Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: K3iSucxfZcFHFB3szm/RO2WeDfmy4qPPQ43Cy+lpX/4=
Subject key identifier: D2:01:22:30:FE:4D:46:A5:F9:13:B0:83:CC:D5:BB:DB:66:44:FE:7D
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019FAB2C0D10B0B36AD537FD9F5686F13206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0E75
Signing time: Wed 29 Jul 2026 00:00:18 +0000
Manifest this update: Wed 29 Jul 2026 00:00:18 +0000
Manifest next update: Thu 30 Jul 2026 00:00:18 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: AbUrFL1eGjg1WcK1rfkp5/pvAEGj/JKY1Sams5vymCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:0d:10:b0:b3:6a:d5:37:fd:9f:56:86:f1:32:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jul 29 00:00:18 2026 GMT
Not After : Jul 30 00:00:18 2026 GMT
Subject: CN=d2012230fe4d46a5f913b083ccd5bbdb6644fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:a0:43:af:48:d5:3f:96:58:19:1a:2a:58:
95:2f:8d:2c:6f:d8:6b:97:4a:73:8a:38:77:f9:9c:
f1:08:b8:75:3e:09:05:1e:82:cc:f7:f8:b1:3e:e9:
2c:46:5e:d5:76:50:c0:dd:51:88:e1:2c:fb:29:37:
79:f7:9f:46:01:4e:10:e5:54:7d:22:97:a4:9a:04:
8a:ec:64:97:87:f2:bf:f8:2f:db:4e:f2:e7:43:d4:
b2:a7:2d:21:48:33:64:fd:96:c2:dc:15:65:dd:42:
cf:ab:a1:0a:a5:70:21:93:e5:9e:04:cf:45:7a:48:
5d:19:e9:ff:a6:c0:2c:fe:90:58:5a:d5:d3:fd:2d:
52:48:cb:0f:67:87:30:e2:b3:e9:a9:d2:cf:3f:34:
8f:40:cf:e1:00:f5:5f:11:c5:a9:db:9a:ba:3b:c9:
72:4a:b5:1f:fa:aa:34:c5:2b:4f:73:ed:f0:e7:b2:
71:19:65:9a:96:1a:ca:9a:81:e8:ef:c2:29:65:9b:
ac:6e:7a:d7:e6:71:d9:e7:fc:84:42:95:f7:73:25:
e5:d5:30:f5:51:d1:3c:19:9e:0e:f7:be:88:0a:a6:
94:8a:74:e8:2d:0f:0a:86:f7:18:1c:c9:c0:54:8a:
11:e1:7f:4c:6e:af:3d:5b:43:e9:5d:6f:75:db:42:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:22:30:FE:4D:46:A5:F9:13:B0:83:CC:D5:BB:DB:66:44:FE:7D
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d5:8e:b9:c0:f6:da:b0:a9:07:bb:da:b6:e6:e9:65:4e:ff:
b1:e3:f0:61:ad:14:a2:84:e1:b8:f4:d3:20:93:73:0e:9e:ee:
aa:d6:f5:11:01:c1:fb:92:e3:b2:fb:33:b9:39:81:65:d7:25:
47:1a:7c:09:23:dc:26:e6:58:0a:36:74:5f:74:11:e7:07:a7:
75:83:16:02:c2:63:d0:2a:f3:5f:bc:f1:70:d7:86:ce:97:97:
97:9b:22:bc:d8:45:2b:4d:08:7c:2d:4a:5c:96:cb:07:c8:2c:
8b:a8:0b:d1:b1:55:06:75:9b:c8:38:45:9e:02:c8:87:8e:d8:
70:d8:de:df:55:f8:13:84:b2:28:a5:19:88:7d:d7:f9:4f:8f:
4f:0c:7e:4c:5e:c0:91:a2:c8:97:fa:58:f6:45:70:93:7a:04:
bb:ce:bb:6e:9a:18:55:3b:dc:e3:dd:0d:9c:ff:80:2b:aa:35:
8a:9d:df:00:b4:fd:95:95:b0:d4:c5:89:75:0e:5e:d8:a0:c7:
d2:ab:27:58:9f:d7:bb:d9:34:fa:e5:6d:f3:dc:b5:ea:a1:b2:
26:87:28:01:00:10:86:2c:76:b7:62:8b:47:aa:f0:54:bb:bc:
53:40:73:c0:7b:46:be:b6:45:cc:74:28:79:3d:e5:b2:76:65:
12:c6:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:12 2026 by rpki-client