Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: Iy5L48CfVtMYfCI1/liHEb6Zl/lENAFlI0eqbyXIens=
Subject key identifier: 53:C7:6E:DA:43:5F:63:EF:8E:43:38:E1:8D:4E:FB:F8:92:E0:2E:DD
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019FA975207494613A484A95177C8DC3C3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 08A2
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: la0hoq6+U8XnBsiiwWhBEvw7ZJDNCP0zlALvIvPiT2s=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:20:74:94:61:3a:48:4a:95:17:7c:8d:c3:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=53c76eda435f63ef8e4338e18d4efbf892e02edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:2e:f1:a0:6c:58:e1:05:c2:a7:36:9a:b1:
b2:7f:e1:fb:a3:5e:de:27:56:33:23:14:78:66:0f:
97:71:ef:12:5d:ec:75:c4:be:b8:78:8d:3c:4d:aa:
3d:35:d1:91:9d:b8:ba:e0:8f:a1:2d:1c:78:da:b1:
02:bf:01:c2:1c:3e:c9:fd:3a:68:41:66:8f:6c:c4:
78:71:bb:1d:f5:70:2e:b5:45:9f:be:a9:98:4f:69:
34:48:22:7e:15:35:e3:dc:25:bf:d1:f6:d1:ed:1d:
d4:1a:09:20:05:d8:f7:7e:65:84:b7:dd:34:76:a1:
ea:b9:5c:ef:a7:1e:c8:26:9d:23:94:06:12:af:a4:
25:d2:10:d0:7e:d4:28:6e:18:7d:86:fd:77:c6:d1:
3f:73:7c:a5:19:32:b2:1b:0c:90:dd:0f:f1:f1:b1:
3c:26:fe:54:ee:7d:aa:2e:59:43:29:47:43:96:b6:
ff:1d:d9:be:0d:55:12:c9:da:36:fc:d5:42:bb:20:
fd:85:86:00:cc:d9:98:03:c8:96:d1:71:96:9b:25:
18:9a:ba:76:1e:19:6c:2d:ec:9f:14:36:d4:12:3c:
f3:91:ea:34:c8:41:83:b0:3e:87:71:df:6d:53:19:
99:8d:8f:f7:ba:a7:00:fb:20:08:51:9c:c0:5c:b3:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:6E:DA:43:5F:63:EF:8E:43:38:E1:8D:4E:FB:F8:92:E0:2E:DD
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c8:de:be:f7:c6:ce:3d:6d:48:77:e9:c1:02:2b:21:94:66:
0a:25:83:40:52:1d:c7:c1:aa:42:c4:b8:9e:80:51:96:d0:9f:
48:5c:66:64:4a:96:8e:6c:6e:20:14:92:44:34:ee:bd:e1:86:
2b:dd:ed:ff:1c:c8:d9:ae:a9:cc:c5:b2:72:db:33:c7:13:89:
fc:95:b3:62:9c:2f:f1:12:a9:82:72:59:f9:de:aa:91:b6:1a:
df:18:c9:18:d0:e2:01:77:80:5e:fe:54:5f:65:29:01:b4:85:
67:da:fa:2b:d8:12:8d:41:11:b3:a1:c4:30:6b:19:a5:f9:27:
68:53:98:66:00:52:4d:33:2f:bd:3b:96:5a:10:ac:61:a6:9e:
5d:84:0e:1f:e3:00:ee:97:47:8e:7a:3e:20:e3:46:3a:d7:82:
ad:32:37:d9:12:ac:d4:b2:68:bf:85:6b:8c:34:c3:bb:0f:1a:
89:58:d2:84:04:2d:41:84:6f:77:fb:64:e1:13:1a:56:86:3a:
b7:1f:7f:5b:ad:fb:6f:b1:24:73:64:cb:1e:21:55:61:8a:5c:
a5:e5:73:0b:3a:2c:06:cd:f2:27:95:bb:a1:37:8f:55:b8:60:
cb:2f:5b:8e:4f:04:64:31:79:70:b0:1a:09:25:02:00:d4:7d:
47:c3:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:09 2026 by rpki-client