Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: aLSrpgl/O6UI7eseps/xx5IUq2tWTAq99VtSfye8cg0=
Subject key identifier: BB:AE:45:23:2B:80:02:E1:82:7F:EE:0D:CF:E3:0E:C4:11:E2:E8:8F
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019FA9E268A74F710FBDFBA54AB0A7FDCD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 096D
Signing time: Tue 28 Jul 2026 18:00:15 +0000
Manifest this update: Tue 28 Jul 2026 18:00:15 +0000
Manifest next update: Wed 29 Jul 2026 18:00:15 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: x/RcFDsiDD8Z4dEtzPyaFrpAgRqaI/pM438XnZszrZY=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:68:a7:4f:71:0f:bd:fb:a5:4a:b0:a7:fd:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Jul 28 18:00:15 2026 GMT
Not After : Jul 29 18:00:15 2026 GMT
Subject: CN=bbae45232b8002e1827fee0dcfe30ec411e2e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:3c:fe:13:d3:ca:41:dd:de:51:21:33:63:
89:fc:e8:d5:40:3b:1f:ed:b3:2f:f3:be:e4:76:b7:
0f:c7:97:b9:9c:18:8d:7f:54:5d:bb:76:79:99:2d:
5a:3a:ba:76:9b:bf:14:3d:77:b1:a8:03:55:6a:15:
a1:31:2b:8a:99:ee:59:d7:03:2f:b0:60:11:51:27:
9a:b6:7c:36:59:ce:3f:95:ba:8f:16:15:3d:83:7f:
2d:cd:f2:f2:84:b1:10:5a:8d:ae:c5:d7:31:ee:28:
f7:3d:52:ad:9f:73:08:f3:8f:bf:d3:87:56:16:02:
d4:dc:36:a8:31:9d:96:36:30:95:5f:77:c0:2c:6d:
85:ce:c9:b8:21:07:61:02:e2:be:a0:25:5e:96:97:
62:5e:ee:ed:31:f7:4b:63:9d:4c:53:56:1f:8a:8e:
80:04:39:26:c7:4c:9d:bc:7c:a6:db:d6:57:69:81:
c2:38:19:b5:f0:0e:92:da:21:4b:3d:84:56:2a:c9:
d0:06:59:9a:b2:05:ed:70:23:05:a6:bc:93:09:46:
01:cb:93:2d:81:f6:05:aa:0b:d2:31:2b:f1:de:d0:
9c:92:42:cc:63:52:0a:b4:16:4e:cf:b6:f2:e3:bb:
d2:d0:16:4b:dd:36:85:76:9b:84:76:4c:a1:c5:9f:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:45:23:2B:80:02:E1:82:7F:EE:0D:CF:E3:0E:C4:11:E2:E8:8F
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:97:a5:78:84:e3:27:e2:ef:29:9b:c1:c2:58:ff:35:b9:
5c:f7:1f:6b:74:fc:08:26:1b:cf:da:3c:2e:c0:2b:82:15:75:
67:da:8f:66:18:0b:7a:b6:33:b2:34:ad:50:e1:b4:30:5b:10:
36:df:ba:44:21:2f:16:ef:32:9c:43:08:e0:f8:c6:94:b1:73:
f7:a3:88:b5:3a:a9:32:85:e5:9d:5b:ba:8c:fb:f0:0e:3c:8f:
18:56:79:9c:c7:50:c0:7f:c7:5d:e1:96:68:2b:4e:93:ef:0f:
6b:c6:90:cd:74:a0:c5:55:13:56:bf:07:5e:18:97:b9:71:84:
ac:b6:b6:3a:a2:42:ce:05:4f:e2:11:bb:fb:ca:17:ea:a1:28:
40:9f:06:b7:ff:7d:ac:02:60:d6:84:e9:1e:c7:44:02:9a:47:
01:1b:6f:1d:62:e1:fb:f9:c6:c5:97:61:ad:f2:58:d5:24:45:
a1:be:fc:57:d3:71:10:db:f2:48:61:33:18:b8:89:e3:f0:74:
2b:fd:28:53:c6:0c:54:08:fe:e9:55:9e:1f:6c:76:0a:30:d0:
30:61:df:15:cd:af:0f:11:2a:08:17:14:23:81:d4:3d:52:00:
fc:92:f8:ef:16:5f:53:db:61:3d:94:20:2a:0b:47:27:ce:0b:
97:34:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:00 2026 by rpki-client