Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: YJFzVXPoempa1gcisyBiKtKllZLtA/ytA+XaoGIw2Bk=
Subject key identifier: 96:D9:A0:A6:8C:DE:77:A7:A1:21:88:E1:AF:87:A7:0E:10:99:0B:06
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019FA2291C177397597842FDB700179D4A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 1A75
Signing time: Mon 27 Jul 2026 06:00:30 +0000
Manifest this update: Mon 27 Jul 2026 06:00:30 +0000
Manifest next update: Tue 28 Jul 2026 06:00:30 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=)
3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
4: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: PnT+lb76fGK4yDyR+unvE31iRGPEjWyyCEnP3tRut+c=)
6: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=)
7: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1c:17:73:97:59:78:42:fd:b7:00:17:9d:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 27 06:00:30 2026 GMT
Not After : Jul 28 06:00:30 2026 GMT
Subject: CN=96d9a0a68cde77a7a12188e1af87a70e10990b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:b7:9d:c4:41:ae:bc:18:00:ee:35:18:68:
5f:93:28:d6:d9:1d:64:eb:04:59:a2:ef:17:75:54:
a0:5a:c3:94:d1:04:da:50:38:00:19:0e:6d:24:fd:
2e:06:20:f8:aa:9f:9b:1a:f3:f1:e5:65:1f:3f:2b:
74:23:a4:4d:23:6b:16:38:a2:3f:26:71:e5:00:f4:
69:1f:c1:7f:a2:49:60:df:30:71:bc:74:23:ab:d2:
d5:68:f7:9a:45:9d:7a:ea:94:f1:d7:5a:4d:49:60:
1a:82:3c:bb:e4:fd:26:f8:7c:41:1c:df:e9:3e:aa:
89:31:fa:ff:23:e5:01:89:2c:0b:c4:6e:49:74:0b:
ec:6e:9c:9f:78:d5:9e:82:a1:b5:db:40:61:06:1b:
4f:3f:99:2e:7b:c7:41:d8:72:9b:27:43:af:8a:2f:
8d:84:53:61:92:78:ca:22:27:18:c4:2d:00:f1:0a:
07:34:83:c3:c8:a1:03:f7:cb:e5:dd:bf:58:6a:73:
7c:d1:ad:7a:d8:36:87:a5:f7:1b:29:28:98:e7:49:
28:0d:6a:57:7f:fd:ba:94:3f:fb:07:0e:4f:aa:21:
74:38:79:03:57:d4:71:46:3f:36:03:68:9e:e7:c8:
55:e4:eb:23:9d:ff:8e:0a:aa:27:46:3c:e3:8f:7c:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:A0:A6:8C:DE:77:A7:A1:21:88:E1:AF:87:A7:0E:10:99:0B:06
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:cb:02:47:1c:68:a7:50:1a:64:12:8f:3a:08:f4:9f:df:
14:78:7b:be:1d:16:4d:99:0b:b6:e2:0c:53:e9:1e:9c:90:f4:
1e:0a:60:38:9a:03:b6:7d:ab:ce:d6:f9:02:ee:38:79:cb:12:
48:2b:f1:62:31:2e:f2:8c:3d:ea:4f:40:cd:dd:ca:54:dc:0e:
f0:c1:9c:74:d9:6b:88:68:43:08:0b:b1:ed:3d:9c:ea:61:4c:
f2:58:37:3a:cb:b9:09:b0:07:09:0a:a8:b0:9f:6c:cd:5b:58:
31:6e:ab:af:a8:c6:21:8c:9c:56:2f:ea:9b:95:22:6d:56:19:
6f:ca:c4:a3:a8:2b:47:4c:35:1f:68:ba:11:d2:3c:eb:5e:fd:
1d:7d:50:e8:2c:6c:52:ff:df:0b:1f:20:47:74:c2:ec:27:96:
5e:5d:f3:65:92:58:e6:17:97:e1:9b:43:33:df:b4:13:fc:21:
34:5d:74:d4:30:0f:5c:cc:22:55:90:94:68:28:8b:82:cb:35:
96:cb:88:4c:c4:85:c7:0c:ba:c0:7b:98:83:40:c9:92:ce:4e:
aa:b7:cc:21:79:eb:8b:e8:69:58:ca:80:44:f9:75:82:45:d7:
5c:bd:62:d6:be:8a:99:94:a7:7f:2a:3b:6a:1a:ce:c6:cd:c4:
03:77:f2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKRwXc5dZeEL9twAXnUqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNzI3MDYwMDMwWhcNMjYwNzI4MDYwMDMwWjAzMTEwLwYDVQQD
Eyg5NmQ5YTBhNjhjZGU3N2E3YTEyMTg4ZTFhZjg3YTcwZTEwOTkwYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zm3ncRBrrwYAO41GGhfkyjW2R1k
6wRZou8XdVSgWsOU0QTaUDgAGQ5tJP0uBiD4qp+bGvPx5WUfPyt0I6RNI2sWOKI/
JnHlAPRpH8F/oklg3zBxvHQjq9LVaPeaRZ166pTx11pNSWAagjy75P0m+HxBHN/p
PqqJMfr/I+UBiSwLxG5JdAvsbpyfeNWegqG120BhBhtPP5kue8dB2HKbJ0Ovii+N
hFNhknjKIicYxC0A8QoHNIPDyKED98vl3b9YanN80a162DaHpfcbKSiY50koDWpX
f/26lD/7Bw5PqiF0OHkDV9RxRj82A2ie58hV5Osjnf+OCqonRjzjj3x7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbZoKaM3nenoSGI4a+Hpw4QmQsGMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeHLAkcc
aKdQGmQSjzoI9J/fFHh7vh0WTZkLtuIMU+kenJD0HgpgOJoDtn2rztb5Au44ecsS
SCvxYjEu8ow96k9Azd3KVNwO8MGcdNlriGhDCAux7T2c6mFM8lg3Osu5CbAHCQqo
sJ9szVtYMW6rr6jGIYycVi/qm5UibVYZb8rEo6grR0w1H2i6EdI86179HX1Q6Cxs
Uv/fCx8gR3TC7CeWXl3zZZJY5heX4ZtDM9+0E/whNF101DAPXMwiVZCUaCiLgss1
lsuITMSFxwy6wHuYg0DJks5OqrfMIXnri+hpWMqARPl1gkXXXL1i1r6KmZSnfyo7
ahrOxs3EA3fyUA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:14 2026 by rpki-client