Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 4yN3f9tt8SH9bTpuLHN6wW8xaavcE0Tpi7GfI7mDVQQ=
Subject key identifier: 16:70:8F:79:65:5C:58:84:5F:A7:C2:91:E6:3A:07:AA:43:E0:9A:55
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019FA899A49ECF06F7AC23EA16D67C2BBFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 093C
Signing time: Tue 28 Jul 2026 12:01:09 +0000
Manifest this update: Tue 28 Jul 2026 12:01:09 +0000
Manifest next update: Wed 29 Jul 2026 12:01:09 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: YZQvX/P9BG/44Hq90UdoxFw2UjLCCodtJb8zYuUnCf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a4:9e:cf:06:f7:ac:23:ea:16:d6:7c:2b:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jul 28 12:01:09 2026 GMT
Not After : Jul 29 12:01:09 2026 GMT
Subject: CN=16708f79655c58845fa7c291e63a07aa43e09a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:79:e4:a6:d6:c5:c4:65:06:58:20:c9:d1:
2f:14:92:2b:26:6b:37:f6:90:66:68:60:56:11:59:
97:95:02:4b:a8:10:e8:58:1a:a5:49:3e:ae:a0:b5:
e3:cf:20:17:04:1c:46:87:65:2d:03:ae:76:61:0a:
25:60:38:fe:0a:00:e7:a7:da:50:38:b8:28:92:ee:
c8:91:6f:0e:8a:90:2c:97:65:5f:f0:c1:18:42:32:
3b:96:04:90:c0:e5:ea:96:c7:1e:76:ba:80:44:f3:
6c:d6:9b:90:1c:c2:48:10:7c:90:42:1c:38:93:03:
62:4a:57:1e:2b:c3:7c:3a:33:bd:8b:54:0b:9e:be:
d3:51:fe:78:dd:5e:55:dd:e9:a9:69:21:e9:72:5e:
08:5d:95:d2:f3:88:58:7c:d4:09:89:b4:25:b1:7d:
df:95:84:40:82:61:89:24:d1:0a:b5:fe:ad:a3:0c:
4c:d2:a3:e7:7e:d2:73:48:c7:a6:27:a4:3c:7e:74:
d6:6b:da:ab:7e:51:c6:ee:86:80:8c:80:0d:52:43:
eb:2e:5f:29:81:28:c3:ef:b0:8b:f1:f8:4e:53:8d:
23:e5:86:fb:d0:55:3f:51:d5:f5:bb:42:c0:fe:36:
31:55:5d:20:bc:c6:bd:e9:9a:cc:47:70:4b:09:00:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:70:8F:79:65:5C:58:84:5F:A7:C2:91:E6:3A:07:AA:43:E0:9A:55
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3a:dc:62:4d:c9:57:49:40:85:a0:c9:d4:f5:b0:87:02:70:
48:51:02:85:ca:ad:8c:56:7f:31:5b:5f:10:ca:11:bc:04:0a:
c3:67:c6:f8:12:7c:9b:55:6a:72:a0:72:68:42:b1:a2:f6:90:
c7:b5:31:ca:cb:b3:aa:02:fe:42:47:ea:a3:ba:f8:db:52:b6:
fb:f6:21:68:05:34:14:05:22:90:ac:df:99:16:c9:5c:53:3d:
f9:3e:6c:da:8e:2b:17:44:de:e0:46:9b:21:bb:80:04:d6:7b:
53:de:38:d8:21:87:8e:e3:63:de:ad:e0:9d:17:19:b6:b1:71:
44:ee:5c:21:28:b5:e0:b0:cf:d7:04:6f:a9:cc:4d:8e:92:f5:
48:41:59:e1:ec:a5:21:53:26:95:46:4f:1b:32:bb:da:47:8c:
db:18:4d:50:67:65:bf:bf:1f:0a:34:d3:e2:22:8f:dd:e0:6c:
55:bc:7b:2d:ba:71:16:7f:00:ca:cb:f5:8d:21:d6:0f:32:ec:
b7:23:66:f5:81:86:22:48:09:81:6e:21:ce:db:17:42:1b:99:
0e:4b:58:26:5c:79:32:ae:bb:f8:07:bf:b2:57:61:c0:47:b4:
11:36:c0:c3:02:e6:ee:b4:e8:dd:7c:62:de:f6:f2:5e:74:12:
7d:c1:56:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omaSezwb3rCPqFtZ8K7/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1
ZTUxNDQwHhcNMjYwNzI4MTIwMTA5WhcNMjYwNzI5MTIwMTA5WjAzMTEwLwYDVQQD
EygxNjcwOGY3OTY1NWM1ODg0NWZhN2MyOTFlNjNhMDdhYTQzZTA5YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZ55KbWxcRlBlggydEvFJIrJms3
9pBmaGBWEVmXlQJLqBDoWBqlST6uoLXjzyAXBBxGh2UtA652YQolYDj+CgDnp9pQ
OLgoku7IkW8OipAsl2Vf8MEYQjI7lgSQwOXqlscedrqARPNs1puQHMJIEHyQQhw4
kwNiSlceK8N8OjO9i1QLnr7TUf543V5V3empaSHpcl4IXZXS84hYfNQJibQlsX3f
lYRAgmGJJNEKtf6towxM0qPnftJzSMemJ6Q8fnTWa9qrflHG7oaAjIANUkPrLl8p
gSjD77CL8fhOU40j5Yb70FU/UdX1u0LA/jYxVV0gvMa96ZrMR3BLCQDz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZwj3llXFiEX6fCkeY6B6pD4JpVMB8GA1UdIwQY
MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt
Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1
LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjrcYk3J
V0lAhaDJ1PWwhwJwSFEChcqtjFZ/MVtfEMoRvAQKw2fG+BJ8m1VqcqByaEKxovaQ
x7UxysuzqgL+Qkfqo7r421K2+/YhaAU0FAUikKzfmRbJXFM9+T5s2o4rF0Te4Eab
IbuABNZ7U9442CGHjuNj3q3gnRcZtrFxRO5cISi14LDP1wRvqcxNjpL1SEFZ4eyl
IVMmlUZPGzK72keM2xhNUGdlv78fCjTT4iKP3eBsVbx7LbpxFn8Aysv1jSHWDzLs
tyNm9YGGIkgJgW4hztsXQhuZDktYJlx5Mq67+Ae/sldhwEe0ETbAwwLm7rTo3Xxi
3vbyXnQSfcFWRw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:05 2026 by rpki-client