Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: XIp6Z56q+0D8MvVg+uybJKHNJQ1w8NcV4eEOzTmOLIM=
Subject key identifier: 2B:FF:26:CD:57:CA:79:E5:F3:4C:F1:57:12:C1:AB:39:86:F9:E6:63
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019FA90751F6EFA8CF91DCACB6D01B2BA170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1963
Signing time: Tue 28 Jul 2026 14:00:56 +0000
Manifest this update: Tue 28 Jul 2026 14:00:56 +0000
Manifest next update: Wed 29 Jul 2026 14:00:56 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: etXT1Eu1kj+qOmLpK9jrKxkc25/880TX9TFHwENY8Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:51:f6:ef:a8:cf:91:dc:ac:b6:d0:1b:2b:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jul 28 14:00:56 2026 GMT
Not After : Jul 29 14:00:56 2026 GMT
Subject: CN=2bff26cd57ca79e5f34cf15712c1ab3986f9e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:49:6d:ae:1f:ab:2f:7a:69:37:26:96:f3:
30:93:28:3a:7f:0a:24:2b:e4:30:d1:09:ef:30:ae:
e4:cc:32:09:cd:d2:1d:84:66:8a:11:dc:a5:9c:a4:
d5:f1:2e:68:b4:97:c6:3b:14:60:bb:da:96:82:4d:
03:b2:3c:9a:b9:e3:72:e9:9b:43:a8:c9:d5:be:0e:
27:93:87:b7:ff:af:aa:63:f5:2e:14:35:b0:9d:0b:
7b:8e:48:ef:a8:64:b1:e9:30:ca:f1:97:2d:71:f3:
f9:f4:4a:bc:55:c7:bd:0e:74:4b:bb:20:d5:ed:6d:
8f:d7:dd:4e:9d:e9:24:e0:42:6f:5f:39:a7:6e:e6:
35:cf:fa:97:cb:11:8f:c7:36:1b:fc:d7:47:20:91:
cd:b1:d7:0e:a7:9a:b6:04:6a:5f:a8:f1:48:54:0d:
f1:aa:ae:9b:72:94:9f:56:85:bf:d5:8c:86:d6:56:
c2:a2:9f:ab:ef:f5:e1:13:7b:92:6e:f2:a2:5a:12:
f1:5a:41:5e:47:c8:3e:1c:18:89:7e:c2:42:16:7f:
ef:a5:b6:0c:2a:e8:a3:e8:37:4f:15:da:8d:f3:d5:
54:44:59:90:db:6f:05:67:fb:a5:07:15:f1:77:9e:
c3:ce:1b:7f:83:6d:96:dc:fd:bd:b5:a6:88:90:f6:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:26:CD:57:CA:79:E5:F3:4C:F1:57:12:C1:AB:39:86:F9:E6:63
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:79:84:13:d6:23:b8:64:5f:40:1c:22:04:de:4c:62:6e:55:
ac:eb:9e:e1:ea:f1:37:9c:9c:c5:5b:21:70:d4:4d:79:ba:21:
14:7c:bf:a6:d1:3f:3d:f8:06:4d:38:16:97:02:61:a7:54:a7:
cf:dc:c6:55:cf:c1:01:e4:0c:58:52:b4:bc:26:2d:9b:dc:b9:
2d:c4:98:a9:bf:7f:4c:33:ff:4a:5d:f6:17:bf:e4:a6:f1:87:
2f:88:cf:c8:47:84:37:f2:73:7e:16:83:4d:f2:83:21:66:f1:
f3:95:ad:4d:81:00:18:dd:99:16:bb:8a:1f:8e:f9:3d:a6:aa:
94:6c:6b:7f:a4:e5:84:56:84:00:30:d2:5d:da:fe:ec:e4:b3:
07:64:35:77:a5:1b:28:80:da:99:64:fc:2c:57:e4:1d:68:4b:
0b:14:de:53:6c:c5:c3:51:45:4f:6b:54:23:19:e5:e6:8c:b9:
8d:49:0c:71:b5:23:a1:ba:ab:a6:e6:f6:28:7b:3c:b7:7a:0d:
06:f1:66:a4:f2:ae:66:17:bd:80:6c:39:18:4c:d4:f3:58:f0:
2d:c2:ce:d2:21:bf:a8:51:c4:b1:a4:86:00:14:1a:db:d8:b6:
71:93:3a:f1:3b:d7:41:3d:0c:4b:b8:d0:4b:e6:e0:8e:5d:4b:
36:89:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:54 2026 by rpki-client