Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: RCYLnQxgGDnefNGHejpJucO9pLOSfjEuIX6VcVlLnDI=
Subject key identifier: 48:33:A4:4B:91:9E:CE:9C:B1:87:A1:71:7E:AD:B8:70:07:6E:F7:51
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019FA9079474F3F0796A53A1187FCFB14494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 12BA
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: jXs2GExX1ezKVs0CN6i1Y1ydmeDumeoPpnmq923i60w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:94:74:f3:f0:79:6a:53:a1:18:7f:cf:b1:44:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=4833a44b919ece9cb187a1717eadb870076ef751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:77:73:27:70:59:81:c5:3e:72:a1:25:89:
80:ac:ac:f9:84:b5:5d:ba:cf:23:35:c4:8e:b9:27:
6f:84:67:11:f4:ed:a0:c8:1c:ec:c0:95:d1:12:59:
97:94:a1:3a:ef:b1:80:de:73:a1:5a:17:54:62:a6:
8b:22:92:0e:ab:6c:02:57:5e:47:a8:1a:0c:ba:25:
8b:9b:0c:47:84:a7:d3:71:14:bf:5f:0f:35:c9:60:
d1:40:b2:5f:7c:37:5d:28:ad:16:95:4d:14:21:d9:
0c:b3:bf:45:69:7f:f8:d5:1a:4b:39:04:2e:9d:d7:
38:55:ca:c1:db:42:ee:30:59:77:a8:2a:07:8e:10:
a3:e2:14:a6:66:e1:dc:8a:e7:1c:7e:2c:5e:75:ef:
66:1c:42:43:be:b5:47:c6:6c:a6:37:69:56:82:ca:
bf:f0:eb:c9:f6:78:92:0f:1d:b9:99:c9:99:75:a3:
15:d4:e4:43:ec:a2:06:f9:9c:41:d5:3f:2f:c4:97:
17:6f:b2:85:ef:6c:46:1d:96:6c:c3:92:58:13:f8:
92:fc:79:fd:b2:22:f9:bb:1a:2e:4c:26:a3:53:62:
b1:fd:3e:6c:7e:67:5b:a9:34:1f:32:f6:1e:83:12:
a0:f1:c1:9e:87:d0:84:ea:d9:cf:d4:6d:44:b9:1b:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:A4:4B:91:9E:CE:9C:B1:87:A1:71:7E:AD:B8:70:07:6E:F7:51
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:01:ee:c5:71:79:2c:97:dc:68:e1:b8:eb:8d:2b:3a:44:
ed:a4:6a:cd:b4:51:27:b5:cc:96:3a:60:3b:15:c9:63:7b:f5:
a5:94:0a:5b:a1:c9:31:3b:1b:1d:07:11:53:8c:a7:3d:9e:c9:
e8:cb:13:33:e7:e1:a3:98:fe:4a:80:59:cb:85:c6:83:74:12:
26:c3:13:a2:9a:67:ac:24:03:f3:34:f1:6f:85:2d:2d:61:4f:
e5:b1:c6:e2:76:f0:6f:ad:e1:14:2d:21:7a:41:7e:62:61:49:
e7:4d:c5:b5:b8:16:ac:28:fc:89:a5:42:69:49:8e:d8:35:30:
07:d2:b0:df:10:17:4b:27:d4:82:de:2e:2f:0d:48:76:78:be:
24:31:bb:3e:3b:3e:78:ae:82:a8:bb:90:ca:bf:cf:88:36:92:
0c:9c:3d:0e:99:26:9d:f2:8e:fb:25:54:e3:ec:2a:01:b0:b1:
9f:4f:a5:82:a4:ee:61:03:ab:ee:99:3f:a9:88:d4:f4:69:dd:
1f:7f:4a:fa:84:41:0c:f6:7b:7f:af:1d:7d:c1:1a:52:e1:8e:
5a:55:ed:93:06:4a:fa:f0:fb:4b:5e:82:07:27:27:4c:8a:80:
8f:b9:8f:d3:4c:3f:fd:79:11:11:2d:45:b8:52:27:00:3f:dc:
76:6f:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:20 2026 by rpki-client