Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: 9NCCxzUl3fAjpp3AM7J8kT+aWJvEd4sdz0dzWshPL0M=
Subject key identifier: DF:3F:7F:A3:2E:74:AA:E8:C1:F6:2A:27:7D:F8:43:76:66:2F:14:72
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019FA9AB9CE804FFB42BD194CD1B452D8427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:24 +0000
Manifest this update: Tue 28 Jul 2026 17:00:24 +0000
Manifest next update: Wed 29 Jul 2026 17:00:24 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: LwhVyiS9AlcJv0bb0D6/lf9kY0g2JzTIKoWOXdT1AC8=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:9c:e8:04:ff:b4:2b:d1:94:cd:1b:45:2d:84:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jul 28 17:00:24 2026 GMT
Not After : Jul 29 17:00:24 2026 GMT
Subject: CN=df3f7fa32e74aae8c1f62a277df84376662f1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:0a:26:23:96:36:49:46:83:1f:cb:6c:34:
57:06:d7:29:2f:2a:e8:4f:d9:2a:d4:c0:b0:db:98:
8d:1d:c2:35:90:8e:ef:16:79:c0:ef:3a:7d:6c:65:
e7:5f:b9:fa:88:a2:51:24:74:ed:e0:2f:4e:8e:f4:
c0:b3:7a:08:29:62:af:03:b3:5e:7d:bb:7c:04:4a:
46:00:1a:cc:14:72:80:bc:87:8e:cb:a5:f2:35:0e:
6c:7a:06:61:23:52:94:2a:82:a8:af:05:f7:61:fa:
13:2b:35:35:69:5b:c2:d1:a6:76:52:67:28:e6:0d:
d5:a5:83:d0:bf:79:a3:1b:72:68:87:94:dc:f5:c9:
5e:b5:e2:2d:89:80:6a:05:2b:66:ba:c8:ba:38:98:
41:a9:fe:1b:84:6f:c7:f6:02:32:95:5c:82:72:3a:
4d:66:b4:3b:bd:4a:48:36:62:af:ed:cf:ac:3b:fd:
22:cd:98:7d:cf:ad:3b:14:55:15:98:19:d8:78:8d:
0a:ad:dc:52:b8:6d:42:af:1d:c8:15:6d:9b:21:04:
57:f1:5a:fb:c0:ed:e4:3e:df:f6:92:03:cf:4e:a0:
1e:85:13:2f:8f:ef:24:a0:58:6d:e2:ae:56:e2:ba:
26:e2:03:85:b5:ec:bf:e4:29:3f:69:7a:af:79:5d:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:7F:A3:2E:74:AA:E8:C1:F6:2A:27:7D:F8:43:76:66:2F:14:72
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:ab:26:55:5d:93:c0:83:9f:1a:b7:a0:d2:ac:62:98:ee:
ca:4d:da:bb:d1:97:fb:5c:29:83:fd:13:42:b3:b7:ba:3e:2b:
4c:da:67:48:4b:95:50:0b:a2:d1:7d:a4:e7:79:a8:60:8a:50:
46:8b:d0:aa:7f:89:ed:00:11:94:f4:d2:90:a6:13:38:ba:59:
4a:a9:8e:c3:a9:b3:ab:62:ab:90:d9:a9:51:e5:b3:25:76:a8:
82:d4:9b:b5:f6:59:a3:ff:bb:a3:08:c6:07:05:ab:7e:c7:7b:
82:42:2f:77:43:ce:22:b3:49:ee:81:46:59:11:0d:e2:f9:06:
fa:58:0a:db:c2:98:e7:3a:10:2b:2c:7b:c9:a7:92:4e:5c:e4:
90:92:66:10:83:cf:68:92:b0:76:33:93:10:41:33:b9:4f:b2:
15:b0:02:c1:b3:75:23:1e:b6:30:36:ab:3c:5a:42:91:63:fb:
34:54:93:20:c5:5e:12:be:84:f4:b4:4d:fa:f6:61:68:ee:f2:
4d:52:97:a5:03:8b:af:f7:31:d4:f9:a0:fa:2a:05:0f:32:dc:
e3:9f:1f:60:68:5e:71:4e:f5:95:bd:c0:7b:91:7f:c3:e2:11:
45:df:93:4d:5d:a5:0a:06:ce:f5:e0:ce:e5:c0:40:f8:02:bc:
ff:8c:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:42 2026 by rpki-client