Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: rFZU58yRB5XMMTX5b6fpCEn+kVDfsA+Goa4BQvdxzmA=
Subject key identifier: E4:3B:5A:2F:DB:06:B3:41:52:1F:14:BB:F2:B9:C9:ED:87:11:71:84
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019FAB99DB490AEA7182ABFCDAC5024899BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: 0111
Signing time: Wed 29 Jul 2026 02:00:14 +0000
Manifest this update: Wed 29 Jul 2026 02:00:14 +0000
Manifest next update: Thu 30 Jul 2026 02:00:14 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: mF1/gjzEqiHlJ8L2aUILr0X3dde+XSoSN9sYlJ/W7vI=)
2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:db:49:0a:ea:71:82:ab:fc:da:c5:02:48:99:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: Jul 29 02:00:14 2026 GMT
Not After : Jul 30 02:00:14 2026 GMT
Subject: CN=e43b5a2fdb06b341521f14bbf2b9c9ed87117184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:67:53:62:33:49:35:69:31:08:06:4a:9a:
ce:ce:07:4d:d6:25:f7:1b:85:a4:fc:63:4e:91:96:
c1:05:b4:1c:b9:94:94:be:13:c6:a6:fb:f1:45:23:
3c:d4:ae:d4:96:fa:7d:57:d4:69:24:91:9c:e8:94:
a6:db:29:e9:36:8c:86:7a:b4:63:73:0f:b1:8b:84:
f3:14:e4:01:13:11:99:71:a5:b9:5e:b5:c1:63:54:
17:e8:23:be:ae:f4:38:57:4f:64:0e:f7:01:5f:1b:
1d:bb:a5:98:00:48:0e:58:41:c1:00:a8:ff:5b:36:
34:ed:f2:17:4c:a2:be:a3:bf:fd:94:79:70:fb:07:
2e:eb:7b:d2:6f:7f:a0:06:bc:11:ba:ec:b9:af:25:
75:38:7d:3e:ba:e8:00:df:b8:79:50:88:37:58:20:
fc:03:36:d5:b9:63:b8:12:3b:3f:e5:44:88:12:73:
2c:a8:0c:73:35:90:fb:5d:fa:7d:30:01:a5:fa:e0:
cc:fd:c2:e3:37:40:76:10:de:32:17:27:43:7f:be:
7a:74:6d:91:35:8e:c6:8f:41:a4:8e:57:72:03:e1:
94:59:17:1d:36:cf:81:a8:0f:d9:a9:3d:19:9d:38:
dd:39:ca:cc:60:08:61:e1:da:14:99:55:ba:94:44:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:5A:2F:DB:06:B3:41:52:1F:14:BB:F2:B9:C9:ED:87:11:71:84
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:d0:b1:da:b2:72:68:9b:96:5c:b1:b2:ca:20:4d:8a:1e:
8d:d4:5f:0e:ad:91:70:d6:1f:56:93:52:3d:dd:32:24:d2:ab:
20:b3:98:8a:e7:42:5a:51:37:e0:10:17:e6:47:46:b3:7c:ec:
47:4b:1e:b5:e0:50:d7:13:1d:dd:f8:b2:ad:56:3e:47:1f:a7:
ae:b7:21:0d:1c:78:9e:05:d3:be:1b:ba:fc:7f:8e:a9:93:38:
67:2a:03:d9:06:c6:b5:42:b1:d8:86:bb:6d:57:6d:76:24:e6:
dd:e9:6c:2c:98:50:b6:b0:fc:ae:e4:ff:58:32:e0:c5:eb:fa:
4a:ee:22:5c:89:aa:dd:63:92:ab:5e:fe:e9:23:83:a3:4f:32:
a6:5e:92:e1:7e:c0:3a:89:6f:2e:e4:2d:38:2d:2f:5f:0b:d8:
d4:d4:5c:09:96:5c:1e:19:f0:3f:d4:14:83:9c:e9:5e:42:97:
f2:8b:20:c1:1e:a2:d6:13:ad:4c:94:a7:e7:ae:57:e5:77:b3:
fa:2d:d0:e8:f9:3e:68:dd:c5:7e:93:43:8b:51:7e:88:af:95:
f0:df:0e:da:c3:2f:aa:43:e4:52:01:e6:a6:75:2d:df:a6:77:
52:04:35:31:9f:e2:18:5e:0d:ff:38:17:f7:c6:df:81:bd:08:
5b:9f:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:44 2026 by rpki-client