Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: /6p4Wn+A44FHDpJGZXmFRPBKEJ1g7YKdCo0kP4kdbfg=
Subject key identifier: E5:E2:57:F8:C0:0C:25:9B:C3:2D:DA:2B:06:45:7F:F9:3F:FB:80:27
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019FA8CFD05A6E69DB9DA127DE8A381B034E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 19EC
Signing time: Tue 28 Jul 2026 13:00:19 +0000
Manifest this update: Tue 28 Jul 2026 13:00:19 +0000
Manifest next update: Wed 29 Jul 2026 13:00:19 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: p6R+UrBUvuWfW87HDG1ijjQXGAmBwpjWV7AEAtf6dRw=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:d0:5a:6e:69:db:9d:a1:27:de:8a:38:1b:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jul 28 13:00:19 2026 GMT
Not After : Jul 29 13:00:19 2026 GMT
Subject: CN=e5e257f8c00c259bc32dda2b06457ff93ffb8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:38:0c:1f:86:e1:e9:a1:52:20:5a:54:19:
9c:af:bd:7b:37:74:07:95:dc:01:8b:6d:5e:ee:5d:
5e:eb:3e:a1:8a:1d:40:b0:06:ae:02:37:54:fe:8c:
a0:40:80:c9:e1:b5:0d:4d:99:d2:e9:16:09:25:12:
a2:5e:7c:45:2e:82:c1:eb:c7:dc:a8:8c:b2:38:92:
0e:8c:e3:ed:09:dd:54:a5:ca:09:82:f9:5e:68:ec:
2f:0e:e8:fa:45:f4:95:89:cd:91:c1:4d:99:5f:5c:
81:aa:00:5c:e9:12:0a:c3:1d:a2:e6:0a:86:94:5e:
bc:cc:09:b0:26:21:f8:88:b9:85:19:70:ca:56:a2:
d3:8f:a4:43:6e:24:07:5b:91:48:de:ef:4b:d1:5f:
95:27:0b:45:0d:44:19:1a:0d:3c:37:f3:db:47:bc:
9e:5e:32:cf:a4:b1:c0:5a:f1:d8:0e:23:18:76:7c:
b7:e7:ae:14:b8:58:b6:7c:29:d2:da:a8:52:9a:85:
8d:59:dd:40:f8:fa:49:b9:86:aa:d4:1f:c2:50:bb:
c3:e8:2b:60:b0:f2:2f:da:ce:7a:a4:f1:24:e2:52:
80:42:c6:55:7c:c3:81:2e:7c:7c:07:80:03:56:d5:
e2:71:99:70:b4:bc:0f:54:77:1e:10:5b:a5:08:18:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:57:F8:C0:0C:25:9B:C3:2D:DA:2B:06:45:7F:F9:3F:FB:80:27
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:4c:0e:a1:da:8f:70:f9:16:ff:d3:a8:9e:ef:46:5c:2a:
e1:3f:1b:ca:ad:10:6f:78:f5:ca:c4:92:0d:60:76:cd:c4:5f:
1a:ee:2c:00:70:4b:28:55:17:12:93:2e:67:07:d2:20:23:9c:
3d:76:15:23:52:16:c8:f8:73:4f:c0:06:76:8e:25:6c:e2:f7:
e7:a9:7e:db:81:e6:1c:ee:3e:16:3d:cf:46:c8:59:3a:01:9f:
9c:52:53:c3:05:fe:04:d2:88:4f:b5:d6:91:08:6a:e9:b4:6d:
e6:da:85:88:a3:8e:a9:f4:a5:ec:b0:26:2c:48:eb:2c:c8:58:
9b:25:65:27:c5:85:f3:a0:88:33:56:d4:cc:ef:1d:17:1e:c6:
b0:8b:c7:fc:6c:d9:16:00:5d:34:45:0f:4c:99:1b:ee:f8:c0:
1b:d9:4e:a7:d5:7f:b0:44:82:d6:6a:4b:8a:7c:b2:72:f2:25:
56:67:c0:e7:af:99:d2:3a:54:b6:97:b3:2a:9f:ea:7f:1b:00:
3f:7f:f3:f9:c3:38:f5:d3:28:98:60:83:dd:c8:16:a4:7b:21:
63:65:e5:69:3a:da:fd:f7:b6:33:b3:a6:62:4c:6c:0d:e2:15:
eb:98:23:cd:89:d4:b5:29:3c:2a:7c:3f:bd:84:64:dc:6c:d5:
1f:50:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:41 2026 by rpki-client