Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier: wDJCeijIISU5gNL41Z8OkfiyZOpUKMwJ0+X3ZcywvaQ=
Subject key identifier: 63:5F:2B:6A:E4:82:09:AC:A3:C3:61:D9:3D:92:89:5E:5E:5F:02:F4
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial: 019FA184D58DE75B78518C08291F2FD126FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number: 0AEA
Signing time: Mon 27 Jul 2026 03:01:04 +0000
Manifest this update: Mon 27 Jul 2026 03:01:04 +0000
Manifest next update: Tue 28 Jul 2026 03:01:04 +0000
Files and hashes: 1: jy4XFgCzljZWpXE-riML9DaXkts.roa (hash: hfp/T5AOfMF/LamC2Ys8fXDrV6Q6STrraxrMeK+mRx8=)
2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: zKeGs+ett9xUGvDpBOLcKyLZdAfPFOMDAztlJWBvv4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:d5:8d:e7:5b:78:51:8c:08:29:1f:2f:d1:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Validity
Not Before: Jul 27 03:01:04 2026 GMT
Not After : Jul 28 03:01:04 2026 GMT
Subject: CN=635f2b6ae48209aca3c361d93d92895e5e5f02f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:59:9e:bc:19:71:94:0c:76:36:99:d8:7b:
65:bf:19:a3:b4:10:f8:fd:29:c1:8b:bf:24:b8:5b:
36:f0:c4:df:cb:53:c9:5d:83:b9:5d:66:87:b0:c1:
8d:30:03:0d:94:ec:c7:a2:2c:29:e4:cb:c1:28:50:
34:3d:ee:d6:2f:8f:f2:47:a4:e5:87:fe:8a:06:57:
0d:74:b6:0d:ab:49:e7:22:d9:09:eb:02:8d:57:7f:
d8:6f:c5:49:17:c7:42:2a:8e:11:4b:53:c4:f3:88:
2a:61:67:6b:4c:2f:45:f8:a2:bd:14:9b:c4:c3:f1:
de:21:f7:4a:14:c4:e8:25:a6:2d:2e:70:7d:56:86:
50:51:eb:50:d1:ed:70:5f:e7:7c:b7:e2:0d:63:0a:
3d:be:b3:8d:5b:77:ec:f4:02:0c:58:aa:4b:81:74:
aa:27:0a:8a:d2:1f:3f:52:1b:bd:4a:91:1d:43:b3:
ab:59:9a:23:fd:40:47:74:be:b6:db:eb:d5:52:14:
84:7d:e5:68:63:2e:b9:78:96:82:3d:60:10:57:b1:
df:64:4d:3a:95:c3:cc:28:85:f6:e6:8b:8e:b9:d6:
39:94:7a:e1:36:83:eb:c4:22:f4:15:6b:e0:99:9b:
8b:03:13:2f:6f:3e:20:67:ed:b2:7b:ae:f6:3c:02:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:2B:6A:E4:82:09:AC:A3:C3:61:D9:3D:92:89:5E:5E:5F:02:F4
X509v3 Authority Key Identifier:
keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:87:ff:13:ba:8a:b8:2b:d3:31:61:41:da:4d:bb:2e:91:
5d:ed:bf:a6:1e:4a:d6:2e:41:ff:e6:9e:8a:04:83:63:40:de:
1d:20:eb:81:ef:a3:1d:1e:f0:4a:a5:a0:1d:a7:38:0e:54:02:
a9:7f:9a:d8:cf:80:2f:89:05:71:8b:ba:e4:f7:ed:61:77:36:
af:c9:8b:34:2c:f7:3a:c3:d3:55:5f:85:97:91:4c:d9:2c:22:
73:d4:3e:4f:20:4e:48:74:48:d5:02:cc:d3:c9:1f:df:d1:2a:
50:d0:6a:e3:3c:28:1e:94:7f:99:f3:a0:5d:cb:a5:51:dc:10:
4b:01:49:3a:ed:6a:0f:2e:d7:0f:ee:62:34:26:a5:9a:fc:d3:
3c:70:b0:bf:21:39:19:64:ad:d4:a6:c0:5e:13:af:3c:98:55:
b2:8b:ba:2c:97:54:db:a6:6e:d3:2e:09:01:e3:18:d6:3a:8c:
ff:7b:73:8f:15:11:2b:25:cd:83:ad:1b:5d:2b:72:76:4e:1e:
d2:23:38:5c:11:79:63:a9:67:a3:90:7c:e7:0d:b9:06:56:58:
76:68:0a:66:0d:ae:71:bd:67:7f:a8:2a:80:9a:b8:43:16:79:
31:fd:2d:58:b4:26:45:7f:d9:2b:24:53:4b:d8:36:49:2a:4b:
11:22:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:33 2026 by rpki-client