LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCvSwjcP
lyMNtTf16DjB9IrI4JHGttgZ9thRimfD5tv5gvBUH6q6XCAiXGHTV0RfTUHMCXwK
mo3nu2uwTqiWDExPN4RCCLv4zq0UnxGx55f3n2wDLTpfXx+X/xC1ADbJNQgUZQ3C
dt1vArfVKqsWkmP2d+ZAwEwxmuM17OqFpr4m4WemOwDTWG3W5kKO1Iy0lkD8XoJx
VkRDbJWGSRV0f6g3Delhx8yauHoQOmgoeUY13YBwXBGCHkFRL5yLSKsqZ4KcHmoX
sgPXW4F+NjYXMd8NXJXkKIjYTr90syccSaIXJhKzZpQ6U1q48HOAI8jDU0udKrsw
hX9zckoVcSTs1g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:15 2026 by rpki-client