Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: bEs7piACgmn/ORW+eUv4Wf4ZZDu3gmlSe+Z/YGpTJZs=
Subject key identifier: D6:1E:1E:36:CE:87:D4:9E:EA:79:4B:81:AF:77:B6:58:A0:99:85:A2
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019FA906BDCFE4524402D75536D18C52FDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 098A
Signing time: Tue 28 Jul 2026 14:00:18 +0000
Manifest this update: Tue 28 Jul 2026 14:00:18 +0000
Manifest next update: Wed 29 Jul 2026 14:00:18 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: FX1hnFzMf3iyAV7IjxfruXcZAFGYZhFEeEHzon0+Tp8=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:bd:cf:e4:52:44:02:d7:55:36:d1:8c:52:fd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jul 28 14:00:18 2026 GMT
Not After : Jul 29 14:00:18 2026 GMT
Subject: CN=d61e1e36ce87d49eea794b81af77b658a09985a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:3e:0a:e9:2a:f7:b4:2f:f3:58:a9:5b:a7:
4f:b2:28:f4:23:04:35:e9:09:aa:2c:78:48:74:3c:
f4:85:08:eb:7e:1f:71:22:37:8d:33:f7:74:ea:c9:
39:d1:43:2a:25:6f:c9:1d:00:c3:b4:ce:5f:e8:49:
4e:b6:ce:44:9e:95:55:fb:6c:c2:30:62:b8:f6:d8:
53:79:0f:a6:78:60:77:44:1f:0d:47:c1:07:d1:9f:
9d:be:2f:df:a9:27:e7:92:ec:94:41:17:1d:60:18:
bb:d6:ec:d4:ec:be:c3:20:be:20:07:f9:10:25:ae:
ee:e7:2e:56:1d:e8:ec:b0:7f:23:52:78:b5:35:40:
56:84:a1:11:77:ca:ba:a8:15:c6:e8:bd:02:ac:74:
26:e3:8e:65:32:9a:a6:bd:05:a1:59:04:ed:63:87:
0c:26:4f:7b:c1:57:7f:1c:43:3a:cd:93:52:64:b7:
39:30:47:f3:ec:f2:89:80:fd:83:d2:e5:90:6f:e2:
fa:21:2e:19:47:6f:4c:f9:c8:e9:c4:08:7f:20:e0:
c3:7b:aa:4d:c1:51:31:78:6d:27:6e:fd:26:ac:99:
3a:43:09:1c:b9:f8:4c:46:5b:53:0b:e4:c0:9d:7b:
8b:b5:b4:7b:b9:03:26:1b:71:2d:ed:e1:be:de:d5:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:1E:36:CE:87:D4:9E:EA:79:4B:81:AF:77:B6:58:A0:99:85:A2
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:de:4a:70:b3:2e:b1:c3:80:3e:af:e1:f9:9a:1c:e7:6c:
fa:ab:d6:04:91:56:75:7c:b0:28:3a:c4:aa:6c:d5:36:0b:74:
d8:9b:8c:b4:6d:ea:a1:46:c7:ee:67:86:a7:9f:f9:88:c8:0f:
0f:1f:a5:65:f1:9a:f6:99:c1:69:41:21:41:95:f1:be:ae:dd:
44:50:3f:8a:40:1a:d5:d6:91:78:8a:22:ac:e7:50:3d:30:b8:
cf:7d:e6:c1:53:4e:2e:a4:27:6b:4a:18:b6:d4:7d:2a:50:7f:
61:f2:fd:16:59:9d:f5:d8:17:60:57:bd:45:ac:98:b8:0a:b5:
c7:16:b6:96:2d:69:68:56:1f:b5:ef:93:dc:63:6a:82:8e:35:
44:6c:f7:a6:70:7a:bb:a8:c7:56:7f:c4:29:47:81:37:dc:25:
92:22:61:55:67:b6:94:97:a9:65:8a:5a:2e:b2:70:ac:91:93:
e7:60:c6:af:58:2f:0e:3f:5c:ad:4b:dd:0c:09:b8:51:16:f8:
68:a4:8d:f2:d5:1f:65:da:9a:9d:52:96:99:6f:fa:57:ed:cc:
04:77:6f:33:13:b3:3c:86:33:02:84:63:f9:0e:de:fd:e1:27:
ce:3e:7c:fc:0a:e0:01:85:1d:ed:4f:1e:6e:d7:a9:ff:77:41:
57:b3:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:48 2026 by rpki-client