Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: LAZm0G3NN7Z4LWf3ZAbM/Uc6uw4yMZIYW+i27G+dH4I=
Subject key identifier: C2:AC:24:14:2B:15:DC:F4:20:88:0B:8A:A1:88:F5:0F:CA:44:3E:72
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019FA89A106D36ACA70A5A8B310AAC1393A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0BC2
Signing time: Tue 28 Jul 2026 12:01:36 +0000
Manifest this update: Tue 28 Jul 2026 12:01:36 +0000
Manifest next update: Wed 29 Jul 2026 12:01:36 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: GgdNJZRKCmfBtSJ/P7U+DuEVdUil4wmZoxOfitsaKqY=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:10:6d:36:ac:a7:0a:5a:8b:31:0a:ac:13:93:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Jul 28 12:01:36 2026 GMT
Not After : Jul 29 12:01:36 2026 GMT
Subject: CN=c2ac24142b15dcf420880b8aa188f50fca443e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:2c:91:51:8c:57:07:9c:57:fa:09:27:4e:
7a:0f:05:e2:6d:0e:03:aa:bf:ff:d0:31:fe:19:92:
64:79:56:58:4c:82:84:81:7e:1a:5a:3d:2d:9e:fa:
02:a6:89:8c:ea:7a:37:44:8b:fe:68:f9:0d:7c:be:
89:a3:3f:74:af:7b:98:51:b1:f9:97:0a:1a:ff:8d:
45:de:89:7e:6c:8d:8f:6c:5d:fe:7d:e2:43:5b:36:
d3:df:c8:81:23:5a:75:6c:ab:c7:68:5b:16:2c:09:
9e:41:ca:66:10:26:09:d6:cb:f4:3d:a1:49:5a:4b:
a4:2e:b0:f8:c6:a0:a4:9c:4d:a3:34:59:89:b3:d5:
bc:bb:b4:34:17:21:47:bd:49:8e:56:76:67:67:be:
53:04:6c:e8:43:c5:2d:80:11:bf:ab:7f:d5:01:42:
9a:ea:4f:92:d7:39:39:2b:ac:2d:26:87:b7:54:43:
7f:de:c9:40:c0:98:e0:5c:42:30:9a:c1:44:ca:15:
6c:e9:22:d8:6a:fd:f5:e9:59:20:63:df:e2:38:6a:
10:e8:7e:56:c1:0c:a6:35:8a:72:3a:a4:1a:9f:e5:
e2:61:6b:d9:29:20:39:e4:f1:93:1f:d2:31:b7:11:
19:8e:9a:cb:98:1a:25:02:46:e7:2b:3d:7e:e1:8e:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:24:14:2B:15:DC:F4:20:88:0B:8A:A1:88:F5:0F:CA:44:3E:72
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:0d:63:c3:5d:ab:0e:c5:ff:ec:25:d4:45:a0:50:36:34:
77:85:bf:ce:39:47:11:e6:a1:d4:54:0b:50:0c:59:cd:9b:cc:
18:18:2c:d6:76:31:b1:36:61:da:09:77:38:8b:d6:86:c2:24:
d7:ea:23:9d:b4:3f:9f:7e:9e:6c:92:8b:27:cc:9a:8a:57:c6:
2a:a1:57:1c:43:5e:48:d3:4f:e6:7e:45:3c:71:a2:bb:25:42:
e3:9f:79:57:75:17:89:5a:83:31:e6:9f:68:3c:e8:25:ca:5c:
c3:20:36:ae:9b:c2:3c:f3:2f:be:8f:55:af:42:66:a9:58:95:
0d:dd:16:e3:ba:ba:25:83:e5:dc:b9:b4:02:59:2a:e9:c2:38:
7e:dc:de:46:50:73:44:45:0c:ed:40:a3:0e:1c:b3:87:34:76:
89:84:f2:68:5a:d1:e3:c5:2f:57:09:e9:65:50:df:c4:1b:bd:
aa:fd:c9:12:a4:05:02:d1:46:9b:84:e5:cf:60:14:b5:7d:5d:
4c:e0:47:91:6f:00:5f:0f:c8:a5:b8:fb:07:5e:ae:e9:cd:4f:
e3:0a:87:10:1e:c7:d6:10:81:a5:66:2d:fe:26:6e:9f:4f:1d:
c9:3b:28:6f:3d:72:57:26:03:8f:d7:32:79:46:6f:53:da:8f:
3c:85:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:54 2026 by rpki-client