Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: HPXgatvNh4XjYD0aYIOagySF99mIadPLGPQgUKqvX/U=
Subject key identifier: C9:E8:8B:E4:1F:28:56:0C:04:92:4B:7B:BD:A0:A4:CE:89:01:43:84
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019FA89A2041BE9014E1FEAACF0C3F0EA624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0977
Signing time: Tue 28 Jul 2026 12:01:40 +0000
Manifest this update: Tue 28 Jul 2026 12:01:40 +0000
Manifest next update: Wed 29 Jul 2026 12:01:40 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: BR24+/k8koJd6FE9mQMhQehg91zncGrZOJsHuy95EB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:20:41:be:90:14:e1:fe:aa:cf:0c:3f:0e:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jul 28 12:01:40 2026 GMT
Not After : Jul 29 12:01:40 2026 GMT
Subject: CN=c9e88be41f28560c04924b7bbda0a4ce89014384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:08:ec:af:d1:4d:9f:6d:5b:1c:c9:3e:24:
85:3f:c6:0a:40:b7:f7:5e:5b:0c:02:99:39:37:11:
75:74:84:c0:75:be:5e:e3:8c:a8:48:a3:fb:68:b3:
5b:49:67:5c:ec:98:22:bf:63:79:88:5b:29:3f:43:
0e:ef:f9:22:12:e0:0d:f7:0d:7f:b2:e9:97:3e:26:
d2:45:c2:e4:80:10:ae:0f:6f:ab:eb:64:f9:09:7e:
56:8e:1d:53:4b:9d:29:96:2e:99:b9:38:e7:2a:90:
c2:0a:5f:bc:e6:08:fe:8b:66:ef:9e:23:f7:f7:79:
3f:99:f4:3f:86:d4:34:75:d9:d9:64:ff:93:c2:be:
c1:02:bc:fb:0a:bd:0d:07:75:45:47:b6:47:5f:a3:
4f:65:22:1d:a9:d5:ba:58:c6:6c:38:06:a0:19:4c:
a6:66:aa:64:32:90:54:91:33:49:f8:1f:f5:3a:6e:
21:39:f0:ca:aa:5f:da:2c:ec:9c:65:14:3d:24:b7:
88:44:d9:8e:50:eb:6a:a4:85:10:3a:47:a3:75:8e:
4b:46:db:63:2a:e4:30:de:4d:81:ed:a2:6b:70:bc:
ed:26:81:36:b9:8b:18:45:10:72:63:ca:fe:f1:dd:
18:55:e6:26:fa:d3:04:dd:a3:4d:1b:72:e2:98:82:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:8B:E4:1F:28:56:0C:04:92:4B:7B:BD:A0:A4:CE:89:01:43:84
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:ae:b5:43:12:2d:b3:cf:ae:6d:76:31:06:20:70:8d:04:
0d:3f:80:47:ce:26:97:59:06:c0:cd:f7:2e:7e:47:be:d2:cc:
3c:af:9d:c1:f8:f5:f3:70:3f:f7:9c:e7:2e:34:97:48:8c:1d:
9f:42:93:96:24:c9:2e:7f:db:08:29:cb:30:d1:7b:08:93:0a:
6b:50:14:50:b1:34:0f:4e:a2:3f:01:2c:a7:75:68:ac:ed:7b:
16:01:f1:6a:79:07:ca:af:3c:fd:06:c8:92:15:99:5f:61:9e:
c3:24:94:5b:37:8f:c9:01:d2:b2:58:55:56:54:a8:71:94:18:
f7:f1:35:d7:05:f2:a7:2f:02:e3:29:bc:91:23:5f:d5:d2:ab:
1c:9d:8a:69:b0:2b:1e:6a:9a:24:21:21:20:0a:db:2c:e7:03:
c8:2e:43:58:26:38:00:f7:9f:b6:57:93:b4:89:be:25:5d:78:
dd:f1:40:01:67:0d:a0:9d:36:6f:fe:5e:45:a4:8a:18:4c:18:
ba:01:ce:f2:bf:b3:65:7d:c8:29:9a:91:7c:a3:de:35:a9:e4:
0d:dc:f8:be:2c:e7:33:96:b9:72:d8:c4:1a:9d:20:9d:7c:91:
e9:e6:63:fa:2e:66:47:e2:93:89:cb:9f:96:72:bf:54:bb:e7:
0e:63:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:42 2026 by rpki-client