Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: K6WIIXScp/1O/qYdrYo2zClDLvDFbsUdne8ieQFLY4Y=
Subject key identifier: 40:D3:3D:2D:99:02:99:CD:46:E2:4C:B0:E1:8A:A9:92:37:30:C5:90
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 019FA862600A23324648281D489186DD69D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 11:00:47 +0000
Manifest this update: Tue 28 Jul 2026 11:00:47 +0000
Manifest next update: Wed 29 Jul 2026 11:00:47 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: 6b8hExPo4izRENhQxtK/InVJA/6ug32XGT+8Sk3ONjc=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:60:0a:23:32:46:48:28:1d:48:91:86:dd:69:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jul 28 11:00:47 2026 GMT
Not After : Jul 29 11:00:47 2026 GMT
Subject: CN=40d33d2d990299cd46e24cb0e18aa9923730c590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:c3:29:96:ba:ce:b7:f6:92:fd:c0:f5:ca:
20:84:c0:a3:0e:17:1b:b8:b1:99:33:e4:89:9e:00:
d0:9a:28:6f:fd:fc:8f:76:79:62:5b:78:bc:55:54:
cb:f7:93:60:06:5e:61:0c:62:55:98:63:de:bc:c4:
15:6b:8f:a2:b9:f0:08:96:ce:f3:1f:d4:cf:1d:b1:
ca:68:1c:d8:e0:5f:06:eb:4a:bb:b8:7f:d7:e1:36:
6d:a2:7a:d1:c1:bd:21:be:d7:1f:c5:9f:37:1a:5a:
3c:0d:bd:bd:87:f3:f4:1a:aa:be:10:5c:7e:ac:38:
86:e7:ee:a6:b6:46:c9:76:7a:76:10:95:95:4e:dd:
ad:40:ab:cb:53:d0:17:93:bc:ca:8a:e0:46:97:26:
10:3b:54:4f:2a:ad:ce:ba:2d:e6:ad:68:6c:24:66:
9b:8c:ba:1d:c2:34:a2:bb:85:01:82:e6:3d:82:c5:
6f:a3:10:39:db:49:3a:a6:cb:19:03:b0:0c:40:5a:
44:14:35:50:fc:51:df:47:60:90:57:ea:ac:9a:55:
3a:d4:41:ef:76:d3:00:38:bc:ce:87:1f:3d:dd:d5:
7b:51:2f:22:fc:a6:78:8d:3e:a4:14:e0:0f:28:90:
94:86:86:80:a0:5d:5f:04:25:d1:f3:64:c8:6a:ba:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:3D:2D:99:02:99:CD:46:E2:4C:B0:E1:8A:A9:92:37:30:C5:90
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2e:78:fb:52:a6:9a:47:52:cd:a3:2a:7c:3a:65:e4:87:8f:
b3:89:ee:9c:0a:0e:c3:bd:fd:97:ab:53:52:cd:bb:0e:01:2a:
d3:9f:fd:23:5a:c3:c9:dd:21:6c:82:14:b7:fb:13:fd:69:53:
60:4e:57:86:ad:10:c1:64:f4:4d:c2:a0:98:37:d7:d5:7e:60:
10:11:1b:69:19:ab:64:3b:ca:17:26:96:a4:c9:6f:13:be:2a:
50:89:ec:0b:18:4f:c0:35:ca:d7:be:c9:b2:95:c5:5a:96:d8:
2c:4e:e8:5e:0b:45:90:76:73:b0:34:f9:54:76:b6:5c:f4:5f:
8e:52:12:0b:e6:c6:83:66:ed:61:e3:f9:75:2a:ca:54:22:cf:
b7:d0:96:b7:a9:53:64:50:1c:09:0b:1e:6b:08:ce:d9:f8:68:
f2:03:97:57:94:2b:e8:7c:ba:b1:6e:e6:d6:36:04:f8:d8:ce:
08:31:b5:f8:84:8b:ec:cf:49:61:d3:dd:3d:8d:7e:5e:22:b7:
5c:40:e6:9f:55:ed:4b:5e:79:7b:74:c4:67:fb:42:60:0f:e4:
85:bb:7f:3b:7d:bd:25:74:b3:16:e8:9c:1c:93:8d:f6:15:8d:
1d:ee:1b:89:dd:f0:86:d6:10:b3:3a:cf:98:76:48:c2:db:e1:
6c:87:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:58 2026 by rpki-client