Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: tlpP6Clthmw3Jv3iIAyiDXzOJCDSgL4frn0UfbUEhz0=
Subject key identifier: 5E:29:DF:13:C7:54:AB:66:19:8A:7F:A7:FE:F7:76:07:D8:0C:D2:4B
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019FA03AD6DED9775C18E973B0F5A54D4B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 19E2
Signing time: Sun 26 Jul 2026 21:00:38 +0000
Manifest this update: Sun 26 Jul 2026 21:00:38 +0000
Manifest next update: Mon 27 Jul 2026 21:00:38 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: vfxCm7YkzVaFIDNSYw0MupWRACo71q/3mSCKC4PMr7Y=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
6: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
7: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
8: zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa (hash: 1/lNAIoklxBbYzhTd9H1F8HgznVYVdAzulj82IXbCic=)
9: ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa (hash: rTgSzjLcrFW+Ml3XD84+8nUR06InVZZ/zrEf99lwY0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:d6:de:d9:77:5c:18:e9:73:b0:f5:a5:4d:4b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jul 26 21:00:38 2026 GMT
Not After : Jul 27 21:00:38 2026 GMT
Subject: CN=5e29df13c754ab66198a7fa7fef77607d80cd24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:0f:df:86:f2:de:fe:a2:04:8b:a5:13:e8:
6e:f7:83:97:a9:f6:94:bd:6a:e2:dd:ee:88:7e:37:
7e:56:fe:0c:10:62:58:2c:a7:cc:03:66:82:ff:a4:
51:15:f7:7c:c1:2e:36:f7:16:34:af:a2:09:5e:bd:
1e:5a:c5:1f:d2:26:bc:92:27:e5:de:48:2e:9e:a3:
d7:a7:fa:49:be:e4:0b:2e:aa:1a:1a:31:2d:e5:bd:
76:e7:d3:83:78:b0:4a:02:d3:5a:9f:16:dd:c3:0f:
74:3e:03:03:da:83:7c:f1:83:5a:1f:7b:aa:53:34:
06:65:04:3f:05:9b:e2:d1:11:70:65:15:11:a3:f5:
86:e0:09:a5:d5:de:ff:c1:b3:c6:d3:c9:a4:f9:d5:
79:61:8f:32:8f:a8:26:6f:93:60:98:82:93:58:87:
64:cd:5f:d7:46:f7:e3:36:0f:1f:72:78:0d:9c:fa:
b2:db:b3:6a:99:99:6c:30:10:31:27:46:9d:3d:7a:
13:ec:60:00:8b:3f:c4:94:a2:8b:e1:61:ce:62:28:
b5:2c:6e:d0:e9:02:f4:22:07:c1:91:1b:7f:03:22:
23:24:88:5c:9c:36:57:b7:cc:5b:d5:1e:ee:a2:71:
dc:c0:87:fd:74:30:3f:21:7b:8e:be:49:16:dd:ec:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:DF:13:C7:54:AB:66:19:8A:7F:A7:FE:F7:76:07:D8:0C:D2:4B
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:45:29:ab:1d:77:b7:59:fb:dc:03:55:99:2b:22:5c:c9:
ee:80:76:f1:ce:ec:14:a1:ac:34:e7:9a:20:5e:39:f3:86:ec:
ac:a2:e7:05:1d:4f:5e:de:a8:fd:43:0a:0d:c7:31:df:b0:79:
e4:f1:a2:cf:8e:9a:d6:d2:e6:1c:1d:ff:53:c6:17:7a:b0:5c:
c9:ff:7c:5a:54:1a:43:e0:ac:01:8d:88:4c:ff:c0:e4:ee:da:
27:9e:5b:cb:0a:43:f4:97:fb:25:17:3d:42:49:3d:69:86:1d:
58:90:ed:6d:bc:1e:2f:ae:e2:47:36:7d:f4:50:59:c3:f5:04:
8c:81:3f:f5:04:1f:86:c1:d4:97:23:56:f2:87:b4:c2:b9:2b:
05:fa:c1:18:f1:cb:39:da:c2:e4:0d:d5:cc:46:23:16:46:04:
bf:56:c6:e0:5b:72:1d:56:a4:e7:1e:17:9e:9d:1f:70:51:56:
cb:11:6f:66:80:65:ab:19:aa:1e:1b:47:22:a8:5c:b4:7e:0c:
8c:f1:7c:ff:0a:57:f0:8f:02:e9:68:1e:07:a1:49:2b:2b:0a:
1b:59:74:0e:5a:75:f1:63:4b:15:24:bb:04:a2:f0:6f:b4:f7:
7b:50:fb:dd:ee:bc:3a:38:06:66:7a:53:1a:ac:2b:b3:df:89:
fe:03:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:55:20 2026 by rpki-client