Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: /M4/7dKev7rPYyJRhNCUEvZ7n4fNq3CP7wqZZZv6CQk=
Subject key identifier: 57:04:D0:2E:1D:8D:09:B1:61:72:E5:F4:F1:CF:BE:6A:F2:6E:20:F6
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019FA9E267AC58A2E732B0ADCD65F2238C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 1337
Signing time: Tue 28 Jul 2026 18:00:14 +0000
Manifest this update: Tue 28 Jul 2026 18:00:14 +0000
Manifest next update: Wed 29 Jul 2026 18:00:14 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: FXk/qh6Ir5RZ0jQHgw98CHIu0eEG+9J1KFwwJchJrMc=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:67:ac:58:a2:e7:32:b0:ad:cd:65:f2:23:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jul 28 18:00:14 2026 GMT
Not After : Jul 29 18:00:14 2026 GMT
Subject: CN=5704d02e1d8d09b16172e5f4f1cfbe6af26e20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:e7:5c:9b:82:02:d7:29:5a:fe:e0:17:a6:
51:37:5d:52:40:55:36:fe:9c:4e:1b:99:53:50:29:
63:e3:6a:db:14:7a:b1:73:00:c2:16:5e:96:6a:05:
bb:4e:23:8e:d9:af:5d:60:8d:84:fa:5f:a8:d2:bc:
65:01:c5:4b:49:b1:e2:8c:b7:93:f7:6f:13:71:ea:
f2:13:25:1c:6d:e2:13:cd:8f:d3:0d:e9:88:cc:51:
99:3d:25:f9:86:c7:81:25:54:3c:2a:1d:68:2f:a9:
12:2e:55:cf:c5:d6:42:7b:9b:ca:8b:d1:f8:a0:cd:
20:c7:9e:d0:f2:dd:02:ff:87:b2:11:98:67:29:b3:
4b:74:e8:f5:f9:15:31:fd:47:69:8b:26:16:1a:fe:
70:fa:2d:8b:d2:57:38:a1:71:1c:ea:5d:2f:32:03:
86:7a:72:2c:ea:07:61:79:96:77:f9:35:ee:e0:0b:
41:bc:78:e4:57:ba:19:3d:5a:82:7f:84:6f:88:ef:
67:08:2d:a0:6d:7c:a7:5e:5f:10:e4:11:62:14:4f:
4c:69:70:d7:f1:25:67:79:49:42:60:27:28:00:01:
09:59:d2:9b:fb:b7:f6:e1:ae:b1:8b:6e:95:86:83:
31:42:72:60:b7:c6:f3:7c:36:f4:5e:ef:d5:79:5a:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:D0:2E:1D:8D:09:B1:61:72:E5:F4:F1:CF:BE:6A:F2:6E:20:F6
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:94:07:fc:ef:4b:4e:cc:35:40:51:80:b2:d1:ba:d7:82:57:
cd:1c:c8:68:ac:ee:43:ca:e6:ff:e7:e2:51:60:62:c1:63:52:
41:17:75:bf:39:da:aa:83:e0:0f:bd:ad:f5:ae:82:03:57:41:
2c:27:a0:50:10:78:44:7b:2b:87:b0:9f:14:da:72:8f:cc:9a:
84:9d:6d:3a:e4:9d:9c:bc:73:7f:86:04:20:5f:24:4f:64:0a:
a0:a5:af:21:9b:b7:ad:07:93:95:8c:db:86:7a:ab:4b:47:de:
92:88:3f:41:8d:81:f3:19:cb:cd:2c:8a:b8:cb:e4:23:2a:d9:
2b:46:7a:b7:5b:98:c2:8b:97:97:51:04:4c:4f:ba:8d:ac:16:
d1:f0:a0:9c:44:1e:09:b5:4a:93:a0:81:e0:cc:0f:e4:14:3b:
9a:54:58:11:77:b5:59:fd:d2:5d:96:53:69:6d:8f:c0:36:aa:
5d:89:09:c5:1a:0c:02:97:2a:85:a8:ac:f6:8f:0b:3e:14:f8:
b8:32:56:39:53:8b:ec:cd:e2:2d:af:7d:f8:61:56:81:df:ca:
2d:b2:8c:fa:73:f3:e5:ad:6c:dc:99:3c:cd:92:71:b0:35:86:
14:9c:e5:da:fc:1f:e3:12:32:ba:fa:45:66:6d:03:5c:b9:23:
60:76:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:07 2026 by rpki-client