Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: 2Ers1hzJU33AbsxLhcHAE6VLS7IY3+/9IQ0W7n23GX8=
Subject key identifier: 59:9F:1B:28:D3:EE:87:B8:C6:D0:F2:FB:72:9A:C0:28:5A:8B:D6:71
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019FA898E7CD3B4E73101ACC0D92488D5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 094A
Signing time: Tue 28 Jul 2026 12:00:20 +0000
Manifest this update: Tue 28 Jul 2026 12:00:20 +0000
Manifest next update: Wed 29 Jul 2026 12:00:20 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 5M4kJYnpWn7Od4RGNl2olbbgXxDImbfsdgKQIT48ZPw=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e7:cd:3b:4e:73:10:1a:cc:0d:92:48:8d:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Jul 28 12:00:20 2026 GMT
Not After : Jul 29 12:00:20 2026 GMT
Subject: CN=599f1b28d3ee87b8c6d0f2fb729ac0285a8bd671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:0f:6d:76:04:38:d8:b8:17:5f:dd:6e:82:
0d:5d:d6:23:fc:62:a4:23:b8:7e:7d:45:e4:d8:12:
84:bc:02:a4:39:1b:2e:d0:7c:16:da:70:17:80:5f:
c5:09:91:e0:10:e5:a4:29:73:04:e6:34:86:c0:14:
b9:4c:90:f5:d5:68:8a:1f:58:9c:cb:60:1d:53:9e:
2b:1e:4a:02:1d:25:ae:01:66:6c:cd:3c:3b:bf:93:
f0:ee:fe:93:a0:13:b3:11:67:7c:3f:f8:24:d3:32:
ca:f3:34:79:02:a4:50:85:fe:fa:cd:cb:81:4f:32:
36:a5:bb:c0:a1:47:bc:a6:8a:c9:fd:20:ec:66:3c:
08:db:79:cd:bc:84:09:bf:9e:33:d8:a1:98:ae:76:
d7:d0:8b:26:b1:df:0b:d0:8e:fb:03:50:3d:84:ac:
a8:4e:06:22:8d:14:78:63:eb:24:30:ab:d8:f3:dd:
d5:e9:d1:1d:dc:08:c5:bd:d9:26:e2:af:7c:a0:26:
0b:a4:ea:0b:a4:b8:db:39:94:08:ab:bb:62:bf:f4:
ee:5d:26:66:4d:38:6d:96:54:c3:51:80:da:5d:22:
bf:ee:fa:0e:c7:4e:a0:42:e6:85:10:c0:83:34:eb:
bb:b1:0c:58:a4:63:12:38:08:2e:cd:75:1d:cd:bc:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:1B:28:D3:EE:87:B8:C6:D0:F2:FB:72:9A:C0:28:5A:8B:D6:71
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:d5:a2:12:4c:87:8f:78:9a:21:31:e1:3e:cf:0b:b5:5c:
8c:e3:85:a4:5c:47:37:05:b7:e6:9c:33:6a:55:29:7d:d2:e1:
5b:9b:3f:74:38:28:61:90:9f:06:db:c4:d4:77:e9:54:0f:f0:
74:90:bb:ca:5c:ed:17:47:ef:ae:f8:f6:da:63:1b:38:73:ad:
e8:a3:16:25:bb:98:d7:cc:7c:38:82:5b:04:0b:43:88:4c:a8:
55:fe:e8:f1:64:cd:37:ee:b4:a9:09:5e:56:4c:d2:07:9a:df:
68:1c:6d:9f:d1:4b:0c:c0:f1:a2:28:f8:55:a4:37:68:8a:42:
a5:a0:0d:d3:3f:6f:a9:0d:fd:6b:f0:90:e1:42:38:11:47:56:
c5:34:74:1f:86:95:a9:1f:ae:e1:6e:8e:e7:ce:03:b3:11:7c:
2f:aa:c2:8b:b8:64:22:b2:9d:da:d1:1d:79:e5:35:62:54:d9:
29:f4:e4:d9:c9:4d:b8:8b:72:cd:f0:ac:b1:f1:26:51:da:a2:
0d:1e:2d:0e:aa:eb:4a:0f:b0:2d:88:88:0d:b9:4c:8b:e0:7b:
a3:55:21:08:a4:39:c3:66:6e:b7:a7:74:2f:45:31:d8:03:06:
e6:90:34:a0:15:c5:f6:e2:9a:75:15:62:8b:d7:90:c4:8c:7b:
54:94:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:14 2026 by rpki-client