Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: tCMrcGgAf+KFYh4HKJL84PMSVHf0Xwlb0Qx6KZ3echg=
Subject key identifier: F4:7A:F1:C6:54:ED:98:E0:2E:AC:DB:34:E6:82:B3:5F:4F:6C:AC:F9
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019FA89A28F99678E4BC6B5A4154DA8296C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 106C
Signing time: Tue 28 Jul 2026 12:01:42 +0000
Manifest this update: Tue 28 Jul 2026 12:01:42 +0000
Manifest next update: Wed 29 Jul 2026 12:01:42 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: x2SIkvCYLt9CpoHBcpi3ivXQ7wiVsqxzK2i7+r5SLOc=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:28:f9:96:78:e4:bc:6b:5a:41:54:da:82:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Jul 28 12:01:42 2026 GMT
Not After : Jul 29 12:01:42 2026 GMT
Subject: CN=f47af1c654ed98e02eacdb34e682b35f4f6cacf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:7f:25:cb:29:e7:1f:38:60:63:4c:f9:dd:
d0:59:51:89:6f:0f:f4:4a:32:5c:42:2f:7a:21:68:
a7:4c:ba:77:5d:74:db:92:15:b8:b5:02:2d:ee:64:
25:79:5e:89:b6:29:67:01:91:66:c9:93:d7:55:6b:
0e:07:37:65:c5:cd:b0:69:f2:22:e2:11:d8:4e:84:
42:53:91:67:66:50:6a:2a:5b:89:e1:15:24:98:12:
e5:1d:74:03:13:c1:c1:f9:3d:b2:40:d4:f2:8d:fa:
07:44:e5:00:c7:22:7c:1e:3d:5e:c3:1f:75:df:c0:
26:f0:38:f7:3f:38:3b:30:b4:6b:30:44:11:1c:b1:
0d:43:4c:fd:4a:5f:e8:d9:ee:80:4c:0c:62:d7:29:
57:65:b5:3f:78:42:b9:43:2d:be:e2:ff:7a:ed:9d:
bd:66:93:68:a6:e3:b5:a4:77:87:2b:ae:bb:5b:86:
36:76:5c:24:4d:3d:03:51:c1:35:4f:98:a9:f3:53:
dd:d4:17:98:8d:97:18:6a:48:c6:9c:42:54:a6:78:
b2:fd:57:b8:8e:d4:b2:f4:2b:ee:1b:1c:e6:86:dd:
ba:ac:d0:e8:15:f0:f7:a2:1c:bd:37:33:b7:f4:94:
33:8b:ab:c7:57:5a:19:14:a8:21:21:c2:63:a8:8a:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:F1:C6:54:ED:98:E0:2E:AC:DB:34:E6:82:B3:5F:4F:6C:AC:F9
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:de:2c:81:3b:67:8b:95:9b:73:1b:74:27:3e:45:a6:7e:6e:
68:dd:36:16:bc:40:09:e2:91:db:36:11:7a:06:3d:4d:9d:f9:
d1:a8:bf:49:6d:87:48:e0:16:db:d2:72:71:4e:82:70:23:45:
09:3d:79:d2:16:d6:f6:1a:73:93:e8:88:87:ff:2a:f9:a8:ae:
8f:c1:15:7f:58:45:f3:a1:cd:ae:a4:a0:76:8a:77:a8:01:08:
35:55:53:1f:bb:be:fc:e7:86:cd:fc:a1:f4:e0:8b:07:40:4e:
6c:cb:ec:df:8b:2d:98:4b:b1:da:62:73:87:cf:26:76:7d:07:
9a:09:5f:45:b4:1c:7d:9f:c9:24:48:f8:13:a1:ff:52:33:62:
0a:1e:e7:18:b7:1a:83:9e:41:da:41:b2:bc:e7:4c:67:aa:ff:
98:df:5b:a0:f2:6c:7a:c3:7d:4e:be:d8:f7:44:37:f6:91:26:
78:47:87:c8:d4:26:00:2f:04:78:ea:1e:4b:e6:09:92:3d:be:
43:69:d9:f8:e9:24:97:19:86:34:c3:94:80:47:36:bd:ef:12:
80:10:57:c4:87:d1:19:f3:42:1c:bb:9e:f1:91:80:e4:b8:82:
73:40:d0:6d:f2:0f:b5:9e:c9:e6:a0:30:c0:f6:e1:dd:49:58:
d6:58:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:37 2026 by rpki-client