Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: lUw5hwafzp6+GmZaD8RXPWcU0AFTifN/iT8Epvrnb0o=
Subject key identifier: 70:7A:F6:42:9B:1A:10:A4:E4:12:E0:5F:16:9D:68:C5:64:E0:8D:CD
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 019FAA19D169D3F094C27674630A358A3931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1437
Signing time: Tue 28 Jul 2026 19:00:46 +0000
Manifest this update: Tue 28 Jul 2026 19:00:46 +0000
Manifest next update: Wed 29 Jul 2026 19:00:46 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: A5nWChMnTO8u6Q+eNo2q0phjiYiFL4yP1Os+KZyCXVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d1:69:d3:f0:94:c2:76:74:63:0a:35:8a:39:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Jul 28 19:00:46 2026 GMT
Not After : Jul 29 19:00:46 2026 GMT
Subject: CN=707af6429b1a10a4e412e05f169d68c564e08dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:30:ba:f8:f0:07:06:da:e0:8a:63:29:af:
b4:4d:45:73:fa:b3:3b:78:98:e8:98:3f:15:9c:94:
4a:2e:b4:52:f2:81:c7:71:02:70:28:bb:11:4e:6f:
76:33:9c:18:21:dc:70:92:3d:90:66:b8:02:cc:ea:
99:2c:c0:bc:de:a4:c2:14:b1:f9:cb:3b:b5:5b:65:
c3:c0:4f:bd:aa:e8:f8:75:94:ca:57:75:fb:e6:08:
cc:20:c3:5f:91:67:82:5d:66:30:37:9a:87:1a:f9:
61:e3:2d:91:ff:7c:7e:9d:8f:21:ca:4d:86:2b:77:
34:8f:0e:1b:1b:72:7e:92:73:da:5e:e1:10:e3:f6:
0e:38:e8:52:10:fa:4e:74:a9:5e:a2:1e:32:e9:00:
a9:6c:b4:e8:6f:e2:9e:83:c9:a7:25:f5:44:3a:01:
53:c5:27:f4:94:03:0e:4c:07:66:7a:20:34:e9:0c:
42:5d:d6:7f:4a:09:85:ca:07:43:cc:2a:69:2a:de:
29:f6:36:6e:11:14:8f:cc:e7:b8:8a:24:df:3f:f1:
cc:c7:b6:55:31:b9:eb:46:00:bf:f2:1f:80:62:60:
d5:95:a1:2e:ad:ef:c0:a5:f1:ec:21:52:82:9d:45:
24:6e:f5:87:c5:cd:54:3b:61:63:9e:3f:c2:19:e3:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:F6:42:9B:1A:10:A4:E4:12:E0:5F:16:9D:68:C5:64:E0:8D:CD
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:27:4a:c9:d3:92:4d:43:43:2f:ae:aa:49:42:ef:67:4e:
a9:4e:59:41:7a:74:88:6f:1b:ea:39:61:d7:1e:21:8f:62:fa:
68:e5:b9:a4:59:42:7d:03:e8:69:43:26:20:10:1f:f1:2d:d8:
ef:dc:b4:fe:98:2a:14:fa:12:6e:fb:c3:ba:c0:39:25:f5:b0:
7e:af:3c:46:a5:17:bb:4c:e0:9d:15:e0:3e:88:fc:40:0e:a8:
a9:92:cf:83:2d:81:24:13:eb:f2:56:05:e4:ee:1d:16:5d:af:
d8:0c:b0:02:b6:9f:e2:3b:dc:db:a2:fa:20:69:3d:ea:4c:1f:
2b:3c:54:c4:0b:5c:2c:c6:53:19:c1:f7:ea:6b:8f:48:ac:92:
30:fa:fe:d5:57:6d:7e:43:8f:93:3e:db:c3:51:70:f9:8a:40:
98:19:2f:e5:2e:73:89:4e:06:72:b4:da:b1:79:f0:0e:f6:0f:
b3:a7:a4:fa:60:ce:98:8c:d4:af:8a:23:02:62:86:79:fb:66:
22:79:a3:c6:0e:57:25:8d:d9:82:83:80:ee:45:fd:cd:4e:6a:
a9:eb:f4:da:2e:31:1e:41:47:1a:43:3a:f7:cf:48:99:78:43:
57:53:f5:51:87:e8:51:b8:61:99:97:62:97:d5:d3:8c:c4:49:
d5:2c:0f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGdFp0/CUwnZ0Ywo1ijkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YjMxMGU5ZDQ0ZTg0NzBkNmNkODAwOTU5MDY2Y2IwMGYy
OTFlZmEwHhcNMjYwNzI4MTkwMDQ2WhcNMjYwNzI5MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg3MDdhZjY0MjliMWExMGE0ZTQxMmUwNWYxNjlkNjhjNTY0ZTA4ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMUwuvjwBwba4IpjKa+0TUVz+rM7
eJjomD8VnJRKLrRS8oHHcQJwKLsRTm92M5wYIdxwkj2QZrgCzOqZLMC83qTCFLH5
yzu1W2XDwE+9quj4dZTKV3X75gjMIMNfkWeCXWYwN5qHGvlh4y2R/3x+nY8hyk2G
K3c0jw4bG3J+knPaXuEQ4/YOOOhSEPpOdKleoh4y6QCpbLTob+Keg8mnJfVEOgFT
xSf0lAMOTAdmeiA06QxCXdZ/SgmFygdDzCppKt4p9jZuERSPzOe4iiTfP/HMx7ZV
MbnrRgC/8h+AYmDVlaEure/ApfHsIVKCnUUkbvWHxc1UO2Fjnj/CGeNiTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB69kKbGhCk5BLgXxadaMVk4I3NMB8GA1UdIwQY
MBaAFPWzEOnUToRw1s2ACVkGbLAPKR76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYt
ZTgzNmViM2QyZjFmLzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYtZTgzNmViM2QyZjFm
LzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2QnSsnT
kk1DQy+uqklC72dOqU5ZQXp0iG8b6jlh1x4hj2L6aOW5pFlCfQPoaUMmIBAf8S3Y
79y0/pgqFPoSbvvDusA5JfWwfq88RqUXu0zgnRXgPoj8QA6oqZLPgy2BJBPr8lYF
5O4dFl2v2AywAraf4jvc26L6IGk96kwfKzxUxAtcLMZTGcH36muPSKySMPr+1Vdt
fkOPkz7bw1Fw+YpAmBkv5S5ziU4GcrTasXnwDvYPs6ek+mDOmIzUr4ojAmKGeftm
Inmjxg5XJY3ZgoOA7kX9zU5qqev02i4xHkFHGkM6989ImXhDV1P1UYfoUbhhmZdi
l9XTjMRJ1SwP8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:03 2026 by rpki-client