Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: +oNlg6vpbtM1VHnR2ZJYIyozjvS+h6hAp6C0f/+022E=
Subject key identifier: D5:3A:EC:B8:6D:92:08:71:12:EB:39:20:9C:B6:9E:D1:4E:96:BE:E4
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019FAB63FE9EDEC829BEB59974AD0EA2D433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 19CF
Signing time: Wed 29 Jul 2026 01:01:24 +0000
Manifest this update: Wed 29 Jul 2026 01:01:24 +0000
Manifest next update: Thu 30 Jul 2026 01:01:24 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: 2gQ48bL+swrMCnrGqrsnD/VpVkRFmk/IyjD+35ywOt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:fe:9e:de:c8:29:be:b5:99:74:ad:0e:a2:d4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jul 29 01:01:24 2026 GMT
Not After : Jul 30 01:01:24 2026 GMT
Subject: CN=d53aecb86d92087112eb39209cb69ed14e96bee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:8e:18:e4:ab:d9:02:dc:1c:6a:51:03:9c:
2f:4b:60:0d:3d:f4:7a:2d:57:a0:94:73:d6:36:a8:
dd:17:dd:4a:9d:27:33:9e:88:00:16:aa:24:74:41:
5d:dd:4d:ad:82:10:0c:8c:a0:a3:8e:2a:d3:4b:cc:
d5:2c:62:11:94:cb:62:9c:9c:59:f5:6c:13:e6:2b:
d3:63:7e:11:2c:0f:35:64:78:a2:96:cb:b5:85:0f:
4c:ee:d3:60:d3:d8:1f:e1:ec:86:bb:83:fc:bc:f0:
47:8c:b8:b7:75:a5:80:8e:5b:f7:00:99:0e:3d:65:
1d:4e:88:d9:80:2e:c8:d3:c9:b4:74:d3:91:10:27:
9e:0f:2d:5b:50:ed:18:43:0d:43:3d:ed:04:01:4d:
74:c2:b7:8d:e1:ee:e9:57:51:63:5e:d3:54:b0:31:
c5:b3:b9:30:7b:3a:10:3f:c4:02:d0:05:9a:bd:1d:
58:a3:db:2c:b1:75:72:67:27:49:31:1b:aa:78:dc:
77:f6:70:f6:58:cc:a8:b6:55:15:95:de:93:04:79:
75:89:02:e9:86:69:55:31:7a:d9:d5:0b:48:20:bd:
be:ad:7b:cb:0a:b0:31:3f:f4:c9:65:04:7a:d8:9f:
35:e2:e5:80:95:33:33:04:66:f7:7a:3b:5c:6d:1b:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:EC:B8:6D:92:08:71:12:EB:39:20:9C:B6:9E:D1:4E:96:BE:E4
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:34:08:1f:69:14:cf:71:21:ac:4d:7b:3d:63:7d:6f:98:e9:
8d:9f:60:5e:a1:4c:f4:55:16:e5:c2:56:22:ad:72:88:50:1e:
d3:78:f5:81:30:7d:93:c1:67:29:11:b2:3b:72:22:a7:d2:b8:
c8:70:f0:76:45:86:8f:ea:ba:dc:41:a7:46:d0:81:e9:fc:f7:
3b:1d:fb:16:c9:74:cb:ae:c1:84:2f:fd:21:11:85:6f:e8:8b:
f3:f8:88:f5:a8:89:a6:bf:96:c0:2f:38:9f:c4:93:d9:66:7b:
3c:81:59:24:39:1f:cb:ca:8e:0e:c7:fd:0c:c8:04:11:9e:f2:
9d:dc:ed:ca:1b:f9:39:ad:eb:32:68:02:86:0e:de:31:cb:a3:
4b:ed:cf:aa:ee:a8:3a:ae:79:80:04:71:fd:f4:88:5c:0c:c0:
da:b8:73:99:a7:35:2d:dd:60:19:97:7e:b1:4a:86:e5:4e:8f:
13:17:51:c9:23:c6:7a:cc:92:48:ef:a3:87:d5:26:e7:c5:4b:
7c:5d:b8:06:32:34:8b:a7:4f:98:08:f7:5f:1a:6d:3d:ed:82:
12:0d:a7:5e:96:fc:50:f2:d8:d8:b0:3c:74:cb:90:ba:58:d6:
13:eb:fb:02:2a:a7:a4:79:12:3a:31:f1:ff:1a:66:11:30:f2:
69:68:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:26 2026 by rpki-client