Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: mxumJMcyUoJPRQUlfsOwxGOCAxJeCigW8o8XveBt1Wc=
Subject key identifier: A7:A5:2D:07:D6:66:7A:F0:E4:70:6A:D7:CC:90:C8:61:75:84:87:61
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019FAAF5AB93EF16F697D029CD421ED8F81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 23:00:54 +0000
Manifest this update: Tue 28 Jul 2026 23:00:54 +0000
Manifest next update: Wed 29 Jul 2026 23:00:54 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: V4FZiX725Eqn7pGTriJkNFXXdl3TBkKf3ozwl03kdog=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ab:93:ef:16:f6:97:d0:29:cd:42:1e:d8:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jul 28 23:00:54 2026 GMT
Not After : Jul 29 23:00:54 2026 GMT
Subject: CN=a7a52d07d6667af0e4706ad7cc90c86175848761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:8a:38:d9:fe:b8:a2:9f:c7:fe:5b:4a:a7:
aa:c2:b4:5f:67:2d:7c:1c:7e:6d:06:fa:86:2c:a8:
78:6d:38:b4:e0:ab:cc:15:e6:45:9e:4d:25:13:9a:
3b:77:04:7e:99:3d:4a:00:2a:d4:c2:b2:c1:d1:b1:
41:b7:59:59:89:18:1e:7c:cc:8a:94:de:e4:1f:2d:
d2:52:5d:fe:90:1a:46:b3:5b:c8:da:05:59:17:85:
38:09:21:1d:13:67:ef:fd:d3:4b:4d:82:9c:7b:80:
55:cb:20:cb:44:43:d0:ef:a7:9f:0e:b5:f8:01:18:
71:8e:fd:a5:aa:e7:fe:5e:fc:33:59:ed:dc:29:39:
f4:77:72:4d:1e:c7:3a:38:ed:46:9b:99:07:29:95:
9c:7d:2f:4d:23:65:f3:89:14:b0:32:64:51:48:c5:
56:96:3c:c8:1f:96:08:ec:cd:00:da:15:41:8f:f7:
0d:fa:a8:7b:d7:64:17:3c:81:7d:60:80:48:00:43:
a6:33:6a:04:8d:06:48:2a:d0:c2:d3:3a:e1:f0:c2:
a6:d8:8f:e3:17:52:11:9b:bc:1e:6c:00:20:41:eb:
fe:cd:cf:1f:ae:2d:d7:d6:fa:f6:46:99:8a:9f:96:
e1:30:39:3c:fa:0b:7c:b6:5f:cc:00:34:26:5c:10:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:2D:07:D6:66:7A:F0:E4:70:6A:D7:CC:90:C8:61:75:84:87:61
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:5b:6f:77:6f:ad:06:9d:37:9a:d1:48:38:8c:78:e0:0c:
f2:fe:d7:4b:69:3e:0c:5a:2f:4d:22:56:f5:5a:f1:d3:02:17:
1d:9b:67:bb:88:a3:df:53:dd:24:91:23:1e:59:35:7d:04:38:
27:ef:3f:e3:3d:04:dc:9c:8f:10:b4:a0:3a:d1:70:4d:81:e1:
ff:0c:d9:d9:5b:71:75:c7:01:3a:44:aa:0a:6d:7f:e1:12:d3:
25:b2:a5:01:9f:f0:71:33:e2:30:9c:2c:6d:34:bb:67:f0:56:
7f:ef:2a:4b:9a:bb:a5:09:d1:1d:c7:58:b8:06:8a:26:10:a2:
0d:98:d0:b4:48:98:84:eb:b0:2d:9d:5d:01:14:a9:a3:70:e7:
e9:f4:8d:cd:1a:9b:80:02:e0:d6:5a:02:52:95:d8:89:c0:26:
69:5e:34:9b:1a:21:ef:a8:31:c2:b7:97:e1:9a:a5:12:c4:a1:
d4:88:31:38:88:8d:9b:5f:77:22:a5:4e:3e:cb:64:8c:b2:85:
d4:f0:6a:f8:c8:60:c3:1f:f7:2b:1b:51:bd:b1:42:90:7c:f7:
25:48:4d:6f:c7:44:f4:8e:e9:bc:e3:af:fd:10:53:c4:61:bd:
8d:4d:d6:e7:ce:8e:cb:a7:a4:77:05:31:de:86:45:5f:24:6a:
d9:2f:2c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9auT7xb2l9ApzUIe2PgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi
ODJhYjYwHhcNMjYwNzI4MjMwMDU0WhcNMjYwNzI5MjMwMDU0WjAzMTEwLwYDVQQD
EyhhN2E1MmQwN2Q2NjY3YWYwZTQ3MDZhZDdjYzkwYzg2MTc1ODQ4NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWKKONn+uKKfx/5bSqeqwrRfZy18
HH5tBvqGLKh4bTi04KvMFeZFnk0lE5o7dwR+mT1KACrUwrLB0bFBt1lZiRgefMyK
lN7kHy3SUl3+kBpGs1vI2gVZF4U4CSEdE2fv/dNLTYKce4BVyyDLREPQ76efDrX4
ARhxjv2lquf+XvwzWe3cKTn0d3JNHsc6OO1Gm5kHKZWcfS9NI2XziRSwMmRRSMVW
ljzIH5YI7M0A2hVBj/cN+qh712QXPIF9YIBIAEOmM2oEjQZIKtDC0zrh8MKm2I/j
F1IRm7webAAgQev+zc8fri3X1vr2RpmKn5bhMDk8+gt8tl/MADQmXBChgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKelLQfWZnrw5HBq18yQyGF1hIdhMB8GA1UdIwQY
MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt
ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0
LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmG1bb3dv
rQadN5rRSDiMeOAM8v7XS2k+DFovTSJW9Vrx0wIXHZtnu4ij31PdJJEjHlk1fQQ4
J+8/4z0E3JyPELSgOtFwTYHh/wzZ2VtxdccBOkSqCm1/4RLTJbKlAZ/wcTPiMJws
bTS7Z/BWf+8qS5q7pQnRHcdYuAaKJhCiDZjQtEiYhOuwLZ1dARSpo3Dn6fSNzRqb
gALg1loCUpXYicAmaV40mxoh76gxwreX4ZqlEsSh1IgxOIiNm193IqVOPstkjLKF
1PBq+Mhgwx/3KxtRvbFCkHz3JUhNb8dE9I7pvOOv/RBTxGG9jU3W586Oy6ekdwUx
3oZFXyRq2S8smQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:51:30 2026 by rpki-client