Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: GJF2/MSxHE2hwMqUXm4RkQCDr4yi5EsUqZ7cnJ9BvLA=
Subject key identifier: 62:4E:09:3A:00:90:CE:54:9F:67:81:73:5F:59:01:24:04:72:5D:CE
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 019FADF7606348F92831381C9CAF7D6303E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: 01AE
Signing time: Wed 29 Jul 2026 13:01:38 +0000
Manifest this update: Wed 29 Jul 2026 13:01:38 +0000
Manifest next update: Thu 30 Jul 2026 13:01:38 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: 4c1mITz06dkQVehOPzGAGNe2t+jcLPnbT2DM1VvN8AQ=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:60:63:48:f9:28:31:38:1c:9c:af:7d:63:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Jul 29 13:01:38 2026 GMT
Not After : Jul 30 13:01:38 2026 GMT
Subject: CN=624e093a0090ce549f6781735f59012404725dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:6f:ff:66:ab:6c:f6:e6:5c:e0:0d:df:c5:
a3:ff:73:b7:5a:f2:59:f3:3a:b6:04:0a:3b:62:9f:
8d:7c:3a:d9:1e:3a:34:00:1d:f0:0b:01:fe:43:33:
79:ec:44:eb:ad:16:ce:75:7b:45:28:94:21:16:48:
8c:91:a9:e6:e3:e0:70:d0:0d:c5:d0:f0:80:2d:45:
b4:d1:31:c8:70:e8:59:d9:17:c3:f8:00:0e:87:8c:
58:36:54:d7:47:50:62:a2:77:a8:39:0d:71:c6:80:
81:ff:a2:69:f0:c2:70:90:68:d6:9d:81:20:63:64:
94:4c:f9:72:fa:96:2c:83:4e:d9:b2:9c:a5:38:c5:
83:f6:24:ed:9c:75:ee:20:37:66:69:89:ad:0f:3c:
ad:c9:a4:20:4f:78:e0:c1:a1:b7:b6:81:fb:24:70:
1d:4b:2d:c6:cb:56:54:95:01:09:1f:24:90:ac:c3:
46:dc:e4:0f:67:8e:4c:24:6a:20:e5:68:5b:30:38:
c2:c0:fd:a7:66:d9:ca:ee:7e:fb:9c:c0:90:58:2c:
88:59:b0:15:06:4c:0a:96:88:21:c2:69:24:27:2b:
28:4b:d5:87:75:4d:67:fd:f3:42:a6:e3:6b:a4:7f:
75:fd:fb:d4:b9:c5:14:6c:8e:3e:59:9b:fb:ab:6d:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:09:3A:00:90:CE:54:9F:67:81:73:5F:59:01:24:04:72:5D:CE
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:9f:7a:0d:47:0e:4b:be:e7:dd:ac:84:b2:92:17:5e:66:
2a:16:cb:a7:18:c0:27:82:68:65:97:c0:de:2c:24:aa:b2:a1:
85:e2:3b:8c:b8:db:b0:e7:f9:2e:d1:82:7f:03:ce:b4:32:98:
02:6f:4f:27:33:c7:2b:13:47:57:1b:2a:ff:08:1d:11:1e:0c:
81:3e:86:95:5b:fb:eb:b5:98:f0:b8:dd:02:98:e3:92:5b:8a:
ae:b1:15:ce:d5:b5:84:04:1d:69:ec:a3:65:5e:dd:50:dd:f3:
17:0c:04:40:d8:e5:53:7e:87:7f:64:97:b8:0b:1c:10:b2:09:
f5:9a:6b:71:5d:f3:7e:93:b8:62:c6:69:29:d8:d7:0d:59:af:
34:2e:c4:e8:4b:96:fb:43:87:67:10:9f:12:53:04:47:01:c6:
86:f6:57:19:fc:ca:8d:fe:b4:ee:9f:37:03:17:2a:95:45:b0:
4f:9c:47:80:5c:eb:37:fc:77:98:24:2c:05:81:76:90:e5:51:
d6:dd:d9:e6:96:18:5b:70:d0:66:88:6c:b9:63:16:5a:95:aa:
78:f1:d5:b5:1c:9b:38:5b:28:ec:b1:98:56:39:81:a0:83:a6:
0c:a4:40:da:93:10:81:4c:eb:f6:a4:95:5f:4e:9f:9a:ea:ea:
a1:8a:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:45:45 2026 by rpki-client