Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: NwpSUfJwEoyIUrK2BZa3+q9gBIY7jjP4KSfVzc0LWh0=
Subject key identifier: 99:46:58:CE:BF:D6:C4:09:83:B6:72:21:AE:95:1E:80:90:8F:6C:7D
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019FA975357D3D01787FE5981736BD13A012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 06F5
Signing time: Tue 28 Jul 2026 16:00:58 +0000
Manifest this update: Tue 28 Jul 2026 16:00:58 +0000
Manifest next update: Wed 29 Jul 2026 16:00:58 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: V5w2dne4hHnlc+CmWA4uOXdVc3jFbJHXgR7mQMgsiOQ=)
2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:35:7d:3d:01:78:7f:e5:98:17:36:bd:13:a0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jul 28 16:00:58 2026 GMT
Not After : Jul 29 16:00:58 2026 GMT
Subject: CN=994658cebfd6c40983b67221ae951e80908f6c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:fb:47:90:d2:a7:a9:ba:69:3a:af:b9:8a:
d1:c9:35:fa:ff:12:0f:19:e1:64:de:b7:ae:d9:1f:
6f:bb:6e:25:89:b2:29:67:80:1f:b4:88:84:39:10:
bc:73:75:9b:07:26:31:41:cf:1c:b1:1f:1d:5a:67:
d0:d1:2f:84:57:df:f1:26:12:ba:70:cb:08:d7:08:
fc:f8:49:29:2f:78:a5:86:f3:40:54:07:04:3b:86:
62:d4:11:90:9f:b7:55:d4:6b:c5:12:2b:80:55:99:
c4:36:72:e7:76:45:a9:54:81:4a:dd:4f:ff:a1:b6:
55:25:17:d1:ae:b0:f0:be:08:8b:77:07:a1:5d:17:
23:ac:e2:c6:7a:15:a0:e4:ab:c4:cb:98:a5:bc:0c:
de:79:82:35:fc:34:0d:51:43:eb:cf:df:41:d7:20:
1a:4b:68:60:65:90:9a:fe:85:f6:fb:9c:1b:03:4b:
9c:98:a6:14:fd:92:5d:f5:54:e7:fc:b6:e0:da:90:
7b:f7:78:63:b4:7b:30:7c:5e:75:ab:58:cb:80:88:
c7:af:14:d2:b9:54:f7:e3:89:6f:81:c3:61:d3:c5:
74:75:76:ce:2c:11:73:6a:36:54:9c:f4:67:a4:ab:
d4:b3:c7:c5:d7:79:2b:0c:31:ec:da:06:85:9a:11:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:58:CE:BF:D6:C4:09:83:B6:72:21:AE:95:1E:80:90:8F:6C:7D
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7a:09:b4:81:8f:07:8e:f8:18:b8:6f:f7:e9:20:a0:b5:75:
30:c7:81:0b:bd:be:20:5d:f7:6f:a8:96:04:20:8a:cf:45:cd:
18:49:aa:45:e5:ac:70:75:47:56:a7:2b:c0:ed:d6:2d:60:b2:
ae:a1:47:86:54:45:ce:a7:81:1b:27:3b:f3:2d:d5:0c:29:c2:
62:9e:9f:0f:6f:7f:83:f1:db:d1:9d:60:26:5e:00:4c:72:dc:
ff:3d:2e:9f:2a:2d:3a:61:ca:46:b3:cd:69:ea:65:d1:a9:8a:
21:6f:61:28:8c:1f:6e:f9:13:b3:85:93:7b:fe:56:c9:3a:3f:
df:d3:5f:16:dc:00:91:f7:96:96:ed:5d:60:e3:14:fe:ba:29:
e5:41:12:94:1b:3e:56:10:7b:7d:d7:60:e8:20:81:2b:28:62:
ba:b3:d2:64:78:4a:37:9d:f8:1f:b7:38:bb:2c:11:30:c2:0f:
a3:13:82:c2:29:d2:35:3a:07:1e:ff:39:35:f5:37:30:f9:4a:
e5:c4:e4:79:8b:93:e7:53:c9:de:25:62:31:15:c3:94:95:1e:
30:9f:ad:e4:bd:10:96:16:f0:fe:16:82:df:a9:83:48:f8:1e:
b2:af:75:3f:5c:67:3f:f3:3e:b7:95:0c:05:94:f3:a4:27:3e:
99:05:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:50 2026 by rpki-client