Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: swjUlnI8TW28BPdLL0f4pt+6XkizZw08W5vUj0QB7d0=
Subject key identifier: 89:18:6A:BF:C5:05:80:2B:E4:50:73:C8:B8:47:16:47:AF:CF:71:8E
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 019FA9ABAFA15411000D1EA8EF60884FCA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 07C7
Signing time: Tue 28 Jul 2026 17:00:28 +0000
Manifest this update: Tue 28 Jul 2026 17:00:28 +0000
Manifest next update: Wed 29 Jul 2026 17:00:28 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: YYwgNU9TGhKW1foVcKkSbc7eFTIQlcEgAUix0Eo7DjI=)
2: MSkSuk2uY3DEvPKjzciz_6zSiBs.roa (hash: bKmP81Ny3lbO1lhfJcpvSqIFO1Qid3YCkNlkgwazZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:af:a1:54:11:00:0d:1e:a8:ef:60:88:4f:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Jul 28 17:00:28 2026 GMT
Not After : Jul 29 17:00:28 2026 GMT
Subject: CN=89186abfc505802be45073c8b8471647afcf718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:8a:98:04:dd:74:e4:ad:b7:01:2a:e0:77:
f0:8e:ad:43:d7:9d:49:08:ae:15:ac:d0:1b:8a:dd:
bf:6b:cf:4f:d1:df:4f:53:aa:4a:20:a4:ca:a5:ba:
51:a4:2c:4d:f6:ab:0a:1b:f4:73:01:40:93:92:15:
79:5d:da:6a:82:e2:d3:ce:65:c9:7b:f4:a2:3d:9c:
71:e0:4b:bf:c6:f4:3c:dd:e7:ad:24:b5:37:ed:c2:
09:05:34:db:71:91:b7:ee:e4:67:83:f7:f3:32:8d:
03:fe:c7:6e:ad:77:07:db:11:13:3d:12:98:a9:3d:
70:16:6a:d5:0b:15:ad:44:80:7f:4b:eb:21:75:02:
12:1e:ff:40:5b:45:ea:71:73:bf:eb:2d:ee:91:59:
b1:38:84:78:cb:55:d0:eb:e1:68:08:c5:2a:78:c8:
74:42:c5:28:87:56:45:0b:23:47:35:26:14:3d:78:
2d:de:a3:59:1f:14:b4:4a:e6:a5:3f:e1:fb:fd:3c:
b0:8e:5d:53:b1:a7:05:0a:6f:c3:08:a6:70:6d:61:
38:b1:d6:f0:88:65:ef:f7:df:f0:99:82:7f:4b:16:
43:ed:2d:74:d2:5f:d9:0f:47:b0:03:fa:92:55:83:
74:6d:cc:f6:fc:63:de:1d:8c:3c:bd:8b:3b:ac:f9:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:6A:BF:C5:05:80:2B:E4:50:73:C8:B8:47:16:47:AF:CF:71:8E
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:b6:73:47:26:29:48:1e:25:dd:55:0e:7f:12:d9:7e:27:
d1:51:b1:fb:7c:74:26:cb:5a:64:01:18:14:ec:5b:2a:89:1d:
29:cc:28:80:68:92:05:01:0f:39:a1:46:ac:0d:54:33:90:89:
3f:e8:27:a5:47:e0:97:57:16:69:47:a7:de:41:72:ad:6b:54:
b2:92:4b:97:b5:e4:71:e8:53:63:88:68:46:0e:bf:40:0c:34:
6c:0c:ef:16:61:f6:fa:31:fa:f6:4d:08:57:67:29:37:02:f0:
fc:52:a2:0e:af:b7:14:6c:27:41:f7:df:ba:c1:26:38:fe:39:
fa:fb:eb:16:5c:4e:c3:56:c1:28:93:b1:b0:03:a6:1d:a5:e5:
5c:1c:2f:8d:33:bf:e0:6d:78:25:5d:02:69:2b:5a:5d:21:dd:
39:5d:64:89:64:ab:81:d2:f8:4a:73:68:d4:2b:ea:c4:52:36:
80:73:b1:5a:6d:1e:3b:ba:41:05:ff:e8:d9:dc:af:bf:ab:19:
c0:3c:26:77:37:98:6e:5d:14:4f:e9:7f:58:a1:62:0b:b6:3b:
c2:77:8e:15:7b:1c:f3:73:04:8c:86:8e:a3:5c:e6:85:1f:93:
cc:94:ab:23:f0:56:50:cb:e8:51:ae:33:21:1c:95:c4:06:72:
4b:fe:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:23 2026 by rpki-client