Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: JYuuutmhNBF21gnCvp/9Yi/Z/QSLPaCEUx4N/VRQWgU=
Subject key identifier: B2:7C:F4:21:70:6A:9B:D7:69:88:40:CD:46:78:31:71:EE:6A:C0:74
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019FA8D0A1D6D02144E1C4FB171FECBE504A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 06DE
Signing time: Tue 28 Jul 2026 13:01:12 +0000
Manifest this update: Tue 28 Jul 2026 13:01:12 +0000
Manifest next update: Wed 29 Jul 2026 13:01:12 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: BX/HqKNX52cHBXyh2JEQ8OTlvsZAsFzBu+T1wzIrAws=)
2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:a1:d6:d0:21:44:e1:c4:fb:17:1f:ec:be:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Jul 28 13:01:12 2026 GMT
Not After : Jul 29 13:01:12 2026 GMT
Subject: CN=b27cf421706a9bd7698840cd46783171ee6ac074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:94:3f:71:1a:0e:ba:93:57:1f:fa:97:25:
cf:ef:e1:9d:b4:0a:b2:0b:3d:d6:04:77:71:24:8d:
fb:85:70:31:64:61:9c:2d:99:27:21:24:2e:a1:16:
3b:3a:8b:4b:1b:93:08:eb:c0:85:11:be:8c:06:39:
8c:af:9e:15:7c:2a:11:9f:91:92:07:0c:23:41:68:
e3:97:2f:89:fd:63:ae:70:33:2c:6b:9e:d2:bb:2a:
b0:66:e5:bf:6a:96:0b:85:0c:d0:da:0e:6c:be:33:
e3:72:58:b8:39:41:82:a4:59:cf:69:b0:93:1f:fe:
8b:bd:26:82:b4:a3:d6:dc:93:56:25:1d:06:5c:59:
42:40:a2:d1:88:e3:2b:a8:e5:55:31:40:df:0f:38:
f8:da:29:01:33:12:64:dd:35:4e:28:31:99:73:4d:
23:0a:70:e9:e7:ed:30:3e:68:f1:3f:85:38:0d:42:
64:3a:cb:79:d8:18:6f:53:7d:6d:d8:5d:95:2a:da:
d9:1a:b4:74:7e:3f:f3:c1:66:72:59:cd:b6:9e:b9:
6f:26:e2:ef:07:c9:6e:53:fd:94:fc:64:6f:d8:02:
b4:fc:a9:21:aa:36:92:39:87:dd:44:35:96:23:8e:
5c:80:89:3b:4a:0e:72:18:68:3b:6b:ce:b4:6c:be:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:F4:21:70:6A:9B:D7:69:88:40:CD:46:78:31:71:EE:6A:C0:74
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:2b:61:fc:25:09:1e:06:e6:86:69:84:6b:69:f6:dc:ba:
de:2f:de:f4:a9:f8:d0:5c:20:ee:2d:60:48:45:c9:9b:da:3b:
9b:8f:18:18:30:aa:91:5b:1a:24:11:d0:f4:48:37:cf:48:bf:
92:a5:74:92:87:16:59:2c:00:b3:f1:f0:44:32:7d:8f:6d:07:
dd:63:89:b2:2b:e8:5b:00:98:c2:ae:94:65:6b:a5:fd:83:9d:
77:1f:5e:56:48:16:b9:29:1b:31:f5:90:0a:9a:97:57:83:83:
f6:b4:30:be:d5:ed:b5:13:ec:d0:31:7e:cd:2b:b2:41:28:0f:
2e:5c:70:39:c9:b6:66:64:13:17:b6:f3:41:ec:85:5e:ea:04:
54:63:9a:7d:44:b0:8f:77:c0:fc:84:3b:bc:58:ec:d0:33:0b:
dd:fa:7a:c9:72:c6:f9:d5:4f:5b:9c:84:05:ee:41:05:8e:f1:
2d:e7:c9:c6:0d:a1:ce:8c:77:6c:0f:94:7b:33:22:bd:09:f8:
74:44:5b:69:ca:bf:50:b8:f1:1b:c1:58:d9:1c:fa:51:d5:91:
5d:ad:0f:4c:1d:5f:15:26:04:9d:d5:4b:b0:a9:c4:23:87:ad:
6b:b2:ac:dc:b1:c3:29:f1:da:bd:73:80:5b:87:43:69:50:0d:
d7:3b:90:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0KHW0CFE4cT7Fx/svlBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0
MDYyZWQwHhcNMjYwNzI4MTMwMTEyWhcNMjYwNzI5MTMwMTEyWjAzMTEwLwYDVQQD
EyhiMjdjZjQyMTcwNmE5YmQ3Njk4ODQwY2Q0Njc4MzE3MWVlNmFjMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxuUP3EaDrqTVx/6lyXP7+GdtAqy
Cz3WBHdxJI37hXAxZGGcLZknISQuoRY7OotLG5MI68CFEb6MBjmMr54VfCoRn5GS
BwwjQWjjly+J/WOucDMsa57SuyqwZuW/apYLhQzQ2g5svjPjcli4OUGCpFnPabCT
H/6LvSaCtKPW3JNWJR0GXFlCQKLRiOMrqOVVMUDfDzj42ikBMxJk3TVOKDGZc00j
CnDp5+0wPmjxP4U4DUJkOst52BhvU31t2F2VKtrZGrR0fj/zwWZyWc22nrlvJuLv
B8luU/2U/GRv2AK0/KkhqjaSOYfdRDWWI45cgIk7Sg5yGGg7a860bL5syQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ89CFwapvXaYhAzUZ4MXHuasB0MB8GA1UdIwQY
MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt
NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3
LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRwrYfwl
CR4G5oZphGtp9ty63i/e9Kn40Fwg7i1gSEXJm9o7m48YGDCqkVsaJBHQ9Eg3z0i/
kqV0kocWWSwAs/HwRDJ9j20H3WOJsivoWwCYwq6UZWul/YOddx9eVkgWuSkbMfWQ
CpqXV4OD9rQwvtXttRPs0DF+zSuyQSgPLlxwOcm2ZmQTF7bzQeyFXuoEVGOafUSw
j3fA/IQ7vFjs0DML3fp6yXLG+dVPW5yEBe5BBY7xLefJxg2hzox3bA+UezMivQn4
dERbacq/ULjxG8FY2Rz6UdWRXa0PTB1fFSYEndVLsKnEI4eta7Ks3LHDKfHavXOA
W4dDaVAN1zuQKQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:41 2026 by rpki-client