Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: E82ZBNKz4P/GZmyjmmqPZkir0Rptq6sTzSyEw8k3y2w=
Subject key identifier: D9:B1:F4:D3:76:67:7D:9E:A2:E9:E0:48:07:57:D5:CC:0D:89:4D:99
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019FA1BC160819D3645DC54E355BE5FDC1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 04:01:25 +0000
Manifest this update: Mon 27 Jul 2026 04:01:25 +0000
Manifest next update: Tue 28 Jul 2026 04:01:25 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: Za0F+Uqp/0SW3H+fCE54OOaEyuz+ZWUB+g0o6bIWLoE=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:16:08:19:d3:64:5d:c5:4e:35:5b:e5:fd:c1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Jul 27 04:01:25 2026 GMT
Not After : Jul 28 04:01:25 2026 GMT
Subject: CN=d9b1f4d376677d9ea2e9e0480757d5cc0d894d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:f7:e4:4e:36:86:c1:6c:8c:28:dd:9e:67:
30:a1:59:f6:ee:7f:2e:6a:ff:8c:9b:e8:e4:1f:92:
e6:8c:e6:d1:41:3f:03:5a:a7:26:e0:5a:60:9e:bf:
99:57:63:89:a4:5a:18:7a:02:a9:60:e9:6d:4a:09:
17:85:d5:dd:f6:de:42:94:3e:de:1e:a0:d2:1a:35:
cc:53:74:a7:eb:6a:9d:a9:3f:ad:f6:49:58:7d:19:
d3:13:be:0b:61:72:84:d1:ca:5c:15:8b:61:3d:0e:
7f:0b:fe:3f:9b:65:51:4f:fa:00:ad:fe:38:7a:df:
7c:b0:bf:62:34:2d:23:c5:18:76:c9:79:88:2d:48:
c0:05:52:b3:6a:7c:cf:1a:b1:b1:10:39:68:da:04:
7d:a7:a1:2d:89:a0:a3:bd:2c:91:44:ea:4d:00:44:
62:3c:ae:e6:34:75:6d:b3:54:f6:56:31:4b:58:d8:
66:8a:5c:aa:6e:08:4d:64:42:5d:c7:75:4d:c7:80:
6a:f8:e8:5c:b5:82:4c:2b:25:92:b4:9d:3c:bd:e5:
08:78:8b:98:83:2f:eb:10:02:0d:b0:a7:17:df:90:
3a:b3:29:9a:48:b0:62:02:f6:2a:d0:12:34:ea:23:
cb:5b:27:22:35:52:d3:e5:ae:16:e3:6f:8c:b1:30:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:F4:D3:76:67:7D:9E:A2:E9:E0:48:07:57:D5:CC:0D:89:4D:99
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:88:ed:12:29:ab:4b:62:82:aa:c1:0b:e7:d4:0f:87:14:55:
f6:ed:11:34:79:d3:01:78:6f:8f:c6:79:20:72:6f:cb:1a:f2:
bc:9d:b5:1f:a7:6a:ab:28:e4:23:de:3d:8c:bd:bd:6b:8c:d7:
b5:0c:de:9f:b1:c6:70:59:15:a5:54:96:34:b9:51:fc:93:a4:
92:22:be:71:56:b4:13:85:50:ba:75:e9:7d:bd:63:74:48:09:
36:fe:68:39:50:ce:aa:e6:75:bc:a6:a6:3e:4d:4e:8e:f8:25:
ed:44:54:75:df:ae:62:2c:a4:3d:c7:10:56:c9:5d:a8:75:7d:
85:90:47:1a:3c:49:80:73:cb:23:b9:cd:f0:c4:5d:3f:f7:bd:
b5:0e:85:7c:8a:69:8c:48:b3:ef:c4:35:ca:d5:8f:91:f6:b3:
c6:db:59:bf:55:b2:fe:d7:8e:3d:6f:4f:26:04:09:5b:6b:3b:
3e:46:01:b3:8a:00:6f:d3:40:1a:f4:24:73:4d:6e:0d:b6:a8:
79:cb:86:93:bf:77:c5:7a:70:76:89:df:ac:f8:dd:93:c5:54:
99:c8:41:59:17:3c:af:df:92:98:1a:89:55:71:55:28:c2:8b:
76:bf:b0:2c:fd:aa:ea:82:74:69:76:71:67:eb:0e:c7:b8:6e:
b7:e9:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:39:22 2026 by rpki-client