Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: SnkZ7sqEI4qWhG4OI05ZYG1dU1GAcScZfMi0UODJgUM=
Subject key identifier: 1B:06:CB:3F:9D:B2:02:D4:80:CA:23:DB:05:5C:7A:8F:5D:08:79:B7
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019FAA87D1948AA24778E293BC0B745B226E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 0355
Signing time: Tue 28 Jul 2026 21:00:55 +0000
Manifest this update: Tue 28 Jul 2026 21:00:55 +0000
Manifest next update: Wed 29 Jul 2026 21:00:55 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: ObKypEglBm31GaQYC8bbf0C0mBkRb08MLOTRfqsIltw=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d1:94:8a:a2:47:78:e2:93:bc:0b:74:5b:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Jul 28 21:00:55 2026 GMT
Not After : Jul 29 21:00:55 2026 GMT
Subject: CN=1b06cb3f9db202d480ca23db055c7a8f5d0879b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:01:a4:f5:83:6b:5a:79:cd:8a:3e:3c:6f:
6f:ae:5d:a6:96:58:00:c3:23:95:9b:75:1f:9f:ce:
ee:f6:ec:4c:c0:77:b0:13:78:e7:26:70:a0:e5:f8:
f7:2e:26:e0:45:79:85:0d:c4:31:d7:41:8d:03:c2:
77:7e:57:6e:e3:b5:a2:17:2b:d9:56:db:96:e5:ed:
5c:aa:87:ad:34:04:f7:18:68:e3:38:bf:f6:23:86:
f8:dc:8e:b3:1c:02:66:3f:b4:9d:ba:9d:aa:35:49:
0a:b8:37:8b:d1:93:26:36:ba:a5:d0:42:6a:39:6f:
74:6a:f1:e0:a3:23:61:64:e1:e3:9e:b6:b9:65:5c:
19:63:50:ce:c6:bb:75:3d:c8:d3:de:79:77:4d:d9:
55:04:0c:eb:15:6a:ac:1f:94:96:d5:7a:19:e7:c2:
ec:8c:6d:11:9a:d2:de:5b:86:ba:4d:74:1f:80:2e:
f1:e8:4c:a2:15:95:fc:20:e3:7f:77:53:72:17:46:
34:8e:93:4e:3b:e3:02:eb:d0:06:44:50:02:a2:af:
d6:79:3c:92:90:9b:9c:e4:ab:3d:e4:42:ca:ce:63:
ae:4e:ba:fb:96:d1:93:7a:2f:0f:0c:d5:f9:26:53:
ea:a2:af:78:0e:63:dc:0a:bd:9a:ce:29:39:c8:b7:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:CB:3F:9D:B2:02:D4:80:CA:23:DB:05:5C:7A:8F:5D:08:79:B7
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:00:44:d2:39:82:c9:e9:df:f4:9e:8d:7c:bf:78:01:23:
73:20:76:a2:bb:50:3d:ce:1c:8f:cf:3d:d7:7f:93:89:3f:aa:
db:04:92:cf:50:d8:e8:20:ca:b9:52:3a:50:ec:9e:46:14:f4:
a1:a0:94:71:c1:2f:92:15:23:fe:a4:24:ca:4a:7d:5a:5d:c9:
72:c9:c4:f3:b2:04:82:8e:63:8b:fc:eb:85:79:62:dc:78:00:
4e:32:95:e2:22:2b:e1:42:d0:af:32:7f:26:d7:6c:f6:06:fc:
c1:d6:51:a2:56:e9:41:c4:98:bb:32:18:3f:a5:4f:b8:46:42:
3c:41:19:78:f7:f9:f1:40:12:31:7a:a7:79:09:e2:06:d7:c3:
00:3f:4f:60:f6:9d:07:75:f7:5d:9b:94:07:a1:94:3b:85:39:
e6:05:a6:6b:25:9a:40:63:c0:77:38:49:ac:c9:6c:10:3c:ec:
1e:3f:6e:8b:1b:21:14:37:1e:47:50:10:56:9a:43:67:fe:26:
06:85:a2:49:2c:ed:f0:ca:fe:40:e1:66:4a:68:b1:31:a5:ff:
c1:0a:19:7e:1d:5e:e0:54:67:58:d2:7f:27:d4:a9:3f:66:b2:
40:5e:72:8e:a4:56:d1:61:fd:e1:d7:f8:c5:1d:14:50:cb:8b:
2c:f7:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:46:53 2026 by rpki-client