Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: 3qAF/87VfMA8tXyXBD6oOBOUAUa0sOMXetDPP8ebGZs=
Subject key identifier: 21:AB:71:80:36:22:D9:6A:D1:90:C5:19:11:38:30:3E:30:BB:7C:69
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019FA8D09C024E3A7E1C23474D9183C33BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 09B7
Signing time: Tue 28 Jul 2026 13:01:11 +0000
Manifest this update: Tue 28 Jul 2026 13:01:11 +0000
Manifest next update: Wed 29 Jul 2026 13:01:11 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: NJJpiqDEfSy+Sz0GSf8Bf8kGLdLw9bzP4UvlvbOYDnk=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:9c:02:4e:3a:7e:1c:23:47:4d:91:83:c3:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Jul 28 13:01:11 2026 GMT
Not After : Jul 29 13:01:11 2026 GMT
Subject: CN=21ab71803622d96ad190c5191138303e30bb7c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:1a:9c:d1:a8:7d:81:7f:50:5c:6f:38:75:
76:a0:0c:de:9e:6e:dd:ae:60:86:2a:6a:38:5a:f5:
b8:c2:3d:71:0a:d3:0e:d8:d1:10:c6:7f:a3:66:82:
4f:c1:24:50:c8:61:51:ce:a8:62:4a:8c:0d:0f:64:
1c:e1:89:a0:d1:ea:ec:49:87:0a:65:70:7d:b2:7b:
00:50:2f:5d:eb:c5:f6:10:b5:cc:f6:94:40:14:db:
53:f7:5d:34:cf:7e:4b:b4:6b:1c:f4:a0:e7:4b:6f:
7b:7e:09:89:48:89:df:e2:e8:a8:f1:eb:d9:e3:88:
be:d4:5b:77:11:b4:04:f9:25:5b:2c:2d:a3:a4:6f:
51:fb:1c:2f:d7:e3:8b:5c:ae:13:14:3c:a6:5e:07:
9c:64:a7:2c:ed:82:30:f1:06:24:ec:1e:05:ce:c4:
b3:d1:88:1c:25:7c:6c:bf:cb:02:25:28:90:82:96:
f0:40:49:e5:64:2e:ad:d0:5e:66:f3:29:01:4d:6c:
76:7e:44:1e:92:f2:78:7c:b5:d7:20:26:29:36:0e:
54:7b:f9:a5:f5:86:95:a7:05:d7:ff:ec:fd:e1:d4:
fd:eb:9b:e3:e8:47:a0:43:0e:03:c6:5e:9d:12:c6:
e0:32:50:bf:fd:4f:65:c9:82:5e:e0:c5:46:5d:05:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:71:80:36:22:D9:6A:D1:90:C5:19:11:38:30:3E:30:BB:7C:69
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9b:36:ba:28:92:80:14:88:e4:c6:f1:ea:67:13:1d:45:ff:
75:80:aa:d8:56:f4:9e:10:db:1c:40:72:85:1e:d9:de:1f:44:
5b:c7:fd:a1:cb:e9:18:99:0a:3f:6e:ca:16:2d:07:ca:41:fd:
09:8b:15:ba:05:6c:78:a8:dc:d5:4f:74:ba:4c:42:94:60:fc:
08:f1:86:71:30:fb:f1:3a:01:18:37:71:ee:42:41:9b:d6:dd:
95:5a:71:c9:73:27:37:79:c5:a2:aa:9b:45:e6:c8:e5:cc:6e:
a1:72:99:cb:56:f4:f6:28:b0:bf:44:a5:1c:70:dd:6d:61:a4:
15:22:c6:7f:4f:09:b2:c5:c5:d2:f9:dd:30:42:b6:53:e0:3b:
95:d9:55:57:c9:13:30:78:28:7f:83:6a:5f:c5:5c:39:1e:cb:
0a:89:fe:9e:36:53:75:d0:0d:40:02:64:70:80:59:21:fc:7f:
43:20:d4:9c:7c:01:98:fd:c5:27:ff:ca:42:29:ff:f8:a2:49:
7e:59:02:2d:b2:b7:36:c3:af:92:14:56:3a:88:86:d8:45:c5:
cd:85:1e:9e:c4:02:a6:34:d3:93:b7:53:b9:71:f7:98:52:4b:
23:55:81:63:40:89:3f:ae:4b:b8:ab:2b:f7:f5:de:14:02:98:
f2:65:1a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0JwCTjp+HCNHTZGDwzugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwNzI4MTMwMTExWhcNMjYwNzI5MTMwMTExWjAzMTEwLwYDVQQD
EygyMWFiNzE4MDM2MjJkOTZhZDE5MGM1MTkxMTM4MzAzZTMwYmI3YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlwanNGofYF/UFxvOHV2oAzenm7d
rmCGKmo4WvW4wj1xCtMO2NEQxn+jZoJPwSRQyGFRzqhiSowND2Qc4Ymg0ersSYcK
ZXB9snsAUC9d68X2ELXM9pRAFNtT9100z35LtGsc9KDnS297fgmJSInf4uio8evZ
44i+1Ft3EbQE+SVbLC2jpG9R+xwv1+OLXK4TFDymXgecZKcs7YIw8QYk7B4FzsSz
0YgcJXxsv8sCJSiQgpbwQEnlZC6t0F5m8ykBTWx2fkQekvJ4fLXXICYpNg5Ue/ml
9YaVpwXX/+z94dT965vj6EegQw4Dxl6dEsbgMlC//U9lyYJe4MVGXQWNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGrcYA2Itlq0ZDFGRE4MD4wu3xpMB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5s2uiiS
gBSI5Mbx6mcTHUX/dYCq2Fb0nhDbHEByhR7Z3h9EW8f9ocvpGJkKP27KFi0HykH9
CYsVugVseKjc1U90ukxClGD8CPGGcTD78ToBGDdx7kJBm9bdlVpxyXMnN3nFoqqb
RebI5cxuoXKZy1b09iiwv0SlHHDdbWGkFSLGf08JssXF0vndMEK2U+A7ldlVV8kT
MHgof4NqX8VcOR7LCon+njZTddANQAJkcIBZIfx/QyDUnHwBmP3FJ//KQin/+KJJ
flkCLbK3NsOvkhRWOoiG2EXFzYUensQCpjTTk7dTuXH3mFJLI1WBY0CJP65LuKsr
9/XeFAKY8mUa2g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:43 2026 by rpki-client