Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: lGjFUXH7iqjkV2Vzqk0zOCEBY83gsxort+aKDhE3toA=
Subject key identifier: D0:AE:6D:84:BD:4D:A8:C7:25:9D:C9:29:20:A2:22:C7:6F:B3:AE:EF
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 019FA93E6BC842BDC9F410434A0B6EA370C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 15:01:08 +0000
Manifest this update: Tue 28 Jul 2026 15:01:08 +0000
Manifest next update: Wed 29 Jul 2026 15:01:08 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: M3C0p5dWlNSa+Nwyu88eUI0X8UGrxUeXGBmELPehQ1k=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:6b:c8:42:bd:c9:f4:10:43:4a:0b:6e:a3:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Jul 28 15:01:08 2026 GMT
Not After : Jul 29 15:01:08 2026 GMT
Subject: CN=d0ae6d84bd4da8c7259dc92920a222c76fb3aeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:e0:76:90:66:33:35:f4:83:86:29:a8:fe:
9a:06:c0:c7:03:bd:5f:af:8f:64:f8:03:86:d2:23:
32:d5:16:09:07:ef:e2:a9:9a:4f:21:34:84:bc:53:
34:a7:70:18:aa:11:4b:4a:cb:94:41:2d:cd:e9:fb:
5f:70:88:28:16:d7:2a:72:30:8e:bd:bc:e5:e4:34:
f1:5b:d2:d7:e9:ac:e0:ba:7b:0c:d3:27:09:9d:72:
eb:22:f1:8a:6f:79:56:ac:28:92:3e:32:03:0e:b8:
8c:ac:af:7c:ec:66:d4:51:c0:64:44:f6:1a:cf:7b:
31:9f:ad:e5:d9:65:6d:a3:c4:92:fe:a8:99:0e:41:
95:c1:df:54:d8:45:24:e2:02:cf:97:28:b7:db:fd:
16:a4:b7:76:5c:37:f1:97:72:d3:06:a0:1f:b6:fb:
fe:7f:f4:47:bc:4b:dc:2b:6f:6c:38:92:18:e9:1d:
a0:bd:ff:96:db:1e:15:6f:cb:34:13:ee:a0:73:e3:
c8:6d:d3:74:1c:32:2b:34:a7:30:fe:ba:84:7d:8a:
42:f0:72:e2:89:4a:32:a1:41:f9:93:ad:9a:99:c5:
64:b8:d2:24:d3:14:cf:08:53:a0:e4:01:87:1c:b3:
01:6b:93:e4:be:da:b0:25:41:ea:ea:9a:fd:64:27:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:6D:84:BD:4D:A8:C7:25:9D:C9:29:20:A2:22:C7:6F:B3:AE:EF
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:e2:d4:bf:16:bb:4e:38:79:e1:c1:20:ca:d6:ba:64:08:
72:bd:af:28:4c:ea:45:27:4c:1c:07:06:05:11:d5:ef:f2:66:
75:70:a5:34:94:9d:f7:fa:4d:34:67:ff:ee:e2:6f:48:e1:2a:
bf:54:25:ed:42:f1:f0:06:70:82:3d:a7:c8:54:0f:9f:8b:ea:
dc:d0:4a:03:65:e9:c8:8c:65:67:44:d1:63:f3:e1:e0:d0:ce:
93:80:1b:24:54:f9:c2:1a:5d:6e:5d:3b:d2:38:0f:29:e3:7c:
b7:2a:3e:95:d1:de:fc:98:7c:eb:a3:30:3d:6d:4e:10:74:e7:
dd:d6:15:bf:27:54:7a:d1:58:76:74:b9:98:7f:c7:c5:be:ab:
40:7c:51:d7:dd:50:95:c9:ff:72:49:e1:82:cd:82:81:4f:e4:
6f:98:94:19:21:ae:77:da:56:ba:9e:0c:1f:55:a8:09:f9:29:
e0:28:53:21:ac:87:1d:63:69:48:76:f0:30:77:3d:6f:c7:01:
bc:2e:7a:94:03:16:79:09:e0:66:37:1a:87:21:fb:da:30:92:
9b:d0:63:1c:1e:f1:0b:63:bd:45:1e:fb:1d:e0:d3:1b:71:22:
21:45:ac:ab:64:86:54:ad:ad:1f:d3:90:a3:ed:45:c9:ad:22:
eb:41:f1:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPmvIQr3J9BBDSgtuo3DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2
ZjM5OTYwHhcNMjYwNzI4MTUwMTA4WhcNMjYwNzI5MTUwMTA4WjAzMTEwLwYDVQQD
EyhkMGFlNmQ4NGJkNGRhOGM3MjU5ZGM5MjkyMGEyMjJjNzZmYjNhZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gvgdpBmMzX0g4YpqP6aBsDHA71f
r49k+AOG0iMy1RYJB+/iqZpPITSEvFM0p3AYqhFLSsuUQS3N6ftfcIgoFtcqcjCO
vbzl5DTxW9LX6azgunsM0ycJnXLrIvGKb3lWrCiSPjIDDriMrK987GbUUcBkRPYa
z3sxn63l2WVto8SS/qiZDkGVwd9U2EUk4gLPlyi32/0WpLd2XDfxl3LTBqAftvv+
f/RHvEvcK29sOJIY6R2gvf+W2x4Vb8s0E+6gc+PIbdN0HDIrNKcw/rqEfYpC8HLi
iUoyoUH5k62amcVkuNIk0xTPCFOg5AGHHLMBa5PkvtqwJUHq6pr9ZCcnkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCubYS9TajHJZ3JKSCiIsdvs67vMB8GA1UdIwQY
MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt
YmZhY2JiMWExNzdkLzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk
LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp7i1L8W
u044eeHBIMrWumQIcr2vKEzqRSdMHAcGBRHV7/JmdXClNJSd9/pNNGf/7uJvSOEq
v1Ql7ULx8AZwgj2nyFQPn4vq3NBKA2XpyIxlZ0TRY/Ph4NDOk4AbJFT5whpdbl07
0jgPKeN8tyo+ldHe/Jh866MwPW1OEHTn3dYVvydUetFYdnS5mH/Hxb6rQHxR191Q
lcn/cknhgs2CgU/kb5iUGSGud9pWup4MH1WoCfkp4ChTIayHHWNpSHbwMHc9b8cB
vC56lAMWeQngZjcahyH72jCSm9BjHB7xC2O9RR77HeDTG3EiIUWsq2SGVK2tH9OQ
o+1Fya0i60HxqQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:35 2026 by rpki-client