Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
File: 9lWaWOLE8UoftjRDGQgK88xWRGs.mft (raw, json)
Hash identifier: gg6C7mCo07WIz0eKpdlj5KRgqAQP2gipofSvoOOhwLY=
Subject key identifier: 3C:5E:95:81:AF:19:04:03:81:C3:8E:96:56:36:74:3E:60:D5:9A:0C
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Certificate issuer: /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial: 019F853119D91F60457331ABA3F8FB1936DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
Manifest number: AF
Signing time: Tue 21 Jul 2026 15:00:15 +0000
Manifest this update: Tue 21 Jul 2026 15:00:15 +0000
Manifest next update: Wed 22 Jul 2026 15:00:15 +0000
Files and hashes: 1: 9lWaWOLE8UoftjRDGQgK88xWRGs.crl (hash: 4hyRsmLCSchQRnt0Pc8LAt6WkJQLY84LRyqGXtaWYqw=)
2: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (hash: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:19:d9:1f:60:45:73:31:ab:a3:f8:fb:19:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Validity
Not Before: Jul 21 15:00:15 2026 GMT
Not After : Jul 22 15:00:15 2026 GMT
Subject: CN=3c5e9581af19040381c38e965636743e60d59a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:8f:d9:e0:12:9f:c8:e9:51:fe:0a:50:c4:
7a:f5:c4:ee:a7:78:b0:83:38:93:33:18:8b:bc:c8:
07:ac:e4:7b:47:80:74:f2:55:5a:78:fa:96:de:80:
24:56:cd:a5:52:80:c1:58:70:29:06:fa:66:fe:21:
20:4e:2b:d7:63:b0:31:28:eb:46:b6:7f:36:ee:e2:
fc:e5:a5:e1:ec:c8:c2:15:6f:fd:c2:4d:f0:6a:58:
27:37:16:ce:60:e3:cc:0f:31:81:41:a8:b1:60:0b:
e3:ca:17:9c:89:47:d8:74:bb:e3:b2:8f:62:f8:3e:
ec:87:6b:f1:31:ca:cf:e2:fc:25:95:66:4b:d1:71:
95:d7:7a:ee:c6:42:f2:4c:b5:28:a6:84:e3:32:4e:
ab:95:04:31:f5:2d:7d:b6:89:1d:78:5d:65:57:66:
06:48:0a:d9:3e:c5:14:bb:4a:f6:3e:e0:66:39:4c:
2b:ca:e8:34:b9:56:6c:59:90:78:e3:ca:dd:5c:59:
c8:5b:79:82:5d:fd:01:40:b2:4b:d9:8e:92:f2:27:
65:3e:fd:ad:1c:22:a9:58:63:db:41:09:d2:ce:ca:
04:41:3f:aa:74:8e:b8:1f:2d:0d:36:8e:cc:23:18:
2f:9b:58:9a:4e:0f:50:03:be:45:24:42:b6:90:d0:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5E:95:81:AF:19:04:03:81:C3:8E:96:56:36:74:3E:60:D5:9A:0C
X509v3 Authority Key Identifier:
keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:86:28:2d:44:2c:09:30:04:21:7f:b2:99:ab:45:cf:30:2b:
82:6b:6c:43:00:0c:0b:1f:0a:e5:89:67:0b:2c:dc:ea:c8:bf:
33:a7:f9:f3:c8:bf:52:07:7f:2c:e0:0e:9c:30:0a:3f:93:85:
0d:57:bc:aa:cd:d7:b1:47:ee:f2:54:9d:0e:0d:d9:8b:2f:46:
87:77:cd:40:21:d0:3a:9b:a7:27:8f:43:34:49:b4:fb:29:2f:
f5:60:c0:0f:cd:cd:27:9c:ac:fa:4f:1a:66:97:20:9c:1c:95:
da:05:e3:c1:32:bb:37:7d:1a:96:ca:62:04:18:ec:cc:b1:fe:
d1:af:f2:4d:3c:84:8a:ab:a0:ec:07:90:00:85:d6:a3:00:6e:
82:d1:c0:da:e6:07:70:42:98:57:66:6f:4d:16:81:ea:a0:86:
96:4c:41:32:38:9e:7f:6c:61:70:34:da:f8:f1:79:8c:d9:21:
6e:d3:3e:3f:25:f1:44:51:a5:20:0c:cb:f0:13:90:2c:ca:e8:
cf:fc:05:3d:c2:2e:9b:45:83:f8:d0:8d:6b:66:0c:d8:e8:36:
8f:89:09:c2:cc:30:0e:a4:c7:10:68:24:3e:26:0f:e8:e1:26:
b0:fd:3d:73:3d:dc:d7:37:f3:b8:02:ef:2e:57:9f:2d:1e:ef:
22:39:50:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMRnZH2BFczGro/j7GTbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTU5YTU4ZTJjNGYxNGExZmI2MzQ0MzE5MDgwYWYzY2M1
NjQ0NmIwHhcNMjYwNzIxMTUwMDE1WhcNMjYwNzIyMTUwMDE1WjAzMTEwLwYDVQQD
EygzYzVlOTU4MWFmMTkwNDAzODFjMzhlOTY1NjM2NzQzZTYwZDU5YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLKP2eASn8jpUf4KUMR69cTup3iw
gziTMxiLvMgHrOR7R4B08lVaePqW3oAkVs2lUoDBWHApBvpm/iEgTivXY7AxKOtG
tn827uL85aXh7MjCFW/9wk3walgnNxbOYOPMDzGBQaixYAvjyheciUfYdLvjso9i
+D7sh2vxMcrP4vwllWZL0XGV13ruxkLyTLUopoTjMk6rlQQx9S19tokdeF1lV2YG
SArZPsUUu0r2PuBmOUwryug0uVZsWZB448rdXFnIW3mCXf0BQLJL2Y6S8idlPv2t
HCKpWGPbQQnSzsoEQT+qdI64Hy0NNo7MIxgvm1iaTg9QA75FJEK2kNDPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxelYGvGQQDgcOOllY2dD5g1ZoMMB8GA1UdIwQY
MBaAFPZVmljixPFKH7Y0QxkICvPMVkRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83N2Q3NjAtZDMwMS00MDIwLWEyODYt
ODU2Y2JmOTRlZGZmLzEvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83N2Q3NjAtZDMwMS00MDIwLWEyODYtODU2Y2JmOTRlZGZm
LzEvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIYoLUQs
CTAEIX+ymatFzzArgmtsQwAMCx8K5YlnCyzc6si/M6f588i/Ugd/LOAOnDAKP5OF
DVe8qs3XsUfu8lSdDg3Ziy9Gh3fNQCHQOpunJ49DNEm0+ykv9WDAD83NJ5ys+k8a
ZpcgnByV2gXjwTK7N30alspiBBjszLH+0a/yTTyEiqug7AeQAIXWowBugtHA2uYH
cEKYV2ZvTRaB6qCGlkxBMjief2xhcDTa+PF5jNkhbtM+PyXxRFGlIAzL8BOQLMro
z/wFPcIum0WD+NCNa2YM2Og2j4kJwswwDqTHEGgkPiYP6OEmsP09cz3c1zfzuALv
LlefLR7vIjlQkw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:01 2026 by rpki-client