Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: i49VI9KVkggYmWY4wrQ5G85dIBgURb9GzUz0Jqhl9i4=
Subject key identifier: A9:DE:00:C9:03:51:13:6F:8A:11:84:EE:DF:43:DB:89:AA:89:52:7B
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 019FA9AC1BDA2344B51AAE8CED0D9123C307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 88
Signing time: Tue 28 Jul 2026 17:00:56 +0000
Manifest this update: Tue 28 Jul 2026 17:00:56 +0000
Manifest next update: Wed 29 Jul 2026 17:00:56 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: 80HAGZrEGzqPuzxfpu0w/RC425Z9y9vl2kxWngiJfO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:1b:da:23:44:b5:1a:ae:8c:ed:0d:91:23:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Jul 28 17:00:56 2026 GMT
Not After : Jul 29 17:00:56 2026 GMT
Subject: CN=a9de00c90351136f8a1184eedf43db89aa89527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:c7:d9:f5:18:81:9d:41:31:e8:e2:01:0f:
91:8c:24:35:2a:d3:52:46:f7:64:34:39:bc:5f:4a:
38:bf:13:9b:e2:ef:a0:1f:9c:b4:bf:b4:36:fa:fb:
ef:04:b4:6b:ae:8e:fe:00:07:29:14:65:bc:4d:a8:
84:ff:10:24:b0:d2:95:d4:4a:39:6d:13:88:af:42:
14:b1:79:33:68:25:38:64:db:30:52:ff:d6:b8:54:
61:86:76:49:ec:fa:2c:81:7b:a6:39:b4:18:ed:5d:
e1:4f:ab:e5:af:35:e0:c3:ad:36:2d:cb:9d:40:3f:
c3:d5:67:81:99:88:9d:c2:e1:f8:01:e9:73:60:8e:
66:12:45:e9:e4:88:4d:b5:54:68:8a:56:28:b7:fa:
67:2e:67:da:7b:a0:80:66:e2:d1:49:0b:6d:98:21:
6e:24:2e:26:f4:86:af:75:23:c5:a9:b2:a5:02:0a:
9f:ac:6d:e8:08:ee:d0:c3:2d:97:08:c5:b8:15:9c:
57:4d:10:4b:e8:cc:37:d3:98:fe:92:5d:d7:09:76:
e3:24:20:6d:12:39:15:58:e1:d9:eb:86:68:a4:70:
07:3a:ef:f4:70:f7:38:11:90:dd:6a:68:7f:a6:db:
1b:15:0b:71:5e:53:0f:6d:4f:ec:7f:b3:d3:ee:d7:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DE:00:C9:03:51:13:6F:8A:11:84:EE:DF:43:DB:89:AA:89:52:7B
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:e6:43:69:24:9c:ab:db:d7:42:98:ff:94:3d:6b:57:5d:
48:da:56:b0:43:f9:84:d4:6a:73:ae:10:da:8b:26:5c:d0:10:
40:a1:aa:93:15:9c:16:db:2c:8c:d4:12:b9:c5:a0:af:60:40:
58:83:56:c7:c9:61:4d:20:1a:d3:6d:ed:fa:81:f1:b2:17:d7:
9e:0d:84:51:68:26:84:84:4e:d5:3c:9c:de:42:ea:59:ff:9d:
87:74:71:75:b1:26:4c:48:5a:7f:66:e1:f0:c9:c9:b9:35:14:
fc:ac:9a:be:a1:7f:54:3d:3b:a1:ae:84:9f:ad:65:54:f7:cd:
94:f0:f5:71:9f:02:61:a8:f1:20:75:04:a5:cf:ec:db:50:9e:
d2:4c:35:ed:48:33:15:e8:e2:38:b7:e9:09:c7:89:20:79:67:
69:93:0b:8a:76:fb:55:5d:15:37:e0:62:99:13:66:ea:33:80:
a6:87:fe:dc:61:6d:5a:d6:d7:b1:7b:d0:0b:a3:d9:98:03:f8:
ee:bc:c9:d0:82:80:7a:fd:3a:5f:7d:ba:b5:70:56:fd:8f:b8:
e5:d0:71:49:68:11:66:78:3e:5f:6f:5c:34:a1:aa:3c:64:71:
ee:cd:51:9e:94:e3:8f:d7:ed:e8:cb:aa:1a:cc:6a:9f:48:55:
dd:c2:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:02 2026 by rpki-client