Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: R/mHLASzoKaj+s6NinQ80ZURMB5qVXd+0TU2v9SpR1U=
Subject key identifier: 91:DB:17:58:79:94:5D:EF:E6:60:DB:1F:12:1D:D1:FB:62:26:17:2D
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019FAABE26D2F86F0114F68F6DFA3AB18379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 10F2
Signing time: Tue 28 Jul 2026 22:00:16 +0000
Manifest this update: Tue 28 Jul 2026 22:00:16 +0000
Manifest next update: Wed 29 Jul 2026 22:00:16 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: X0vnPjEvBEsfWGcwMMzlTdLPl0JEk/DSJKRSHrEwS1U=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:26:d2:f8:6f:01:14:f6:8f:6d:fa:3a:b1:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jul 28 22:00:16 2026 GMT
Not After : Jul 29 22:00:16 2026 GMT
Subject: CN=91db175879945defe660db1f121dd1fb6226172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:b8:b6:95:80:62:1d:c6:70:47:4b:36:d6:
02:90:d5:64:aa:9f:e7:88:d4:f3:ea:dc:8b:6d:34:
1a:cd:fd:1a:b6:d1:00:d4:0c:82:6e:31:a9:e7:1d:
92:47:56:08:4b:58:48:1d:e7:ae:97:1c:59:71:6f:
49:d9:d9:75:7a:be:43:8e:f2:54:66:8c:89:44:0b:
58:ab:6b:77:03:88:2a:1f:d0:0b:85:8d:eb:05:5f:
81:48:e9:ef:ee:89:84:a8:8a:ae:56:14:99:9a:6d:
b0:a5:4b:be:7b:9f:12:6e:86:58:09:ff:54:db:6d:
66:d8:6f:c1:11:97:25:2f:16:38:00:77:0c:66:97:
7e:c6:5b:19:00:08:ea:20:93:7c:2a:ef:c3:c8:af:
2b:b8:65:fb:68:8c:58:f7:d9:7c:7a:92:f6:33:72:
08:1f:b7:97:1a:e5:47:d4:8b:8f:3c:14:cf:4f:ac:
c6:56:52:30:b5:13:9b:74:2b:cc:16:0f:d8:f4:02:
c7:4d:b0:3e:6e:71:14:96:60:0d:01:ea:d6:f3:dd:
82:17:f0:e2:71:be:6c:ce:9c:ee:07:00:20:82:ef:
a7:dc:10:1f:94:80:35:60:2a:a1:ae:b7:ff:e8:a7:
07:e1:b4:ca:40:21:0b:b5:13:ad:43:b7:05:93:48:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DB:17:58:79:94:5D:EF:E6:60:DB:1F:12:1D:D1:FB:62:26:17:2D
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:1a:2d:0e:6e:47:93:ab:0d:fc:1b:85:1e:39:c1:bd:3e:
ff:e8:6c:d4:1f:a7:28:a2:67:2c:32:aa:7a:dc:ee:d3:b5:f3:
1a:db:b7:23:5a:a6:51:a1:c3:08:1d:81:32:9f:c6:01:c6:8d:
aa:af:32:e3:45:c1:ad:8c:ae:0f:32:fa:ce:c5:2f:42:02:98:
d8:4c:78:2a:66:4e:35:fe:b9:4b:cd:e0:12:da:c0:cb:72:78:
2b:4f:52:5d:81:4b:a4:21:4d:52:12:35:5b:c9:98:18:3c:53:
bc:c3:df:88:20:f0:b0:1e:00:4b:5a:bb:51:48:49:be:90:6e:
63:48:ac:18:2b:70:72:04:73:85:a9:b5:ed:a4:fc:c3:6b:4c:
bf:46:b2:11:4e:2a:90:30:cd:66:1a:b8:b3:e3:f2:c7:69:5f:
80:9a:52:d6:a2:97:5a:5f:fd:f3:e7:2c:6a:42:65:d0:ca:19:
f4:3b:30:20:37:c9:fd:f8:fd:af:82:8c:ae:cd:eb:0b:4a:d9:
71:9c:01:ec:15:a6:1a:f8:55:01:79:3e:04:b8:42:ff:ce:32:
53:3d:0d:90:30:37:3a:16:55:02:c1:d8:5a:94:48:15:99:df:
b0:dd:56:60:30:9c:75:1e:bd:40:82:ca:26:a9:e6:03:15:79:
b2:0c:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:50 2026 by rpki-client