Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: WyC/WZoKh6WiqfpzGlPqrLt4wDoNk8fpxy3HvZpMQA4=
Subject key identifier: 9D:D3:63:0A:42:69:EE:CD:EE:04:0D:3C:7E:CC:FE:4A:01:17:99:A9
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019FA974DFCF608AC7D9A3FFE7026D19D418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0DB4
Signing time: Tue 28 Jul 2026 16:00:36 +0000
Manifest this update: Tue 28 Jul 2026 16:00:36 +0000
Manifest next update: Wed 29 Jul 2026 16:00:36 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: Ag+FfYzQtjT2psGCLLBCVgrBffEAH+WfeaP2VUqtEQk=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:df:cf:60:8a:c7:d9:a3:ff:e7:02:6d:19:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Jul 28 16:00:36 2026 GMT
Not After : Jul 29 16:00:36 2026 GMT
Subject: CN=9dd3630a4269eecdee040d3c7eccfe4a011799a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:02:33:07:2e:5a:6c:c6:15:c9:9b:04:1f:
57:e7:1e:71:1c:57:b1:99:24:63:51:7d:89:46:d1:
81:03:0b:bb:2f:5b:8f:10:7f:92:e4:df:60:8b:2e:
ee:c2:7a:4b:a0:a1:68:26:f2:19:67:6b:0c:0d:34:
13:62:24:fc:95:1d:b8:ef:3f:9c:df:ae:51:b1:15:
62:77:bd:b4:c4:21:23:bb:aa:60:ff:dd:f1:35:01:
e4:e0:40:24:0c:8b:fa:e5:40:a3:5a:46:50:d9:50:
be:73:3e:e4:f9:92:f0:49:d1:d3:e8:66:a3:2c:fd:
49:5d:5f:b4:eb:4b:21:10:cc:3a:e4:3b:d4:31:1f:
50:94:a2:47:e2:07:f3:e5:8a:8c:3c:b4:a0:a8:3f:
1a:70:98:d7:cf:d2:ef:be:41:0c:f7:5e:96:53:fd:
60:fa:7e:8b:2a:7a:b1:1b:84:a3:1b:62:af:18:63:
9a:46:ea:ce:d4:12:17:a6:d9:9d:60:c5:8e:35:47:
f3:b9:a2:b7:59:2c:f8:1d:b6:0d:b6:6e:72:9d:9b:
b2:53:0b:af:aa:7c:58:34:e4:80:92:26:fc:f9:ab:
76:6f:ca:3c:da:c6:84:92:76:2f:27:e5:91:c2:18:
a5:40:b8:e9:59:c7:ec:48:67:ab:db:f9:84:f5:32:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:63:0A:42:69:EE:CD:EE:04:0D:3C:7E:CC:FE:4A:01:17:99:A9
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:78:5b:b5:16:9d:a8:c6:d6:4a:ea:af:c2:fe:fe:2a:80:
41:fb:ed:e7:08:00:a9:21:d9:2d:2a:4c:24:2b:59:06:a8:a7:
38:91:4d:1c:c6:ab:d0:4b:2e:36:40:28:f0:1d:8d:4c:e6:d8:
34:c3:34:91:6e:f4:4f:8a:4e:c4:f0:ec:f5:1f:ca:b9:a9:cc:
7a:d0:fb:6b:4a:da:9f:ac:a2:87:8d:f5:66:3c:1b:75:5a:0c:
a3:ab:a5:61:00:8c:f4:c9:aa:02:49:b9:c4:3f:80:cb:e2:d6:
a0:0e:6d:99:36:25:31:92:1f:3d:75:c3:58:af:0d:2c:21:24:
2f:12:ef:e8:26:d6:3e:b6:3f:92:24:55:fd:dd:20:59:95:e3:
14:48:05:c2:51:c6:68:2f:1b:86:fd:17:49:10:da:bb:fb:71:
cf:97:62:cc:a0:12:5d:b3:7d:d8:2c:79:fe:e7:9d:6d:00:e7:
6f:c0:ac:1f:5e:25:6c:e0:5e:1a:2c:03:ca:9c:eb:87:9d:83:
38:80:86:df:30:80:92:d5:67:e2:60:cb:59:68:1f:eb:aa:33:
56:44:a9:5d:af:d7:ce:0a:3a:69:4f:55:48:cc:29:d9:d5:8d:
d7:a9:2e:54:fc:d8:67:7f:a2:23:86:e4:88:63:7f:46:29:8d:
f3:9b:b2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdN/PYIrH2aP/5wJtGdQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjYwNzI4MTYwMDM2WhcNMjYwNzI5MTYwMDM2WjAzMTEwLwYDVQQD
Eyg5ZGQzNjMwYTQyNjllZWNkZWUwNDBkM2M3ZWNjZmU0YTAxMTc5OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oECMwcuWmzGFcmbBB9X5x5xHFex
mSRjUX2JRtGBAwu7L1uPEH+S5N9giy7uwnpLoKFoJvIZZ2sMDTQTYiT8lR247z+c
365RsRVid720xCEju6pg/93xNQHk4EAkDIv65UCjWkZQ2VC+cz7k+ZLwSdHT6Gaj
LP1JXV+060shEMw65DvUMR9QlKJH4gfz5YqMPLSgqD8acJjXz9LvvkEM916WU/1g
+n6LKnqxG4SjG2KvGGOaRurO1BIXptmdYMWONUfzuaK3WSz4HbYNtm5ynZuyUwuv
qnxYNOSAkib8+at2b8o82saEknYvJ+WRwhilQLjpWcfsSGer2/mE9TKH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3TYwpCae7N7gQNPH7M/koBF5mpMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeZ4W7UW
najG1krqr8L+/iqAQfvt5wgAqSHZLSpMJCtZBqinOJFNHMar0EsuNkAo8B2NTObY
NMM0kW70T4pOxPDs9R/KuanMetD7a0ran6yih431ZjwbdVoMo6ulYQCM9MmqAkm5
xD+Ay+LWoA5tmTYlMZIfPXXDWK8NLCEkLxLv6CbWPrY/kiRV/d0gWZXjFEgFwlHG
aC8bhv0XSRDau/txz5dizKASXbN92Cx5/uedbQDnb8CsH14lbOBeGiwDypzrh52D
OICG3zCAktVn4mDLWWgf66ozVkSpXa/Xzgo6aU9VSMwp2dWN16kuVPzYZ3+iI4bk
iGN/RimN85uyuA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:35 2026 by rpki-client