Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: HGKJ91a1TFdDUT5vJnPz6xlQWFHqbv7LSTIgXhcdjpo=
Subject key identifier: AD:4E:BF:79:F6:E0:5D:BA:EA:2D:E6:D4:F1:A3:19:F2:AF:24:F2:63
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019FA8D02F28F8EFB1579F489E79B3712CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 13:00:43 +0000
Manifest this update: Tue 28 Jul 2026 13:00:43 +0000
Manifest next update: Wed 29 Jul 2026 13:00:43 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: Elnu4IuTpcwP+2Uqxdq2zVTA7mIYu8GbW6JqZgDJcDY=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:2f:28:f8:ef:b1:57:9f:48:9e:79:b3:71:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jul 28 13:00:43 2026 GMT
Not After : Jul 29 13:00:43 2026 GMT
Subject: CN=ad4ebf79f6e05dbaea2de6d4f1a319f2af24f263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:e4:22:e5:9f:96:e9:5c:02:76:04:16:68:
e5:39:cd:08:04:e3:bb:1d:dc:b8:ed:18:cf:31:8a:
66:d2:dc:6e:84:1c:cd:5e:cf:42:21:33:a9:ae:59:
13:e1:ce:03:57:d1:97:18:f3:2e:b3:d6:27:5e:b6:
db:23:86:15:77:33:ee:39:07:29:4e:56:4d:cf:8f:
b4:16:8b:59:2e:40:62:a9:e3:08:69:5a:8b:2e:8b:
d3:59:8c:8d:40:2d:38:94:5a:6d:ff:06:3e:f1:16:
15:1f:34:16:fd:9e:3f:d2:55:65:d8:00:7c:1c:fb:
e5:9e:6a:7d:37:36:81:77:07:df:88:3d:f5:12:61:
b1:4f:98:81:f3:2f:4a:a1:f2:29:a9:72:e5:5b:e0:
16:c0:b1:ee:06:e1:8c:a9:a6:bd:46:3a:61:a5:a1:
7a:6e:d4:6f:b1:e6:86:8b:1c:62:04:2f:80:09:06:
93:3e:69:a2:3a:11:24:d0:5b:b6:99:9c:e5:19:4a:
5d:66:f2:c6:6e:fb:d9:2e:17:a3:3b:23:bb:20:53:
59:52:b5:5b:b3:23:0d:0b:7e:fd:fe:6b:6e:48:f1:
b2:18:4d:85:44:ea:ba:cf:2e:6c:fc:42:51:e9:df:
0e:f5:23:13:11:5c:27:fb:03:dd:45:54:52:00:a9:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:BF:79:F6:E0:5D:BA:EA:2D:E6:D4:F1:A3:19:F2:AF:24:F2:63
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cf:a2:b6:88:fc:8f:97:51:c4:ec:a9:3c:37:3a:55:07:3a:
7d:98:9b:99:ff:5d:d1:41:2f:53:36:30:20:32:2f:d1:db:a8:
5e:54:fb:d8:c2:10:c9:c4:16:ef:e6:dd:cf:46:a3:93:47:b9:
d3:35:a9:46:66:bb:36:f7:3b:19:09:04:90:e3:42:2d:c3:11:
10:67:ca:27:89:91:c8:69:f3:e5:5b:42:e6:e9:fc:d4:30:f1:
74:c6:93:bb:25:0d:cc:ae:0e:37:6a:16:6b:f2:5f:b4:f1:ba:
99:c2:1e:33:e3:24:03:6c:1e:5b:d2:f2:75:08:38:ff:ba:c2:
7f:70:56:6f:21:14:bf:f5:94:e8:9f:c3:ba:d7:e4:f6:0e:82:
c6:81:f7:e6:02:fa:26:32:93:46:62:5f:d9:76:b0:50:7c:21:
21:c0:0a:48:5c:d4:c0:10:07:b8:c4:b8:6a:b2:88:06:81:9b:
21:27:31:9c:81:d7:3b:a2:b4:8b:ee:06:98:d0:4c:23:fa:e8:
8c:90:b3:9c:62:db:c6:ac:26:83:1f:be:a4:3b:88:c0:15:31:
d2:e0:97:34:98:73:78:01:7d:f9:bb:70:e3:db:d6:bf:7e:d1:
00:49:1e:43:ad:11:9d:48:24:66:7b:73:4e:65:0f:07:6f:6a:
6a:f1:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:51 2026 by rpki-client