Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: RLUa+hb4dXQT/DR4ElDmLszIeyXM/3ZG8m+BUHRa++k=
Subject key identifier: 88:BE:50:07:76:7E:37:E0:38:14:60:A3:CB:30:0A:FE:BA:90:28:36
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019FA93DDB9018418A59BD7858417DA6340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 15:00:31 +0000
Manifest this update: Tue 28 Jul 2026 15:00:31 +0000
Manifest next update: Wed 29 Jul 2026 15:00:31 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: h3QnUEjfRZSL4LIn8qFo4jEW15gg9MtXauHth7jStJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:db:90:18:41:8a:59:bd:78:58:41:7d:a6:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jul 28 15:00:31 2026 GMT
Not After : Jul 29 15:00:31 2026 GMT
Subject: CN=88be5007767e37e0381460a3cb300afeba902836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:f4:d3:59:85:a9:65:a9:e1:0d:37:7b:79:
5a:c6:39:30:aa:dd:a2:de:e6:6f:d2:a6:d4:cc:66:
ac:09:83:52:17:f5:13:50:6b:4f:ce:8d:eb:c0:f3:
c5:ee:60:de:11:c4:1c:81:bf:10:a3:29:6d:68:9c:
25:2f:05:af:37:4f:59:e7:ae:37:88:f9:84:6f:39:
72:e5:46:60:7c:7b:18:f6:06:82:36:d0:74:4d:01:
21:b8:eb:07:c5:3e:11:53:fa:47:c8:c2:11:e4:95:
bd:a6:e1:e9:a7:d6:d5:05:ec:2f:5c:33:eb:76:e7:
6d:1e:97:13:79:c4:35:26:0c:1a:38:e1:0d:d5:7b:
38:db:97:5d:d6:b3:3d:72:93:bd:f2:e7:16:3e:6e:
69:e0:c5:78:fd:e7:f3:c0:71:e3:34:2b:82:e3:d8:
74:81:e4:91:c1:7c:10:4b:92:ea:93:7e:53:eb:44:
02:5e:d1:cb:cf:e5:3f:25:8b:8f:31:59:46:a4:64:
c1:d4:2e:cf:a0:f8:bb:07:9c:b8:bf:b8:12:7a:22:
65:8d:54:99:3f:6b:fd:6b:85:2b:96:6d:77:2d:07:
ad:c7:33:02:81:65:ca:67:c6:63:59:22:ab:b4:b8:
e5:6b:78:4c:82:9e:b9:ce:ed:7b:12:c9:5e:2f:62:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:50:07:76:7E:37:E0:38:14:60:A3:CB:30:0A:FE:BA:90:28:36
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:d4:f2:97:96:af:80:e6:07:f9:4c:ad:08:2d:8e:32:2a:
79:55:9a:d2:b2:d7:95:37:84:07:12:f9:75:66:66:a9:2d:5c:
5d:f7:b2:79:88:4f:ad:95:d4:b4:92:40:27:b8:35:68:f8:7f:
6e:6b:69:95:f6:ef:4a:e6:e2:be:67:8d:97:94:d6:af:b3:63:
04:b6:57:1d:85:31:f5:8b:b5:64:83:a8:1e:35:05:31:43:9d:
ca:71:a4:76:b4:0f:5e:dc:05:6d:5b:61:76:4f:da:ac:63:d2:
f4:d2:ea:4e:58:b9:ea:fc:9a:a1:53:3b:bf:c6:2a:c3:24:71:
f0:17:f0:1e:b7:23:7a:ce:25:3c:3d:5e:2b:a0:e8:b0:de:a3:
2d:b2:a2:3e:b6:99:e3:37:a4:53:70:87:47:ea:98:cd:c3:1f:
bc:a1:24:57:8f:11:07:76:3f:f2:97:a7:fa:5e:a8:df:67:d9:
b4:18:5b:b0:bf:01:86:70:2b:40:f7:5b:92:f4:58:b8:26:0f:
7e:37:0c:f1:8d:e3:3e:08:11:24:bd:f3:7e:58:66:bd:ff:ac:
12:f5:f4:e2:94:1c:ac:0c:3b:bf:b2:dd:ee:8d:6f:25:77:35:
fd:39:47:53:6c:c4:7e:dd:8d:93:89:c5:e2:b7:a3:bd:21:97:
d1:2d:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:16 2026 by rpki-client