Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: MJ38KtFc1UQ/8b4c5ogbMFqQLj8cqWbWrM+hErd0GZQ=
Subject key identifier: 5D:17:E6:5B:FD:99:09:74:40:F1:0B:59:3B:7C:3B:4C:D6:17:F9:C7
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019FAA88AAC6B0B0AD7E304AF9C78C71F75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 10E1
Signing time: Tue 28 Jul 2026 21:01:50 +0000
Manifest this update: Tue 28 Jul 2026 21:01:50 +0000
Manifest next update: Wed 29 Jul 2026 21:01:50 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: evQXG4oqYF6WCxbyOiVbXJfA6eywy/mN7Dxgh2mgLhY=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:aa:c6:b0:b0:ad:7e:30:4a:f9:c7:8c:71:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jul 28 21:01:50 2026 GMT
Not After : Jul 29 21:01:50 2026 GMT
Subject: CN=5d17e65bfd99097440f10b593b7c3b4cd617f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:97:3a:4d:2d:86:f1:db:b5:48:eb:41:5f:
2b:c6:7b:14:2f:3f:a8:44:83:85:5f:c2:4c:36:ca:
c4:2f:a4:87:64:8f:fa:d9:4a:94:08:a1:14:09:d5:
92:8d:c7:25:0f:45:5e:7d:a3:8c:6b:22:c6:8a:43:
5c:af:86:14:73:ac:98:51:a7:59:de:ae:21:36:9f:
81:39:88:03:82:56:47:08:24:2a:c5:ed:49:b6:dc:
14:3f:a9:7b:3a:b8:b5:74:6a:45:d1:25:a8:a7:d7:
70:7d:e5:1e:86:d4:1d:5d:ca:31:bd:67:73:1f:3f:
13:f8:35:33:ed:e4:1c:5f:24:ed:15:57:57:5a:15:
30:93:6c:38:e3:c4:d1:d3:59:3e:2b:f2:b2:5f:83:
d3:63:e5:ff:cf:d4:18:f1:c0:f0:64:76:e9:90:f0:
ee:ad:7b:71:b7:2b:3d:5b:a9:f2:99:b8:b2:c9:3a:
ff:68:1a:fd:bf:06:d7:73:10:88:12:1e:c3:7c:c7:
7c:6b:cb:3a:ce:d8:97:2b:b8:7b:f1:13:d8:21:da:
63:17:b0:6a:db:3d:a5:51:4f:14:1f:ba:95:bd:db:
5a:6a:a2:0b:8b:32:3e:ad:c9:aa:fc:05:4d:b0:fb:
d3:93:d1:ec:80:8d:29:27:dd:17:75:39:19:ce:98:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:E6:5B:FD:99:09:74:40:F1:0B:59:3B:7C:3B:4C:D6:17:F9:C7
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:47:0f:52:60:e2:79:3b:f8:bf:f6:e0:fd:a5:23:96:49:
bd:d5:d5:5b:25:84:84:15:36:b2:b1:c7:fd:e3:04:4a:a1:db:
d4:6d:2f:22:21:13:64:64:0e:08:13:79:58:6a:e2:d0:09:b3:
2f:61:48:c2:45:b1:2f:03:9f:24:bc:d5:7f:e3:ba:d6:9a:4e:
b9:fb:a8:1c:50:0a:b9:22:67:ff:6b:3f:b2:b7:77:d8:d8:4e:
1d:bb:8a:2d:7d:60:24:77:a5:b5:30:47:d5:6a:31:79:62:6a:
d5:3e:fd:ed:ed:73:ad:43:7a:c9:8a:36:4b:16:ef:eb:67:55:
11:74:8f:27:16:fa:26:2b:52:56:bc:27:bf:d9:62:dc:09:af:
2c:20:06:87:a3:0f:4f:c6:05:38:21:37:3c:ca:e3:b2:ed:df:
12:d8:70:7e:2b:b7:01:97:85:ba:2c:9d:a4:c9:5d:e5:55:0f:
49:a2:79:7c:51:a3:0b:b1:92:cd:72:0d:82:26:e2:bd:4c:73:
3b:77:95:f8:e4:95:c6:d3:fd:1e:03:02:37:81:d3:7a:97:4f:
5a:3c:9e:06:0d:1c:6f:bb:0c:a5:4a:80:fc:27:17:88:03:a7:
cd:96:5d:07:41:cd:4f:3c:73:3d:7e:3a:38:da:7f:3f:4d:9c:
3d:18:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:29 2026 by rpki-client