Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: g9j576jhXAen25er4Avyexk/LFk79DcvZTnxhU26oS8=
Subject key identifier: 8F:90:B2:81:C6:45:73:8C:1B:BF:2C:EA:C8:8D:81:20:B4:68:4D:A5
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019FABD19EEEA2E5B7F6F72EAC4A10A48667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 13C6
Signing time: Wed 29 Jul 2026 03:01:09 +0000
Manifest this update: Wed 29 Jul 2026 03:01:09 +0000
Manifest next update: Thu 30 Jul 2026 03:01:09 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: 1pKTlJtFesjSf954KTbw1zD/WW5C0Pz6yNSCJSarHdQ=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:9e:ee:a2:e5:b7:f6:f7:2e:ac:4a:10:a4:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jul 29 03:01:09 2026 GMT
Not After : Jul 30 03:01:09 2026 GMT
Subject: CN=8f90b281c645738c1bbf2ceac88d8120b4684da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:f1:ce:c8:81:91:e6:06:52:dd:82:ca:39:
ae:f9:10:46:6c:1c:06:0b:20:b7:76:5b:b7:21:be:
ad:00:d1:30:ee:9a:b4:78:a3:8e:71:37:5b:d1:6b:
28:87:a2:f7:34:61:14:68:1f:85:64:ea:90:ae:92:
33:3b:9c:f3:0a:78:d0:a9:f7:e1:c0:9c:56:14:74:
f2:18:1d:9f:06:c0:11:33:14:6c:7c:a0:ac:a7:80:
43:c5:bb:8f:99:d6:b5:ad:03:38:c0:7c:5e:2b:bf:
04:14:f5:89:a4:b5:8c:91:2b:dd:af:e4:c9:9b:96:
52:97:bf:03:48:4a:44:6a:2a:e0:81:59:3c:ed:ec:
37:c7:6d:58:d6:83:74:06:bc:b0:0d:dd:ec:ac:3d:
11:c7:9e:04:86:a0:d8:eb:08:71:8f:4a:6c:ac:fc:
6e:a7:a9:9b:5a:08:df:c0:f2:74:b1:e3:68:79:92:
a1:5c:6e:1c:30:8a:cc:07:56:56:69:17:6f:f0:10:
4a:35:f4:e6:56:99:92:91:70:26:ea:1f:eb:7a:dc:
ef:bb:a1:06:fd:a6:e1:8c:7f:0d:78:a2:1c:1c:d0:
23:5f:35:23:cf:a5:85:d8:9c:45:17:0f:a4:ab:8a:
11:c1:45:1e:53:b0:41:9d:88:11:ec:b3:21:98:6e:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:B2:81:C6:45:73:8C:1B:BF:2C:EA:C8:8D:81:20:B4:68:4D:A5
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c3:51:05:cf:fe:4d:ba:30:97:30:ae:f5:3a:e0:6e:a0:56:
95:64:74:ee:21:cf:1b:00:91:74:e4:2d:f2:9e:1f:d3:59:7f:
7c:cc:ce:0a:57:19:36:a3:6c:7b:21:f7:c7:0c:c6:52:fa:f6:
c4:ee:ea:53:c4:35:3b:21:33:bc:1e:c8:77:2c:55:a9:e2:56:
cb:fb:1c:83:1d:c9:77:cd:56:bc:f6:2c:d3:fa:b7:cb:52:d1:
de:ac:c4:88:b6:31:f4:f2:eb:8f:af:5a:4a:14:85:c1:31:11:
89:af:3e:0f:22:bf:04:be:6e:51:eb:6d:66:e1:99:a9:71:f2:
ab:08:6b:5e:c6:bd:6c:de:b1:a9:29:e7:16:3e:07:6c:45:2f:
b7:2d:7b:e4:25:6a:24:91:7a:47:15:d7:ef:92:3b:13:bc:39:
99:6a:f2:3a:83:fd:86:4a:7b:fa:95:58:ca:b1:cc:09:6d:fc:
1f:5b:33:34:ac:7b:96:25:32:e2:25:a9:e2:8c:5e:df:cb:96:
4f:8b:23:85:c3:e6:bf:95:29:10:6e:dc:85:32:d1:65:1a:77:
7d:c9:9c:92:85:a8:70:8c:b3:8c:58:13:be:47:2b:83:d9:e7:
98:80:06:6d:01:6d:d8:b5:ea:dd:51:e0:32:0c:25:9d:c2:d4:
67:46:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:56 2026 by rpki-client