Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: g7z3rPAM/iWZypA4Zy4EVEcWt5AQ2+V5scTdjyR6APQ=
Subject key identifier: 60:74:09:23:EE:66:95:7A:12:B4:D5:DC:10:CD:FC:5C:96:7B:BC:30
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019FA9AB894AC08699E47DA4FDC67FE61BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:19 +0000
Manifest this update: Tue 28 Jul 2026 17:00:19 +0000
Manifest next update: Wed 29 Jul 2026 17:00:19 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: RL3aUFBcJXxBTwGHOj+USwZ47yHX1UGOoNHUbIfA7Hk=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:89:4a:c0:86:99:e4:7d:a4:fd:c6:7f:e6:1b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jul 28 17:00:19 2026 GMT
Not After : Jul 29 17:00:19 2026 GMT
Subject: CN=60740923ee66957a12b4d5dc10cdfc5c967bbc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:d3:97:19:4f:80:bf:de:ec:6f:ba:1e:35:
d0:74:e2:e6:a6:0c:1a:15:22:98:8a:9d:1f:b2:1c:
3c:d5:fd:da:d3:51:3e:eb:21:67:ff:98:d1:51:ac:
0a:78:3b:6a:d1:3b:65:41:2b:2b:55:b6:31:cf:9e:
e6:4f:2e:9c:37:3f:5f:5b:a2:c4:1c:ed:3b:28:c7:
27:7f:62:f9:a6:dd:d8:5f:e5:31:c2:e5:04:f9:cf:
31:e2:3d:c0:af:02:a0:fa:7f:65:d7:f3:33:2f:7b:
98:b7:a1:6f:de:53:c1:5a:74:8a:af:99:59:24:c2:
96:cf:c8:f9:17:62:10:a2:41:a8:5e:44:36:e8:f3:
2e:d8:a7:00:78:07:93:1e:16:b4:a6:cb:bf:ca:31:
ea:69:59:93:9d:b8:f7:96:fd:96:77:d7:3a:08:f0:
95:35:0e:69:b4:6b:22:de:87:37:51:07:e4:2e:71:
a6:4d:23:19:10:74:bd:7b:99:bc:82:28:5c:f0:fe:
30:1c:d7:2f:3e:d5:1d:12:5d:70:26:0b:41:aa:5c:
9c:ba:7e:45:1f:e8:9a:15:c0:b2:a6:7b:65:cf:35:
cd:fc:f0:0b:8f:36:25:a6:41:6e:50:e4:4f:b6:93:
6e:9c:c0:f1:74:b1:77:ae:73:5b:ce:8b:76:04:5b:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:09:23:EE:66:95:7A:12:B4:D5:DC:10:CD:FC:5C:96:7B:BC:30
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:68:b5:bd:3d:27:c4:54:ab:1b:b0:75:1e:ce:03:59:96:
1d:a3:5e:db:81:26:e7:d6:9d:37:ff:68:7c:af:52:48:8f:9a:
c8:06:fa:3e:27:a6:fc:6d:11:55:dc:83:a8:c7:2e:ed:21:7b:
a3:e9:4d:da:22:4e:0b:cc:2b:57:5b:85:b1:89:94:94:11:dd:
50:3f:37:d8:4f:a3:70:1b:52:29:58:43:e3:7b:25:50:6e:15:
33:fd:7e:26:8b:b5:1a:f3:a1:57:ca:60:ac:1a:15:20:be:93:
d3:b6:f8:c3:cf:20:51:c4:86:aa:d7:65:31:38:f8:6a:51:a3:
6f:95:85:ba:fb:5a:b2:c1:0d:d6:13:13:56:cd:c0:a8:5a:38:
88:68:be:99:2b:61:5e:ca:cc:79:a3:2d:27:e3:97:2e:d2:48:
8c:e0:af:41:a3:61:ff:a8:9b:be:2f:40:a8:1d:42:95:62:54:
7e:55:e7:f5:da:1f:22:95:8d:d8:54:39:4f:ec:76:dc:6d:e9:
aa:95:2a:86:24:d9:f3:88:ec:ee:90:6e:dd:1f:35:80:0f:be:
8a:b6:8d:d3:e1:05:87:43:dc:16:15:bd:d8:bf:3f:c9:86:e9:
c9:4f:82:95:da:e2:e9:82:fe:cf:4e:f9:bf:12:c5:1c:c5:ed:
f1:d5:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:49 2026 by rpki-client