Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: tzgCCZdSaf1+SxExsvqYmoDncJPeK9LhNhB2x5Pj4ZM=
Subject key identifier: 34:0F:68:67:E5:88:7E:F5:1B:B8:70:C1:FB:2A:E0:EA:69:14:97:DB
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019FA304B0829279CCAE3A31497A3943A031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 19E9
Signing time: Mon 27 Jul 2026 10:00:21 +0000
Manifest this update: Mon 27 Jul 2026 10:00:21 +0000
Manifest next update: Tue 28 Jul 2026 10:00:21 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: H/b0fM/jyGiT483g3RJ8VhViMxD+KHDeMuXvEq3tSG8=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:b0:82:92:79:cc:ae:3a:31:49:7a:39:43:a0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jul 27 10:00:21 2026 GMT
Not After : Jul 28 10:00:21 2026 GMT
Subject: CN=340f6867e5887ef51bb870c1fb2ae0ea691497db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:a1:b8:40:94:4f:1b:19:b6:47:cd:44:4f:
3a:2a:1a:37:a8:4c:63:5b:73:fd:09:81:fc:80:f0:
1e:dd:7c:6f:f2:b3:fc:17:dc:60:58:a6:39:10:b5:
a3:91:b3:f5:92:4b:27:40:53:27:73:19:e6:12:cd:
7c:50:b3:04:26:b3:7c:de:0f:b7:62:60:d7:a4:53:
c0:99:ce:4e:a1:7b:6c:4b:e9:1e:cf:27:4d:08:3e:
d5:4b:2a:ad:8e:4a:e9:8b:e7:08:64:48:af:de:ff:
2f:7f:65:95:d3:6a:e6:a7:6a:f0:69:4b:f5:31:14:
37:90:5a:f2:53:7e:84:68:2d:0a:2b:4f:20:ba:86:
7e:d4:ee:30:47:47:3d:f3:cb:6d:15:54:00:05:cf:
de:fb:2a:f0:6e:4c:52:54:13:4e:60:70:4b:95:ca:
cf:6e:8b:35:ce:97:a6:2d:cd:9b:e3:d7:59:35:38:
00:ef:a6:1f:ea:d1:47:0b:c7:86:f2:32:74:9e:e5:
69:86:79:61:cc:e5:cb:0e:45:b3:87:69:9c:fc:89:
e9:5c:6b:13:e9:6f:c2:e5:13:b8:34:2a:b2:ab:0a:
37:b4:e4:26:fd:66:cf:87:32:7f:5d:a8:04:9f:4c:
a0:fd:d3:f9:b7:58:95:b4:4a:b8:7c:ff:60:da:e3:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:68:67:E5:88:7E:F5:1B:B8:70:C1:FB:2A:E0:EA:69:14:97:DB
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:94:19:58:7d:3d:6a:8e:68:db:ba:bb:9b:95:36:b0:61:
bc:8c:a5:64:c8:52:ad:cb:fa:90:cb:0e:66:4d:c0:51:6d:be:
9d:1e:ef:32:eb:71:0c:5e:3d:76:16:b6:43:0e:85:3e:04:c9:
41:f3:70:bb:68:2c:45:8e:62:8e:76:d2:01:fc:16:84:31:95:
c8:cc:96:d1:31:6b:cf:75:ae:2a:54:37:de:35:1e:56:41:55:
f9:bc:fe:a0:91:3e:79:d8:ba:5b:1f:d8:5c:23:4d:5e:bb:5a:
00:03:07:b5:e8:47:c1:0e:9d:75:33:af:d3:83:eb:6e:b8:9b:
39:47:66:f6:0f:a1:07:f7:53:57:9e:74:f6:e5:3c:4e:fc:a1:
81:21:e6:d5:22:f9:17:f5:89:d8:32:a8:0b:c6:de:82:6c:62:
d8:f8:f7:b5:4d:8b:2c:d3:02:c7:b9:b2:62:ec:05:40:47:f6:
18:89:a7:53:9c:aa:1f:ab:7c:75:6a:6d:46:98:52:c3:40:60:
57:3e:8d:bb:60:9e:93:86:2b:4d:ea:bc:0a:cb:13:b2:18:1b:
33:f9:f4:ad:08:49:ea:2e:fd:02:92:79:29:0e:d2:30:98:ab:
75:58:b7:cc:b0:5a:4f:5e:83:f7:21:0d:78:2d:9b:1b:ce:b0:
7a:13:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:14 2026 by rpki-client