Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: aUKoN00eD2YKYnP3mhgXeFlHMtoCH7gFlc9KfBidYFU=
Subject key identifier: F9:CF:E0:79:45:98:C3:1E:44:5A:2B:CC:05:20:C9:D3:65:DB:46:5A
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019FF8D9DF7F0AE7ABBA2D993B17EB61E5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 0282
Signing time: Thu 13 Aug 2026 02:00:55 +0000
Manifest this update: Thu 13 Aug 2026 02:00:55 +0000
Manifest next update: Fri 14 Aug 2026 02:00:55 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: WBLylJsJcJ5NwxA3ly994kVxszQaC9zeoEojOhjaTUI=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:d9:df:7f:0a:e7:ab:ba:2d:99:3b:17:eb:61:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Aug 13 02:00:55 2026 GMT
Not After : Aug 14 02:00:55 2026 GMT
Subject: CN=f9cfe0794598c31e445a2bcc0520c9d365db465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:15:3c:cd:bc:8a:50:d3:ad:67:ef:fb:f4:
8e:aa:ae:25:d1:a2:51:37:aa:e8:53:67:7e:32:62:
82:c6:d9:74:fe:8f:62:80:d3:3e:e0:7d:0b:fd:41:
46:ab:a9:4a:81:81:84:11:15:88:13:dd:34:16:a7:
15:c7:e2:a4:8c:a9:88:02:22:10:f2:4a:99:54:0e:
8d:0b:22:7e:43:c3:4c:6e:b6:de:df:91:83:fa:71:
d0:d3:9b:60:a2:8f:9f:02:57:13:d9:1f:c9:7c:4b:
91:bf:4b:b6:4d:23:8e:9c:56:fe:d0:3e:b7:90:ff:
b6:1d:69:59:aa:90:2c:5d:bc:03:e3:3b:c8:bf:15:
93:ae:83:b2:2c:8f:ce:41:fb:20:16:64:d3:8e:f6:
b8:ec:ba:86:4d:7d:4d:d9:4f:e5:12:18:6c:23:01:
22:a1:bd:e2:37:56:e3:b1:85:9c:bb:a5:a4:23:44:
fb:59:47:98:2a:e6:6d:ef:87:ce:8a:48:92:de:53:
d3:ff:59:88:83:52:03:b6:28:5f:48:23:2c:4a:4d:
89:ed:a7:73:ff:56:2e:4f:cd:66:8d:7b:a8:22:97:
f7:62:eb:80:bc:a4:dd:a5:1d:62:af:d0:59:8c:dc:
c7:b1:21:fe:e3:6c:6a:c7:20:31:82:4c:d8:a4:6d:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:E0:79:45:98:C3:1E:44:5A:2B:CC:05:20:C9:D3:65:DB:46:5A
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:48:33:3c:fe:2a:63:ff:5b:57:96:fb:b0:f9:a6:b7:5f:17:
46:73:77:2b:4b:c3:4a:a6:45:ee:57:0e:fb:a2:0d:94:90:dc:
7c:f8:e2:2e:44:3f:9f:c3:1b:f8:a8:81:f1:2a:26:1b:55:5c:
ac:3e:e1:61:e9:8f:d8:19:75:90:6e:0b:1b:da:a4:dc:00:1a:
0a:33:d7:ea:2a:39:49:2f:c4:21:5d:d9:bf:af:3e:73:15:c5:
70:1b:8a:b8:d5:7b:37:f4:72:12:f7:a4:45:bd:93:a7:cb:b8:
09:19:90:0e:d3:f2:9d:7a:a5:26:f4:c6:9d:d7:79:4f:36:7d:
bd:0d:1a:91:df:6a:56:9a:0a:a0:d1:24:58:4d:da:8f:35:7d:
f5:20:71:12:b7:9e:e5:ff:03:15:79:f0:d3:25:5a:28:1b:74:
fb:56:24:6e:75:21:09:e1:bf:bb:d9:02:00:19:3d:ac:25:fc:
f9:af:1b:6d:e4:91:51:19:c1:f9:4c:55:bd:a9:86:e6:2a:81:
54:07:6b:52:3e:36:2e:1b:54:29:e0:ca:b0:4a:33:83:dc:0a:
11:c5:6c:3e:9c:2e:cc:62:ca:ab:d1:88:2b:7e:74:11:1f:e4:
7b:fb:8a:67:77:a5:70:8b:f1:44:10:49:e1:86:6d:96:02:2b:
0c:3b:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:26 2026 by rpki-client