Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: EFnorNrCrdkDLC7L5aQQqEmpq2WM9p6OQHPcfdUDDAE=
Subject key identifier: 45:CB:0C:08:8E:7C:01:19:19:79:3F:64:3F:AB:B6:11:84:6C:92:C3
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019FA7F4E4A4E49ABF587131FC49E258CEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 19E6
Signing time: Tue 28 Jul 2026 09:01:12 +0000
Manifest this update: Tue 28 Jul 2026 09:01:12 +0000
Manifest next update: Wed 29 Jul 2026 09:01:12 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: ZNMvI9Y2GxoGOjCN+vF29RRLI0HiXhS2UkhBfXdw4s4=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
6: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
7: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
8: zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa (hash: 1/lNAIoklxBbYzhTd9H1F8HgznVYVdAzulj82IXbCic=)
9: ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa (hash: rTgSzjLcrFW+Ml3XD84+8nUR06InVZZ/zrEf99lwY0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:e4:a4:e4:9a:bf:58:71:31:fc:49:e2:58:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jul 28 09:01:12 2026 GMT
Not After : Jul 29 09:01:12 2026 GMT
Subject: CN=45cb0c088e7c011919793f643fabb611846c92c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:fd:87:dc:0a:06:ee:d3:3e:c3:3d:58:4d:
9d:e3:8f:2f:1e:9f:44:e4:d5:4e:d2:ab:d8:ce:cd:
5f:3b:4a:90:96:85:af:72:d9:64:a9:45:03:ea:2f:
0b:a7:db:ce:7d:df:bc:b0:8f:c1:81:8b:de:c7:ab:
f9:6e:9a:87:7a:dd:4b:da:ce:e6:a7:98:96:5f:be:
08:f2:14:15:63:7e:d3:24:de:b4:e5:00:a5:9f:97:
c4:de:13:31:67:75:5a:62:87:05:3f:9e:ab:5c:be:
cb:bf:57:84:01:c8:cb:46:57:c1:3d:5f:e8:55:47:
5a:09:e0:c9:5b:f3:8c:c8:68:97:53:c5:f4:e1:51:
48:30:f0:b6:83:97:0f:6b:2a:af:32:56:89:45:f7:
4c:b3:6c:43:9b:74:dc:65:63:d3:fc:25:79:0e:96:
df:0d:55:d0:a8:4a:cf:e0:31:65:85:e4:4e:78:19:
d5:12:84:dd:02:37:10:af:c5:d0:90:a0:42:2e:71:
88:d3:f5:83:ad:fd:95:fe:a2:a4:2d:6f:0f:43:3d:
3a:e6:02:e7:af:46:f9:b3:7c:6e:d8:fd:a9:9b:3d:
86:2a:84:2f:ec:13:08:41:6c:88:ee:5f:3c:76:d4:
52:8d:af:fe:9c:fd:8b:34:6e:0d:5e:c9:0d:31:63:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:0C:08:8E:7C:01:19:19:79:3F:64:3F:AB:B6:11:84:6C:92:C3
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:ea:e6:b7:9c:ee:1b:f2:13:b4:a2:11:a2:8d:5f:c6:d1:
78:75:53:c9:27:26:b3:99:e5:bf:ac:9d:42:da:3b:de:83:de:
25:9c:4f:4c:8a:74:3a:e5:7f:34:31:2e:6a:a1:9f:78:d0:d7:
56:0d:4e:40:50:8e:4f:f3:2b:ef:a2:87:4f:12:77:0f:bf:71:
72:61:cc:75:e2:0a:36:d0:7d:56:fe:50:26:73:dd:e5:a7:67:
1a:ce:4e:dc:ae:97:93:ee:09:99:46:4e:04:ad:7e:bf:93:97:
13:55:82:0a:7b:78:10:c2:48:01:9b:6b:c4:ac:ec:51:a5:be:
52:9f:46:56:0c:01:ac:d9:72:bd:6d:8c:15:32:da:9c:64:91:
b0:00:ad:64:a8:ab:72:21:a4:a8:bd:ef:ed:fd:4e:a1:c4:9d:
ea:4f:a6:a5:3b:d0:24:24:60:9a:68:d9:24:50:65:e8:a6:6c:
14:98:3a:e7:fd:e4:58:81:b5:c5:d6:61:39:81:9a:57:59:ff:
f0:aa:40:5a:8d:fd:d6:9d:17:f6:87:9d:5a:89:76:1d:a5:80:
c6:2d:c2:57:bd:62:78:63:96:b9:fe:b6:b0:cf:a9:cb:ff:83:
49:76:b5:58:b5:01:4e:79:04:74:7b:48:08:9e:86:55:d4:9b:
33:b9:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:44 2026 by rpki-client