Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: Vj+O97hNSG15OCB+xFV8EZwyND3IhgpIRL4tN4BzyNk=
Subject key identifier: 2D:F7:F1:A2:6F:D0:41:CD:F0:8D:BC:93:FB:04:BE:4F:A7:47:72:BE
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019F85D61B31CF2B36DEB52E1BA5633C03E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0F87
Signing time: Tue 21 Jul 2026 18:00:29 +0000
Manifest this update: Tue 21 Jul 2026 18:00:29 +0000
Manifest next update: Wed 22 Jul 2026 18:00:29 +0000
Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: 6PBkoZ7d5cpVI4uGoBOlhWYpNPQxp9U7u9ZsaLzpudo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:1b:31:cf:2b:36:de:b5:2e:1b:a5:63:3c:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jul 21 18:00:29 2026 GMT
Not After : Jul 22 18:00:29 2026 GMT
Subject: CN=2df7f1a26fd041cdf08dbc93fb04be4fa74772be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:72:5f:6e:d0:67:e9:3b:e4:59:cc:56:0e:
ed:4f:1b:c6:88:b0:73:3f:22:1a:42:43:62:01:08:
f1:17:92:f9:0d:c7:be:d8:ac:11:0c:d2:8d:76:a1:
a0:e5:f2:f0:f5:42:f8:f4:20:7e:01:9a:d7:63:8b:
3c:81:76:16:b5:ef:78:97:fd:c0:c6:29:11:25:0d:
ad:ad:1c:f2:5d:3a:ef:fd:d1:87:a7:25:c2:48:a5:
f5:32:7b:e6:21:06:16:0e:16:b2:f6:48:a4:4c:25:
79:7e:24:3f:ff:2a:c2:35:32:aa:1f:a1:1f:27:3d:
f5:56:7e:4c:9b:cf:80:a0:11:e6:7a:56:27:b6:f7:
ca:29:9b:e9:fc:89:96:76:a3:4b:ed:cc:c0:ba:25:
49:9f:84:40:67:8c:e5:cb:6e:7f:77:a8:c8:a5:41:
60:8a:17:0b:d2:18:fe:81:65:5a:8f:6f:07:9c:1d:
e7:05:b4:4f:9f:2e:1b:40:f1:da:38:24:02:37:1a:
de:d2:b9:dd:e9:5c:0b:99:14:dc:90:51:1e:e7:ef:
27:63:50:06:0a:88:c6:5d:92:24:76:7e:78:46:3f:
d3:9e:65:dd:f2:4a:c9:f1:d9:54:90:bf:0b:60:8b:
7f:96:e4:38:e0:09:91:92:98:40:13:59:12:1a:26:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:F1:A2:6F:D0:41:CD:F0:8D:BC:93:FB:04:BE:4F:A7:47:72:BE
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:c6:44:2e:57:b6:fe:6e:e1:f5:56:82:ff:c6:71:c8:1d:
dd:d2:c2:79:53:27:58:ba:62:f6:34:85:ee:05:bb:7b:33:d5:
c5:fc:1b:2c:58:bc:47:6a:ac:60:9a:88:94:e7:3a:c2:4e:79:
16:ec:90:39:2e:d3:fd:07:4a:08:56:3d:52:37:91:fb:b7:fd:
af:5c:fc:36:10:a1:4c:d2:73:4f:d1:3e:48:d7:63:d3:96:01:
fe:b8:7f:05:d1:95:8d:0a:9a:12:03:5c:62:de:1a:79:0b:e6:
54:6f:84:81:a8:d2:10:7b:1d:53:ef:fa:72:3b:ea:eb:db:ff:
4b:dd:9d:e9:44:14:8e:27:10:98:72:da:fd:28:17:73:a7:a6:
94:97:ba:01:df:e9:0e:8a:36:16:88:11:6e:ea:14:32:e3:5e:
09:fe:d7:36:00:1c:e7:3d:f8:fe:b9:ba:8e:d6:22:dc:2d:c2:
47:f3:85:8c:d1:7f:c5:e8:26:86:41:3f:5e:7d:96:06:8f:57:
b1:3e:69:74:32:2d:f2:2b:20:4e:6a:4b:31:fd:e4:bf:c9:a0:
88:e5:ac:6a:58:e0:8c:89:13:6f:19:3e:13:a9:92:c7:1f:8d:
81:b2:bd:39:72:f7:bd:f8:e8:b3:29:ef:32:8b:1e:54:e5:04:
48:10:0a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1hsxzys23rUuG6VjPAPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy
MDY3MzQwHhcNMjYwNzIxMTgwMDI5WhcNMjYwNzIyMTgwMDI5WjAzMTEwLwYDVQQD
EygyZGY3ZjFhMjZmZDA0MWNkZjA4ZGJjOTNmYjA0YmU0ZmE3NDc3MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y9yX27QZ+k75FnMVg7tTxvGiLBz
PyIaQkNiAQjxF5L5Dce+2KwRDNKNdqGg5fLw9UL49CB+AZrXY4s8gXYWte94l/3A
xikRJQ2trRzyXTrv/dGHpyXCSKX1MnvmIQYWDhay9kikTCV5fiQ//yrCNTKqH6Ef
Jz31Vn5Mm8+AoBHmelYntvfKKZvp/ImWdqNL7czAuiVJn4RAZ4zly25/d6jIpUFg
ihcL0hj+gWVaj28HnB3nBbRPny4bQPHaOCQCNxre0rnd6VwLmRTckFEe5+8nY1AG
CojGXZIkdn54Rj/TnmXd8krJ8dlUkL8LYIt/luQ44AmRkphAE1kSGiZZ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC338aJv0EHN8I28k/sEvk+nR3K+MB8GA1UdIwQY
MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct
NGI0ZjBmNmY3NTIyLzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy
LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCTGRC5X
tv5u4fVWgv/Gccgd3dLCeVMnWLpi9jSF7gW7ezPVxfwbLFi8R2qsYJqIlOc6wk55
FuyQOS7T/QdKCFY9UjeR+7f9r1z8NhChTNJzT9E+SNdj05YB/rh/BdGVjQqaEgNc
Yt4aeQvmVG+EgajSEHsdU+/6cjvq69v/S92d6UQUjicQmHLa/SgXc6emlJe6Ad/p
Doo2FogRbuoUMuNeCf7XNgAc5z34/rm6jtYi3C3CR/OFjNF/xegmhkE/Xn2WBo9X
sT5pdDIt8isgTmpLMf3kv8mgiOWsaljgjIkTbxk+E6mSxx+NgbK9OXL3vfjosynv
MoseVOUESBAKzw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:55 2026 by rpki-client