Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: lGC9UdeE2GgJHQoCFC83fUYE6o51Ld0LjNHrKPjqT5I=
Subject key identifier: 3C:EB:90:B4:19:42:49:1E:F7:D4:22:43:AC:A3:47:CF:BA:16:BB:25
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019FAAF601D0E75F31640CC1FB38CA321045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 08EA
Signing time: Tue 28 Jul 2026 23:01:16 +0000
Manifest this update: Tue 28 Jul 2026 23:01:16 +0000
Manifest next update: Wed 29 Jul 2026 23:01:16 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: 6avRRJ2OlZ0bVTvc0U3Idx34XGLoDs4ODNCpUOuA2QA=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:01:d0:e7:5f:31:64:0c:c1:fb:38:ca:32:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jul 28 23:01:16 2026 GMT
Not After : Jul 29 23:01:16 2026 GMT
Subject: CN=3ceb90b41942491ef7d42243aca347cfba16bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:e8:c9:0d:03:62:97:c7:b6:e4:92:a9:ba:
00:7c:5d:cf:70:80:15:af:16:1e:d4:bf:86:f6:24:
99:95:4b:f5:e6:71:3b:c6:33:25:9d:7f:0d:48:bf:
13:f2:a2:fc:52:2a:77:41:b9:5f:42:74:eb:d3:f5:
e0:9f:98:ba:1b:b4:aa:e3:7b:5a:6c:62:75:a7:90:
2f:06:01:a6:d1:98:08:60:94:bb:88:ad:eb:19:f0:
d7:ee:ef:ec:d2:09:66:d5:63:d5:4b:ee:38:0f:7d:
7d:9b:a8:3a:43:64:4c:54:b6:96:2f:d8:b8:e8:2f:
de:58:4f:64:77:58:2b:4e:0d:61:df:cc:83:5d:ce:
60:72:1d:ef:d5:4e:01:01:34:17:68:ae:35:61:c1:
9a:2c:b3:8b:9b:99:f7:40:e2:23:d9:e9:47:97:52:
c2:06:e5:a2:3a:f5:33:fb:cc:65:4d:93:2b:19:34:
17:09:4f:df:d9:e0:1c:d5:4a:ef:76:d2:ee:13:61:
1a:3a:fc:29:24:41:fc:0f:1c:42:b1:63:e7:bc:b7:
ce:5d:30:33:0a:35:5b:c4:b2:8b:3d:6e:fd:54:2f:
24:af:48:01:61:65:e5:ba:ab:1f:32:86:ac:0c:c0:
bd:73:06:00:eb:51:d0:25:a2:2b:b2:9b:95:8e:e9:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:90:B4:19:42:49:1E:F7:D4:22:43:AC:A3:47:CF:BA:16:BB:25
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:04:71:93:cd:b8:c8:ef:d0:42:e5:29:07:6f:b2:48:d4:
06:f4:b9:88:93:09:f0:09:e6:72:d8:06:54:84:56:0a:37:f0:
18:38:25:34:7e:67:84:44:fd:a3:22:45:3c:59:5d:af:cc:dc:
18:23:aa:f4:2d:1e:7e:46:c3:06:c9:1a:c6:29:97:6e:58:a3:
57:da:88:e4:04:ee:5f:ef:0b:2e:57:2f:ba:ef:31:19:9e:bc:
a2:ff:68:c3:36:20:8d:44:c5:40:5c:c8:00:37:ca:1f:7e:89:
1f:e1:48:bf:25:8b:8a:22:c5:e1:9a:13:a1:ed:96:60:96:f9:
07:31:c1:4d:d2:86:62:da:d9:ea:af:7d:e5:5a:39:0a:1f:d8:
f1:27:61:08:76:85:11:eb:1a:ff:0f:64:ac:af:b5:23:c3:6b:
59:2b:0b:0f:b5:60:e9:0c:e5:4b:b8:e2:dd:b7:a7:8c:a1:06:
76:9c:94:a5:6d:45:f9:c7:11:60:79:10:03:d0:4e:b6:e8:46:
f0:75:a1:08:94:5d:29:fa:5d:d1:f0:1b:28:74:3b:26:5c:14:
18:5f:d3:7b:7c:1b:93:93:0f:5b:0b:10:e6:6a:02:a6:33:ae:
a3:6b:4a:54:e2:05:f0:14:8a:33:52:9b:00:f0:7d:73:b5:05:
ab:03:f3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9gHQ518xZAzB+zjKMhBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk
MDRiOTUwHhcNMjYwNzI4MjMwMTE2WhcNMjYwNzI5MjMwMTE2WjAzMTEwLwYDVQQD
EygzY2ViOTBiNDE5NDI0OTFlZjdkNDIyNDNhY2EzNDdjZmJhMTZiYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/oyQ0DYpfHtuSSqboAfF3PcIAV
rxYe1L+G9iSZlUv15nE7xjMlnX8NSL8T8qL8Uip3QblfQnTr0/Xgn5i6G7Sq43ta
bGJ1p5AvBgGm0ZgIYJS7iK3rGfDX7u/s0glm1WPVS+44D319m6g6Q2RMVLaWL9i4
6C/eWE9kd1grTg1h38yDXc5gch3v1U4BATQXaK41YcGaLLOLm5n3QOIj2elHl1LC
BuWiOvUz+8xlTZMrGTQXCU/f2eAc1UrvdtLuE2EaOvwpJEH8DxxCsWPnvLfOXTAz
CjVbxLKLPW79VC8kr0gBYWXluqsfMoasDMC9cwYA61HQJaIrspuVjunhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzrkLQZQkke99QiQ6yjR8+6FrslMB8GA1UdIwQY
MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt
ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl
LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/YEcZPN
uMjv0ELlKQdvskjUBvS5iJMJ8AnmctgGVIRWCjfwGDglNH5nhET9oyJFPFldr8zc
GCOq9C0efkbDBskaximXblijV9qI5ATuX+8LLlcvuu8xGZ68ov9owzYgjUTFQFzI
ADfKH36JH+FIvyWLiiLF4ZoToe2WYJb5BzHBTdKGYtrZ6q995Vo5Ch/Y8SdhCHaF
Eesa/w9krK+1I8NrWSsLD7Vg6QzlS7ji3benjKEGdpyUpW1F+ccRYHkQA9BOtuhG
8HWhCJRdKfpd0fAbKHQ7JlwUGF/Te3wbk5MPWwsQ5moCpjOuo2tKVOIF8BSKM1Kb
APB9c7UFqwPzdw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:39 2026 by rpki-client