Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: 4BVeNRX6l1XYuGcIhLJo9sJXrJGnPJ9RjgGpwMXEJko=
Subject key identifier: B6:FC:03:10:D4:9F:4D:1E:35:34:F0:16:60:B5:17:55:1C:3E:1E:00
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019FA9E26F7B6DC302D27B02AFF970882FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 1A79
Signing time: Tue 28 Jul 2026 18:00:16 +0000
Manifest this update: Tue 28 Jul 2026 18:00:16 +0000
Manifest next update: Wed 29 Jul 2026 18:00:16 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=)
3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
4: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: 7U66zRjUNVDuYnVXnumsGXwwHAGAk3Ipq4oIFMa2r/w=)
6: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=)
7: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:6f:7b:6d:c3:02:d2:7b:02:af:f9:70:88:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 28 18:00:16 2026 GMT
Not After : Jul 29 18:00:16 2026 GMT
Subject: CN=b6fc0310d49f4d1e3534f01660b517551c3e1e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:af:25:51:ef:5f:dc:0f:06:68:95:f4:4d:
8e:be:e2:95:cd:1c:8f:8a:d5:96:e1:5a:58:b7:2f:
ac:34:bb:54:5f:1c:d6:7c:bd:21:2b:5a:d5:14:6d:
50:00:f7:7b:a5:91:2e:cc:03:59:28:a6:a7:2a:b4:
e1:8f:da:50:a7:85:a9:0d:81:b2:95:b2:59:7f:77:
18:b2:e6:23:1d:84:5d:e2:e8:93:3c:76:17:1b:8c:
2d:c8:61:b6:1b:8e:8e:39:4e:79:37:c6:0d:84:14:
ea:be:69:8d:56:42:27:4f:cc:dc:2d:22:e8:41:e1:
60:2f:5d:b7:bf:e5:d3:90:d3:41:0f:02:7e:79:22:
9b:37:da:d0:0e:00:42:1c:10:de:a9:7f:87:c2:62:
6a:7d:b2:ca:f2:40:21:7e:f9:a9:87:aa:ca:7e:c3:
a6:93:4a:91:d5:e1:ff:c3:ba:13:3a:3e:42:c9:ee:
8b:0f:f3:28:4b:8c:36:48:29:e8:48:65:8e:3e:40:
07:9f:73:78:9d:8f:3c:c8:27:b9:9b:1c:ff:d8:00:
92:b9:2a:be:f4:6d:2e:68:9a:b9:d6:c0:07:49:bf:
e0:55:94:c0:6c:ba:a7:87:84:43:5f:f0:3e:f2:a9:
ea:0f:2b:3e:2c:82:ae:e7:56:d4:11:4e:99:25:36:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:03:10:D4:9F:4D:1E:35:34:F0:16:60:B5:17:55:1C:3E:1E:00
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:03:e4:fe:59:73:9c:8e:4b:83:f8:91:bb:ea:2b:d4:5f:7c:
bc:fd:f8:58:6e:61:a9:e8:92:eb:10:77:96:ab:84:35:60:f5:
58:90:03:68:17:9a:4a:39:2f:8f:72:52:b7:c8:ac:e9:da:e8:
4f:ca:0b:af:05:f7:f0:2e:84:03:8e:7b:fd:8b:99:d9:4b:3c:
c2:ac:c6:01:80:1a:49:e6:bf:d6:b2:e6:25:6d:89:68:7f:39:
35:4b:eb:18:23:29:87:c2:e3:d7:a8:c4:16:c3:ba:eb:e5:94:
d9:04:42:38:24:6a:78:91:a1:83:1f:ef:31:a2:98:b3:89:24:
9e:ea:ad:66:60:65:89:8a:57:3f:4d:f3:7f:b8:cd:dc:d8:7b:
10:48:46:c7:93:41:d1:a5:3d:b8:04:47:1e:0f:d2:11:fb:32:
b1:b9:59:0c:73:f1:10:0c:eb:62:31:85:aa:12:31:59:c7:d7:
12:b6:2c:a8:bb:c5:86:a1:2e:b3:20:16:fc:16:66:98:2b:d8:
5d:9a:35:e9:d2:dd:43:25:e6:70:e5:8d:b2:38:aa:fe:59:04:
85:77:91:73:fb:07:9f:52:b1:67:f3:61:f4:fd:b2:47:e7:19:
56:18:a1:a5:7a:0d:3e:ad:76:f3:43:14:d7:0c:f4:d2:cb:09:
95:45:1b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4m97bcMC0nsCr/lwiC/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNzI4MTgwMDE2WhcNMjYwNzI5MTgwMDE2WjAzMTEwLwYDVQQD
EyhiNmZjMDMxMGQ0OWY0ZDFlMzUzNGYwMTY2MGI1MTc1NTFjM2UxZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKivJVHvX9wPBmiV9E2OvuKVzRyP
itWW4VpYty+sNLtUXxzWfL0hK1rVFG1QAPd7pZEuzANZKKanKrThj9pQp4WpDYGy
lbJZf3cYsuYjHYRd4uiTPHYXG4wtyGG2G46OOU55N8YNhBTqvmmNVkInT8zcLSLo
QeFgL123v+XTkNNBDwJ+eSKbN9rQDgBCHBDeqX+HwmJqfbLK8kAhfvmph6rKfsOm
k0qR1eH/w7oTOj5Cye6LD/MoS4w2SCnoSGWOPkAHn3N4nY88yCe5mxz/2ACSuSq+
9G0uaJq51sAHSb/gVZTAbLqnh4RDX/A+8qnqDys+LIKu51bUEU6ZJTb2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb8AxDUn00eNTTwFmC1F1UcPh4AMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgPk/llz
nI5Lg/iRu+or1F98vP34WG5hqeiS6xB3lquENWD1WJADaBeaSjkvj3JSt8is6dro
T8oLrwX38C6EA457/YuZ2Us8wqzGAYAaSea/1rLmJW2JaH85NUvrGCMph8Lj16jE
FsO66+WU2QRCOCRqeJGhgx/vMaKYs4kknuqtZmBliYpXP03zf7jN3Nh7EEhGx5NB
0aU9uARHHg/SEfsysblZDHPxEAzrYjGFqhIxWcfXErYsqLvFhqEusyAW/BZmmCvY
XZo16dLdQyXmcOWNsjiq/lkEhXeRc/sHn1KxZ/Nh9P2yR+cZVhihpXoNPq1280MU
1wz00ssJlUUbgg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:48 2026 by rpki-client