Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: VT2EfgFcsEuN0OatOtNu/8eU16oPOkZkXcYtJqQyzLY=
Subject key identifier: 3E:84:29:A9:98:D1:B5:77:B7:9F:C8:AB:4B:63:D8:9E:57:E7:2E:A6
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019FAB63787E19BA95ECA05DF2036E3D35C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 01:00:50 +0000
Manifest this update: Wed 29 Jul 2026 01:00:50 +0000
Manifest next update: Thu 30 Jul 2026 01:00:50 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: lsLiPlVkOIi9BEzJaB3e46EihosFk4VPMWS0ommNL6U=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:78:7e:19:ba:95:ec:a0:5d:f2:03:6e:3d:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Jul 29 01:00:50 2026 GMT
Not After : Jul 30 01:00:50 2026 GMT
Subject: CN=3e8429a998d1b577b79fc8ab4b63d89e57e72ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:3f:b9:66:76:04:00:98:77:36:dc:c2:44:
d0:9f:63:7c:fc:8b:ea:3c:93:70:7c:db:7d:29:03:
04:2d:3b:f1:53:05:ec:0a:ad:62:6e:38:4d:0e:27:
87:30:da:7e:0d:3d:76:b6:81:53:c4:df:9d:84:c8:
1f:ed:c2:f7:67:2e:e0:06:8a:48:e6:97:b8:85:56:
19:70:a2:2f:3b:75:50:f3:ff:b8:1d:e9:fa:59:87:
2c:cc:fe:f4:1e:17:e7:a0:6e:20:b7:3a:e5:59:d8:
64:06:07:b4:fa:a4:47:22:66:91:84:e2:66:fb:37:
22:46:3e:c8:c6:01:0d:52:c6:df:0d:90:13:fe:fa:
48:47:9c:54:7c:74:33:20:c4:a9:05:66:06:db:60:
0e:ee:30:18:a2:52:2b:52:90:f4:7b:2b:ce:de:89:
13:08:3a:56:85:01:24:1e:02:cd:71:44:db:c0:86:
75:89:e2:8e:db:d5:ca:22:49:b0:47:d1:bb:ff:1c:
f4:42:a0:a3:10:eb:54:22:17:52:c1:32:9f:ca:6b:
12:12:c2:b1:ce:b0:68:66:09:6a:90:2b:4d:ab:9b:
6f:35:b6:b2:ff:27:7d:ff:12:28:7c:ef:ca:1a:fd:
0f:45:93:4e:96:19:43:e8:c8:18:5d:1b:60:17:1c:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:29:A9:98:D1:B5:77:B7:9F:C8:AB:4B:63:D8:9E:57:E7:2E:A6
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:72:3d:5d:3e:e0:39:8f:72:97:fc:f2:8c:54:ff:35:4d:
08:8c:4f:e8:f1:ef:ed:14:46:9d:b2:d6:7d:3f:e7:f6:c6:f8:
b7:c1:62:80:45:2f:6b:8f:c6:cb:e5:1b:73:52:36:90:a5:d2:
d9:8b:40:fd:66:38:89:3c:3b:c0:16:e3:fa:05:8f:52:b4:c1:
4b:2f:ec:35:64:b4:fe:f0:5e:a8:57:aa:fe:78:66:98:c8:34:
b1:a3:75:a3:22:4b:f4:30:db:c4:31:6c:04:c1:24:99:f2:f4:
82:c3:62:04:87:87:18:95:0e:4b:7c:ab:63:51:09:fd:05:c4:
5a:b5:de:0a:df:e6:73:e0:1d:80:13:e4:12:61:79:26:dd:0a:
3b:be:ae:f4:52:c9:ee:53:e2:f9:74:28:0f:02:70:0b:13:73:
2b:69:cd:a5:29:62:85:7f:e2:24:24:18:01:f9:1c:0b:89:40:
90:65:39:57:f8:b9:05:e1:51:a5:ea:fd:95:4d:d5:29:bf:5b:
c9:43:4b:75:7e:06:4d:a5:71:f3:cc:e8:96:19:19:2b:f5:ab:
5c:27:74:50:c5:e8:ba:b7:e1:1c:88:a2:05:73:60:13:08:32:
a0:5f:cf:ec:34:73:91:ae:27:38:10:4b:a5:e0:e3:59:48:0b:
d1:fd:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:09 2026 by rpki-client