Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json)
Hash identifier: 83DJU2+obGSJ578HGLprJQ02DSqK2/miWP8kI93V2TI=
Subject key identifier: 33:B1:76:49:14:6C:20:6C:CF:05:82:20:45:FA:9D:A7:88:19:7D:BA
Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Certificate serial: 019FAA88B8EE44A47D2FC2EDC53F20B95048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 21:01:54 +0000
Manifest this update: Tue 28 Jul 2026 21:01:54 +0000
Manifest next update: Wed 29 Jul 2026 21:01:54 +0000
Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: 2zMvONmBbh/Kj1vvgDfVdnwEiZE497Ns6997pbLNBWw=)
2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:b8:ee:44:a4:7d:2f:c2:ed:c5:3f:20:b9:50:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Validity
Not Before: Jul 28 21:01:54 2026 GMT
Not After : Jul 29 21:01:54 2026 GMT
Subject: CN=33b17649146c206ccf05822045fa9da788197dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:f3:45:45:39:2a:2a:35:2b:c6:85:4b:52:
1e:5a:38:51:14:b0:fd:98:1e:1b:96:94:08:14:27:
c9:19:02:1b:bd:2a:78:76:5d:63:57:ee:02:7f:bb:
31:e3:7b:55:35:eb:44:9d:d1:19:28:50:f3:9f:bc:
7a:8a:d3:94:75:32:7a:9b:22:d3:92:eb:b3:1d:7d:
11:d7:f0:cd:fb:0e:57:f1:fa:47:4c:7c:40:80:86:
40:dd:0b:5e:a8:c8:34:73:b0:50:da:53:ea:7a:5f:
76:d1:ab:93:f2:07:60:8e:56:a2:7d:0b:15:b7:0b:
64:4d:05:54:2b:a0:cb:c6:86:e1:e9:5d:7b:12:d3:
7f:fd:50:3c:a6:7c:eb:4f:5b:f2:dd:79:1a:da:e4:
4f:bf:66:2c:79:a1:d5:dd:70:d9:b2:5e:b0:f3:47:
b6:cc:97:c6:b3:76:cb:97:b6:05:6e:a0:dc:f9:83:
ed:b3:af:55:94:cd:38:b3:3f:2d:7a:36:89:2b:a3:
14:2d:3b:32:23:3a:e5:86:15:ed:b0:f3:8f:0d:a1:
0b:f0:8a:a5:a8:06:ad:47:d9:18:aa:f9:f7:d3:a0:
98:ce:4b:54:cb:38:31:48:62:b8:e6:74:83:91:fc:
a6:e9:12:ba:2a:bf:07:2d:04:c4:6a:73:5e:a0:29:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:76:49:14:6C:20:6C:CF:05:82:20:45:FA:9D:A7:88:19:7D:BA
X509v3 Authority Key Identifier:
keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:ee:e3:52:42:72:d6:33:3e:db:02:76:d2:f6:6c:4e:be:
c7:8e:9d:af:32:d7:ca:87:c8:ec:d9:b0:b0:17:a7:f1:f9:e3:
5c:ce:f0:00:49:00:9e:ff:cd:0b:d4:b8:74:76:44:ed:73:01:
93:4f:91:7b:00:8b:9a:1f:25:94:34:1d:08:d2:37:13:35:da:
0c:91:1a:9e:a6:48:8a:b0:85:a2:8b:37:02:d8:4d:54:47:98:
c2:9d:79:5a:28:40:f4:07:25:55:31:4d:dc:62:5d:00:d6:d2:
8f:4e:8b:a7:4d:16:34:f5:77:15:9f:5f:ec:6e:f8:a4:d2:5c:
3c:d7:58:e5:a6:06:97:c9:75:00:17:5a:1d:e4:2c:6f:df:6e:
f1:d1:d5:9f:97:6d:e8:98:eb:1f:2d:1b:4b:f4:a2:27:75:94:
b2:67:5f:5a:e2:df:3d:ff:ce:af:1c:8a:d6:12:54:29:d2:2a:
2d:0b:6f:d4:c8:b6:2a:3a:3a:28:a5:9b:b6:79:ca:6a:a8:0d:
59:52:42:ae:b5:e3:4f:7e:c2:8f:41:de:31:ac:e2:f0:4b:fe:
32:aa:17:f3:a8:2d:23:a9:a9:c3:d6:90:55:b1:40:ef:38:ab:
5e:d5:51:a0:de:44:16:cb:c4:51:e9:a3:e8:1d:f0:85:21:b3:
85:aa:64:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiLjuRKR9L8LtxT8guVBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGQ4ZmJiOTJmOWI0NzQ2MTg3ZDlkNjNmZTliOTBmY2I1
ZWNhMTcwHhcNMjYwNzI4MjEwMTU0WhcNMjYwNzI5MjEwMTU0WjAzMTEwLwYDVQQD
EygzM2IxNzY0OTE0NmMyMDZjY2YwNTgyMjA0NWZhOWRhNzg4MTk3ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MbzRUU5Kio1K8aFS1IeWjhRFLD9
mB4blpQIFCfJGQIbvSp4dl1jV+4Cf7sx43tVNetEndEZKFDzn7x6itOUdTJ6myLT
kuuzHX0R1/DN+w5X8fpHTHxAgIZA3QteqMg0c7BQ2lPqel920auT8gdgjlaifQsV
twtkTQVUK6DLxobh6V17EtN//VA8pnzrT1vy3Xka2uRPv2YseaHV3XDZsl6w80e2
zJfGs3bLl7YFbqDc+YPts69VlM04sz8tejaJK6MULTsyIzrlhhXtsPOPDaEL8Iql
qAatR9kYqvn306CYzktUyzgxSGK45nSDkfym6RK6Kr8HLQTEanNeoCno+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOxdkkUbCBszwWCIEX6naeIGX26MB8GA1UdIwQY
MBaAFPTdj7uS+bR0YYfZ1j/puQ/LXsoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82ZjY5MTctZDJjOS00MDZhLTlhNmQt
Yjg2NzZhYzIyNjUzLzEvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82ZjY5MTctZDJjOS00MDZhLTlhNmQtYjg2NzZhYzIyNjUz
LzEvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3Du41JC
ctYzPtsCdtL2bE6+x46drzLXyofI7NmwsBen8fnjXM7wAEkAnv/NC9S4dHZE7XMB
k0+RewCLmh8llDQdCNI3EzXaDJEanqZIirCFoos3AthNVEeYwp15WihA9AclVTFN
3GJdANbSj06Lp00WNPV3FZ9f7G74pNJcPNdY5aYGl8l1ABdaHeQsb99u8dHVn5dt
6JjrHy0bS/SiJ3WUsmdfWuLfPf/OrxyK1hJUKdIqLQtv1Mi2Kjo6KKWbtnnKaqgN
WVJCrrXjT37Cj0HeMazi8Ev+MqoX86gtI6mpw9aQVbFA7zirXtVRoN5EFsvEUemj
6B3whSGzhapkLg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:56 2026 by rpki-client