Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: 0Yw+huTrwREnyqYWZt4TFKzI1/CtiuyiLwOwJhX22bg=
Subject key identifier: 71:60:CA:CA:36:1E:6A:20:60:AF:EC:3D:1F:77:1F:46:FF:B4:6D:EC
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 019FAB9A066F0D981899533DC6C0E4C4AC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 89
Signing time: Wed 29 Jul 2026 02:00:25 +0000
Manifest this update: Wed 29 Jul 2026 02:00:25 +0000
Manifest next update: Thu 30 Jul 2026 02:00:25 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: /f1YIajW7j0i9quOxX3zbOAcp/iznmgRMqsdLiKkaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:06:6f:0d:98:18:99:53:3d:c6:c0:e4:c4:ac:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Jul 29 02:00:25 2026 GMT
Not After : Jul 30 02:00:25 2026 GMT
Subject: CN=7160caca361e6a2060afec3d1f771f46ffb46dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:d5:fe:30:21:38:19:33:6e:a9:8b:1f:af:
5b:c4:ca:4b:1f:0f:1c:89:2e:e8:17:b3:84:d4:03:
85:b4:4c:93:8e:60:2c:f9:f3:7f:1c:d8:f0:bc:ed:
13:67:93:bd:8e:24:98:ff:f2:dc:7e:46:21:be:00:
1f:80:04:ad:dc:8f:05:a2:ce:2e:6a:d4:3c:58:75:
06:79:17:ba:ac:de:c1:9a:01:18:dd:35:52:de:09:
87:86:ad:b0:04:c1:7e:20:85:26:21:5d:3d:a6:38:
0b:ae:f7:cc:13:9d:4b:29:65:fc:91:9f:44:d5:bd:
bf:cc:7e:65:1e:36:e1:f1:1a:d2:c1:48:ce:92:88:
c5:4f:13:01:80:6a:f2:2c:a6:e2:93:79:67:61:fe:
d5:cf:7e:4c:ca:42:e1:bf:c5:2a:5f:7b:0b:15:07:
fe:e7:e9:6c:9e:a4:2c:66:0e:37:d0:30:4e:e3:37:
00:a7:ba:b0:e2:43:e1:c9:a0:27:80:c0:61:a5:a7:
74:5d:66:56:fa:db:9f:af:66:a0:0f:f9:03:a5:06:
d6:49:75:da:0c:2d:2e:50:68:44:c4:a7:2d:34:b5:
23:31:73:38:b1:c6:59:ad:d4:bd:8b:cb:e0:5c:92:
5b:2a:12:ba:c3:17:64:2e:db:1a:5e:7d:6c:82:07:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:CA:CA:36:1E:6A:20:60:AF:EC:3D:1F:77:1F:46:FF:B4:6D:EC
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:56:21:7b:bd:09:d2:56:ca:a9:c1:b2:a8:2f:fb:9b:a7:
f0:99:9c:3d:3e:aa:e8:20:d0:7f:2f:b7:0a:1a:e9:8a:3b:e1:
a5:41:a7:78:c6:d9:0c:ab:1f:ee:5b:3d:3e:f2:1a:f7:8f:82:
13:02:71:87:ac:e6:c4:11:88:c7:77:14:45:cd:4e:03:f8:12:
1e:15:17:0e:80:5c:ff:bd:ef:fd:80:70:15:0e:68:3d:d4:88:
eb:49:12:62:31:6f:68:17:c8:e8:03:d0:58:f2:c3:78:b3:ca:
9b:e9:ea:d2:39:d2:bf:9f:e8:8f:ed:71:9a:e3:4a:47:8e:17:
e9:ee:bd:eb:ca:5c:44:14:d0:b4:b5:1a:d6:77:ba:5f:6c:fe:
71:9a:0c:f0:5f:f9:c0:3a:90:9e:5e:0b:13:49:02:ca:a6:7f:
35:e4:34:47:92:8e:43:ca:94:f3:45:de:85:b0:07:22:c0:86:
6f:c3:78:c5:b3:d0:ec:a8:02:c7:20:04:a7:fc:bd:75:25:c5:
85:8e:f1:84:b6:5b:2a:b4:a5:49:bb:95:74:98:5e:16:2d:0c:
2e:c1:3b:9a:e3:36:e4:14:e4:a0:3f:bc:cc:3b:80:77:df:c0:
64:1e:fc:8b:cb:e9:a3:89:c9:3e:64:44:f1:39:56:7f:95:05:
b7:cc:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:14 2026 by rpki-client