Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: S6DcWX2iAge16n+BlacShAA/S3faPE34clfZ8sCmVHc=
Subject key identifier: 88:D0:AC:7E:31:98:BC:4C:DB:F1:C9:45:94:21:FB:3F:10:C4:6D:D9
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019FA907340409D136EDC4B019BDE7BCA722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 1708
Signing time: Tue 28 Jul 2026 14:00:49 +0000
Manifest this update: Tue 28 Jul 2026 14:00:49 +0000
Manifest next update: Wed 29 Jul 2026 14:00:49 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: ZWPGaqSKx2OqcRNb8KJGoSmtrSgrzOX4dI0+wmURwyo=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:34:04:09:d1:36:ed:c4:b0:19:bd:e7:bc:a7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Jul 28 14:00:49 2026 GMT
Not After : Jul 29 14:00:49 2026 GMT
Subject: CN=88d0ac7e3198bc4cdbf1c9459421fb3f10c46dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:eb:12:b4:36:af:f3:3b:15:20:97:12:a8:
cd:d9:a2:8c:ac:8e:6d:8a:f5:82:13:d9:08:c3:b7:
35:34:98:12:61:11:0a:43:43:f5:52:a9:a0:cf:af:
61:f8:d5:f1:e4:aa:af:12:76:8a:e0:a6:a1:a1:ca:
bf:af:35:79:8e:2c:c7:77:ce:3e:93:ab:08:08:e8:
04:c6:36:c8:18:89:21:54:17:0d:be:00:e3:ca:a9:
14:b7:b8:1b:b7:b1:8c:ba:c9:db:e9:83:d7:9c:af:
21:5d:6c:99:45:c3:dc:3d:34:fb:7d:bd:ea:c3:59:
c3:0a:b6:d3:1c:cb:d1:2a:b6:ec:3e:60:a1:bf:64:
66:57:0d:a1:db:26:6c:17:40:de:88:7d:39:13:27:
71:d8:be:16:22:25:46:a1:1b:c4:c4:08:d1:76:ba:
88:a6:35:2f:64:1e:a8:f7:46:05:93:3c:7c:62:d6:
fb:2b:f3:9f:31:17:a6:99:55:09:76:35:e5:13:62:
30:13:fb:87:19:c3:cb:19:f4:56:6d:c6:5c:4a:0b:
e2:21:17:09:2b:44:0b:e6:ec:af:48:d2:ed:07:19:
8a:60:a2:c6:f3:cf:d8:e6:37:f7:d8:51:31:60:27:
2e:85:86:35:78:61:68:c1:80:62:e3:64:42:48:0c:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:AC:7E:31:98:BC:4C:DB:F1:C9:45:94:21:FB:3F:10:C4:6D:D9
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:39:76:6f:c4:0f:84:e8:bf:79:aa:fc:ec:0b:fa:d5:45:f0:
10:1c:92:91:59:a9:47:31:7e:7a:db:02:c9:f7:d7:c9:2c:8c:
7e:29:8e:6d:f6:56:00:57:a5:be:2c:b5:6d:18:87:a6:d8:40:
ec:6c:30:e4:76:6e:05:e1:4f:26:33:92:cd:37:83:9d:8a:04:
09:9f:b7:5b:91:8c:e4:4f:47:6b:c2:d2:66:34:8f:01:d7:25:
e6:90:6a:8a:81:30:65:30:b6:2b:9d:69:02:ff:49:d4:91:24:
b0:25:41:f0:77:2d:16:be:8b:ed:39:d7:db:c8:3e:a0:ce:0b:
8a:c8:bc:92:75:1f:26:ee:be:ae:c4:47:0f:a0:48:c5:49:7f:
c9:ec:a2:20:4c:9b:30:26:b6:bb:96:a8:79:14:68:51:2f:91:
31:6b:a2:50:be:41:0c:56:a1:69:35:56:39:41:86:96:01:3d:
48:08:73:30:ad:c0:a6:30:66:9f:46:0f:80:3b:e9:a1:7d:ca:
02:f8:17:ff:a8:21:75:be:64:f3:ab:04:c1:fb:47:e7:4d:23:
11:06:f2:0b:f5:67:04:6f:8c:93:0a:2f:26:9e:f0:9a:f9:ca:
cb:29:cd:21:9f:95:bc:ec:bb:9d:76:1f:b6:7f:4b:cd:14:dc:
f0:c6:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:33 2026 by rpki-client