Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: xvOl/HonPskvSpM2ulNv6kPxY5pNj+8eJeWyaGU45XE=
Subject key identifier: D7:F6:07:3C:D2:48:D1:59:DD:3F:34:3B:BE:CF:2D:81:10:30:43:E4
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019FA11716DC6CE283E83AFDD1798A8D111C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 01:01:12 +0000
Manifest this update: Mon 27 Jul 2026 01:01:12 +0000
Manifest next update: Tue 28 Jul 2026 01:01:12 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: iTkN502GojPpQ9px9gptm9K6WShPtDfPgRZKmWS6vEY=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:16:dc:6c:e2:83:e8:3a:fd:d1:79:8a:8d:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jul 27 01:01:12 2026 GMT
Not After : Jul 28 01:01:12 2026 GMT
Subject: CN=d7f6073cd248d159dd3f343bbecf2d81103043e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d4:fa:bd:14:a1:84:01:04:bb:33:11:dd:ef:
3c:51:5b:47:6c:2b:67:bb:22:e0:69:34:27:21:9b:
57:4b:31:a1:9e:87:e8:98:9e:5b:a6:1c:5f:c3:59:
84:8b:d4:eb:8a:7a:75:c3:e5:ed:61:c9:19:62:6a:
4d:7f:df:62:8b:7d:3e:50:72:3b:bb:7c:68:aa:12:
01:8d:35:ee:50:d8:65:9b:c3:e5:8c:bb:09:69:01:
1a:b3:52:f8:0e:0c:d3:10:ed:e8:b8:c2:c8:6a:bb:
e1:01:9c:91:bb:49:67:48:bd:e0:d1:48:14:f1:39:
c5:73:9c:b6:10:6e:45:50:c4:db:36:16:98:67:c8:
56:cb:ea:33:a5:56:67:3a:c7:91:00:73:a5:0a:ab:
7c:c3:70:01:80:75:20:b1:4c:70:72:2e:88:6b:22:
08:80:e2:ff:0c:1d:fd:f5:99:18:92:a3:3f:37:d0:
c2:92:2c:72:a7:a9:ed:4b:35:7a:ec:e0:8a:79:99:
ff:5c:95:36:ab:70:79:0c:43:80:ce:25:fc:f3:f3:
89:c2:02:02:37:a3:68:8e:35:c5:0b:8e:3b:4b:47:
9e:1d:2b:b7:93:07:bf:50:62:9c:ea:d8:14:48:80:
cb:89:49:60:63:09:f3:c1:1f:93:56:8e:f5:8a:a2:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:07:3C:D2:48:D1:59:DD:3F:34:3B:BE:CF:2D:81:10:30:43:E4
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:03:e0:0c:63:d1:4f:dd:1f:46:8b:d5:b9:6a:ea:38:54:
7b:c8:ea:fa:b4:98:7a:2d:41:69:43:ee:1d:df:a9:79:5f:ff:
aa:b2:e3:7f:af:fd:dd:24:e0:ac:ef:37:8b:ba:68:13:9b:17:
32:96:81:54:97:ab:d8:fd:2a:73:71:5d:e7:13:b6:e2:a9:ce:
2a:42:f9:40:79:db:1c:b5:d1:32:14:09:0c:87:4f:3b:48:6c:
bf:31:18:10:94:f3:b7:da:48:26:6f:7c:a7:8f:27:be:5d:88:
cd:3d:f0:40:05:cd:e2:5f:c5:9e:dc:ae:71:f0:46:68:fe:7f:
6f:85:de:5a:17:cf:e2:e6:9a:41:20:fd:06:1d:65:4a:1e:ef:
83:12:23:c4:ba:1e:39:42:aa:f5:c1:50:1f:2e:8a:96:69:a6:
90:e1:d6:83:d6:3a:d3:d1:48:38:cd:a1:35:b2:8f:38:08:b3:
e6:22:cb:51:68:fd:63:d7:35:8d:e7:3e:bd:67:61:15:23:95:
19:72:2c:42:e4:b0:b3:7f:58:3c:ea:4a:6c:e9:16:0b:15:a5:
73:b8:bf:fc:e8:68:4e:65:5d:1a:00:48:d9:f2:e8:11:dc:e7:
8f:81:47:20:80:ff:30:c9:85:d1:d2:2b:4e:fa:b3:c9:bb:63:
8b:39:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:28 2026 by rpki-client