Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: l/rtLcb/RNroq79rJ8aLZveKqiUpUIRQuuMqqCRGn0U=
Subject key identifier: EE:27:BD:F4:9F:A8:41:02:70:9C:86:C2:A0:23:4D:40:86:23:51:0B
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019FA9E2853EE166086FC5851EF8DF5582AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0A3A
Signing time: Tue 28 Jul 2026 18:00:22 +0000
Manifest this update: Tue 28 Jul 2026 18:00:22 +0000
Manifest next update: Wed 29 Jul 2026 18:00:22 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: HUBxBa+RrNkORtLtPNVcCxNiggrWcmXbhsJf3UX1Xp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:85:3e:e1:66:08:6f:c5:85:1e:f8:df:55:82:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Jul 28 18:00:22 2026 GMT
Not After : Jul 29 18:00:22 2026 GMT
Subject: CN=ee27bdf49fa84102709c86c2a0234d408623510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:9f:cc:8a:fc:e7:7e:43:ea:cd:c9:e1:94:
df:af:b7:fb:69:e7:6c:ff:f7:44:65:7e:5c:a5:ba:
c6:30:e8:89:8c:58:ae:4a:40:13:63:ee:a8:bc:61:
75:5d:dd:d8:c5:3b:c6:6b:22:b8:e4:ae:21:95:ac:
ec:68:64:77:e6:53:8a:60:cc:47:be:94:db:21:36:
15:bf:a5:d3:e3:1c:e7:87:78:e0:e1:00:8b:b1:7f:
65:18:e7:50:f2:63:2c:fb:ef:da:21:12:aa:00:be:
3c:81:55:69:73:4e:3d:f9:b2:76:a8:41:65:34:c0:
c9:ff:8b:18:66:0d:75:39:8c:ac:c5:39:88:e6:a4:
8e:ff:e1:1f:9b:92:3e:b3:91:f2:29:69:15:a5:53:
cd:99:ff:69:7e:fd:4f:db:46:7d:59:ef:2c:b1:c9:
f7:40:f7:75:80:f1:47:42:34:74:15:7d:a8:37:5d:
13:89:23:c2:cd:d8:83:6f:d8:31:a0:06:dc:44:d8:
83:24:27:c9:96:b4:43:50:89:e9:4e:49:c6:4f:e6:
13:55:eb:08:86:ab:51:2a:c3:d3:a6:a9:e3:4d:b6:
28:e2:ab:0f:ad:5f:0d:44:60:b2:04:89:3a:ba:8d:
76:e2:6a:e8:8b:3e:e9:b6:18:2d:d4:c3:f0:53:be:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:BD:F4:9F:A8:41:02:70:9C:86:C2:A0:23:4D:40:86:23:51:0B
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:96:41:fa:26:0d:ba:e3:57:3a:e6:2a:c2:f3:0d:41:9f:
eb:4a:4e:01:1c:1c:06:ce:7a:40:d0:f9:36:01:be:4a:8d:30:
0b:df:dd:82:09:44:34:b7:48:9e:03:09:a9:1a:82:f6:09:4d:
32:72:a7:71:d2:f7:f8:d2:a7:82:74:8f:60:4b:28:7f:49:e6:
6b:8e:cc:95:40:cd:f0:53:ce:42:80:92:5c:cb:7d:cc:4c:c1:
5e:9b:c7:f7:45:df:f4:f8:75:79:34:ce:ea:8e:59:fc:61:c0:
98:8a:6d:ee:ef:eb:cc:e7:bd:e0:23:ea:d2:37:f2:b9:42:ff:
8e:d7:bb:ed:fb:55:29:27:9d:b1:01:17:22:de:f2:66:28:10:
68:cd:5a:81:60:76:74:ab:8a:a8:7a:ee:f8:fa:f5:80:39:65:
73:99:e4:35:d7:be:50:8a:9b:17:f1:a8:e6:0a:55:11:7d:9a:
cb:bf:ad:0a:32:18:9d:52:c7:29:91:7c:3a:5f:c2:93:0e:b0:
ca:e5:84:88:55:6b:47:b4:40:67:e6:e7:b4:ef:2b:cf:84:3e:
ab:4e:48:9d:c7:8a:52:0f:91:05:2e:62:06:ae:d5:2b:8a:d6:
2f:5b:e6:51:b5:2c:75:22:c6:a7:7e:97:d0:44:1a:e2:8b:96:
7b:88:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:00 2026 by rpki-client