Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: YD/gkOTuHYIt+phyebwuGvQ/Cg3h0H0axOJZN4hbEQ8=
Subject key identifier: 25:0E:75:5D:25:7B:08:E2:5D:65:56:9B:2A:C8:B4:49:60:08:BE:C3
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019FA82BD9F104DA48F390D6C8D58733732B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 10:01:13 +0000
Manifest this update: Tue 28 Jul 2026 10:01:13 +0000
Manifest next update: Wed 29 Jul 2026 10:01:13 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: /fvSaCfSlS8xRJRqVtZiAqQmAIlCaK2edkyAi5c58tY=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d9:f1:04:da:48:f3:90:d6:c8:d5:87:33:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jul 28 10:01:13 2026 GMT
Not After : Jul 29 10:01:13 2026 GMT
Subject: CN=250e755d257b08e25d65569b2ac8b4496008bec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:0d:6b:5f:6e:af:c1:01:a3:39:83:c8:63:
6c:c1:91:ad:c8:46:ca:d4:c3:2c:a8:01:e0:02:60:
bf:46:84:84:eb:5f:60:6b:e5:79:ec:69:e8:60:e7:
32:04:d5:c4:0e:46:81:10:5d:6a:c8:f4:6c:92:46:
8a:ea:f1:5e:01:a6:20:43:84:4b:3a:3f:9d:5f:50:
c9:7a:22:0f:a6:c1:16:21:0d:9d:fa:49:90:4f:ed:
b5:b7:fd:4f:4d:e6:05:dd:b3:89:4b:b8:83:ea:9f:
ff:80:7c:f8:18:4b:00:4c:ce:5a:e9:20:83:54:a3:
4a:3d:fd:fa:bd:d2:8b:e0:10:a4:b1:71:89:f8:80:
2a:91:ef:d5:ce:d7:42:ba:99:fb:94:03:7c:24:41:
a9:e5:a8:f9:50:e1:65:9d:17:46:34:e5:de:4f:9a:
a8:0c:95:d3:86:da:07:77:be:93:97:48:09:07:7a:
ef:6b:46:6a:a3:79:99:36:6c:c9:9d:c7:30:a7:8f:
22:c2:2c:d3:ee:72:65:58:24:bc:fe:66:85:4c:fd:
a0:90:a7:d5:c9:87:fb:96:e1:79:de:2b:d7:8a:03:
68:bf:32:c0:2d:52:7e:ba:8e:e5:bf:ae:67:bb:fa:
e0:5f:2c:cf:f2:df:dc:d0:95:cf:94:aa:ac:dc:ac:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:75:5D:25:7B:08:E2:5D:65:56:9B:2A:C8:B4:49:60:08:BE:C3
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:07:20:a3:84:50:92:7a:68:74:60:5c:1e:a2:73:d6:82:
1c:d8:b1:f9:53:16:75:92:21:e2:93:5b:c8:5d:d3:a3:36:10:
5f:58:50:5d:d9:c5:a8:d7:d4:d8:f9:f9:7f:52:23:18:2c:08:
39:f0:27:f9:69:a6:a0:e2:65:95:16:1d:70:c4:ca:77:1e:15:
4f:b0:52:35:c0:e6:a0:80:ab:a6:b3:c6:31:a1:de:13:32:a7:
19:68:7f:23:83:6d:d9:61:81:61:9a:d9:20:af:a2:f3:f3:6d:
82:46:77:57:13:38:4d:02:67:a9:b3:54:e5:e7:e3:90:8e:22:
26:eb:d8:c5:ad:6e:7d:64:5e:a9:87:2a:96:8d:43:90:6d:c9:
23:e5:d6:6c:72:82:f4:ce:fb:54:14:99:6c:1b:61:17:e8:9f:
3a:ee:ca:f9:8d:de:a3:aa:33:68:9a:f7:3a:93:25:21:75:6b:
05:86:a1:bc:e6:ed:8b:dc:14:61:06:60:f4:4d:82:fb:18:a6:
d3:87:46:ae:ff:c1:ee:ca:4c:67:92:be:a7:d5:26:75:5c:61:
31:62:4e:99:d9:ab:b4:52:13:59:e2:0e:c9:5a:e6:9a:41:9f:
59:f7:94:83:0c:3c:35:2f:59:53:1d:b6:54:f9:b5:dc:10:8e:
15:40:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:30 2026 by rpki-client