Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: E55DdBFx2vJ1IeWw4hpyQ0Z/1/tA8HikzD7gwOOSKEs=
Subject key identifier: EB:74:E4:EB:B8:A5:56:06:FE:B2:83:C8:96:37:94:A1:CD:77:E6:38
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019FA33C1F1330A104B0610B793DDB603078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 08E6
Signing time: Mon 27 Jul 2026 11:00:54 +0000
Manifest this update: Mon 27 Jul 2026 11:00:54 +0000
Manifest next update: Tue 28 Jul 2026 11:00:54 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: ws3SdEYoE4p/EkruVBR5yovh/6ODF9j7ss/CnU7fQ7s=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:1f:13:30:a1:04:b0:61:0b:79:3d:db:60:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jul 27 11:00:54 2026 GMT
Not After : Jul 28 11:00:54 2026 GMT
Subject: CN=eb74e4ebb8a55606feb283c8963794a1cd77e638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:5c:3d:c3:6a:56:98:75:8d:40:4d:19:a6:
4f:28:94:7c:40:9a:fa:8f:29:15:d6:49:b4:04:07:
1b:0c:10:ec:b8:54:09:de:0e:07:5b:99:bd:e1:3a:
14:8e:7f:56:8d:c2:51:28:7f:18:82:68:b8:cf:c5:
19:a7:4c:2f:4e:99:6a:cb:6a:96:e2:b7:76:b7:06:
c7:44:72:c1:84:74:21:02:38:e0:38:5a:39:1b:32:
8f:70:e5:6a:0d:f3:7c:8f:32:bd:1e:6a:a2:14:f7:
99:6f:86:65:87:7f:42:bb:fa:6b:d0:83:88:92:0d:
11:cd:33:f0:c3:af:10:16:6d:ff:13:72:08:c4:95:
97:e9:87:b3:f5:4f:07:8c:7a:6f:9f:ee:98:ad:e2:
a3:ba:9e:ea:e5:a7:44:34:69:f6:4b:1e:6b:31:12:
20:1e:63:af:e9:6d:4b:fc:58:d1:c5:f6:93:a9:68:
05:39:d5:b6:07:ef:d1:43:98:f9:65:ca:3e:1d:ba:
39:cd:67:59:7f:f9:80:76:a9:b3:c2:3f:69:b9:1c:
1f:8c:21:b2:9c:84:55:79:b3:22:27:0b:ca:fa:f5:
47:47:fc:d1:0d:68:85:08:dc:10:8e:ea:58:97:0a:
eb:e5:db:47:f1:2b:4d:5c:ac:a4:de:c2:42:3b:58:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:E4:EB:B8:A5:56:06:FE:B2:83:C8:96:37:94:A1:CD:77:E6:38
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e2:75:c7:f4:06:d6:f2:e2:d2:b5:17:21:39:93:db:81:11:
9a:be:ec:07:8a:d7:12:a2:93:be:79:99:1f:9b:06:33:09:0d:
8c:60:9b:a8:be:bc:c6:1a:5f:82:eb:40:34:8b:91:98:dc:d1:
ff:f1:a4:14:2b:bf:5a:72:a6:2c:f7:e7:a2:ee:90:55:c4:33:
a3:23:6a:d6:cc:ef:0c:ce:3e:a8:28:7d:13:bb:39:ba:27:22:
17:f6:e7:c7:fc:92:e8:90:9a:dc:81:de:2a:71:e1:a7:d6:91:
43:d7:20:3a:37:37:43:7d:8a:43:d8:62:b0:ac:33:08:dd:a2:
f3:fd:1a:dc:8f:31:03:35:73:39:e1:94:dd:4e:80:fc:16:ff:
c6:58:f8:e1:55:e1:0f:de:01:fe:6f:2e:3e:f3:43:8d:66:58:
a0:77:56:8d:63:d1:4e:c1:da:a7:41:dc:9c:6b:c8:0e:44:25:
98:6b:1e:75:1e:6b:7b:bf:9b:fe:f7:cc:80:3b:c7:46:b8:fb:
df:ac:0d:46:20:74:3d:04:ac:e3:85:c5:d2:8a:0c:8b:c0:ab:
d2:14:dd:8c:6d:59:79:22:43:73:ec:05:73:a2:be:73:84:9e:
37:0c:eb:1e:a6:70:84:20:f9:5a:94:24:a8:c3:87:97:35:5e:
97:08:cc:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPB8TMKEEsGELeT3bYDB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk
MDRiOTUwHhcNMjYwNzI3MTEwMDU0WhcNMjYwNzI4MTEwMDU0WjAzMTEwLwYDVQQD
EyhlYjc0ZTRlYmI4YTU1NjA2ZmViMjgzYzg5NjM3OTRhMWNkNzdlNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWlcPcNqVph1jUBNGaZPKJR8QJr6
jykV1km0BAcbDBDsuFQJ3g4HW5m94ToUjn9WjcJRKH8Ygmi4z8UZp0wvTplqy2qW
4rd2twbHRHLBhHQhAjjgOFo5GzKPcOVqDfN8jzK9HmqiFPeZb4Zlh39Cu/pr0IOI
kg0RzTPww68QFm3/E3IIxJWX6Yez9U8HjHpvn+6YreKjup7q5adENGn2Sx5rMRIg
HmOv6W1L/FjRxfaTqWgFOdW2B+/RQ5j5Zco+Hbo5zWdZf/mAdqmzwj9puRwfjCGy
nIRVebMiJwvK+vVHR/zRDWiFCNwQjupYlwrr5dtH8StNXKyk3sJCO1iYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt05Ou4pVYG/rKDyJY3lKHNd+Y4MB8GA1UdIwQY
MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt
ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl
LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeJ1x/QG
1vLi0rUXITmT24ERmr7sB4rXEqKTvnmZH5sGMwkNjGCbqL68xhpfgutANIuRmNzR
//GkFCu/WnKmLPfnou6QVcQzoyNq1szvDM4+qCh9E7s5uiciF/bnx/yS6JCa3IHe
KnHhp9aRQ9cgOjc3Q32KQ9hisKwzCN2i8/0a3I8xAzVzOeGU3U6A/Bb/xlj44VXh
D94B/m8uPvNDjWZYoHdWjWPRTsHap0HcnGvIDkQlmGsedR5re7+b/vfMgDvHRrj7
36wNRiB0PQSs44XF0ooMi8Cr0hTdjG1ZeSJDc+wFc6K+c4SeNwzrHqZwhCD5WpQk
qMOHlzVelwjMyQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:02:03 2026 by rpki-client