Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: h73BbvzEBrLlle9+mhItNo8VHhl9XqjmwZgVjRafsbQ=
Subject key identifier: 66:E6:18:42:C4:ED:1E:72:AC:20:49:B0:1F:CF:D8:B9:06:24:6F:A8
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 019FA2CE9DAE705F72B46F1DBAE0CF34BEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 0337
Signing time: Mon 27 Jul 2026 09:01:17 +0000
Manifest this update: Mon 27 Jul 2026 09:01:17 +0000
Manifest next update: Tue 28 Jul 2026 09:01:17 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: G1iQhOU2YjqxFC69kdVnsprNHmHB1minw2G7K8CY5CI=)
2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:9d:ae:70:5f:72:b4:6f:1d:ba:e0:cf:34:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Jul 27 09:01:17 2026 GMT
Not After : Jul 28 09:01:17 2026 GMT
Subject: CN=66e61842c4ed1e72ac2049b01fcfd8b906246fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:2d:4e:8c:21:de:8f:ca:db:ce:dd:b8:10:
20:6c:01:03:f9:23:32:3a:78:c4:6b:ec:db:ce:0a:
13:7a:d3:dc:53:73:c0:a2:e7:ae:94:d5:08:36:82:
0a:c1:b8:8d:65:37:79:0a:07:ab:66:6d:e4:f2:8a:
90:ad:ae:fe:41:3b:a1:50:e1:20:10:b0:a2:04:b6:
31:95:33:6b:df:e4:bb:84:3c:5a:3f:3d:5e:2c:6c:
fd:cc:79:30:50:50:d2:2e:e9:a1:5f:05:37:33:5c:
db:91:12:ff:f8:3f:f7:6a:2c:45:45:6d:a3:63:2f:
da:b1:6e:b9:59:8f:d2:e4:c3:47:63:92:74:82:a4:
9e:97:37:bc:d8:69:95:a1:8a:a4:84:34:66:8e:24:
0d:93:dc:38:cb:dd:b6:f8:f9:a2:e0:c5:2f:4e:c7:
ba:98:58:82:d9:cd:69:47:dd:37:bd:48:e3:fe:71:
ef:73:89:e2:3c:d9:9a:3b:3b:8d:e4:a2:e4:f5:35:
f3:e4:17:64:d3:18:55:f5:3f:fc:12:91:af:77:b4:
e4:71:04:8b:c8:20:1e:c6:09:36:1a:37:a3:c4:ae:
ce:fd:68:4a:a8:26:34:28:db:02:2d:9a:c4:c2:77:
b9:b8:02:75:61:8f:12:63:7c:a3:14:b6:ef:fd:48:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:18:42:C4:ED:1E:72:AC:20:49:B0:1F:CF:D8:B9:06:24:6F:A8
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:d7:14:04:58:09:19:57:64:9b:c0:21:63:aa:7b:cc:79:
7b:1b:db:a1:32:0f:45:f2:16:f0:58:6a:9f:08:54:c4:47:64:
5e:3d:d3:f7:31:c3:b7:38:76:2f:a2:e6:35:dd:ef:54:77:60:
38:c7:e3:17:29:db:c2:8c:0b:2e:b2:b1:bb:d2:32:1a:d1:f5:
5c:c0:fa:56:d0:8f:85:43:f4:7a:5c:03:37:3c:9f:00:9c:7c:
ed:af:c7:ec:6b:c8:8d:5f:b2:1f:e1:8c:3a:02:5c:09:2e:04:
1e:07:06:94:cd:0e:bb:15:bc:b5:81:62:77:df:a7:1a:aa:ca:
17:d2:8c:7e:1b:9d:6a:f3:01:2d:88:91:2f:d4:f2:a9:ff:14:
82:a1:ca:87:c3:25:6f:3a:ad:77:65:1f:a6:c9:d8:57:bf:7d:
d6:cc:37:a0:3f:f7:45:ec:89:0f:89:e6:03:ec:74:ee:56:16:
35:6b:40:a4:a8:6e:93:a6:de:e2:9a:7a:b6:34:b1:ef:80:5b:
b3:fd:0c:ff:5c:8e:cf:27:a7:e2:6e:ee:51:ae:9d:6b:49:53:
e7:6d:f9:c1:0e:11:c9:f1:32:58:ec:8c:37:a1:90:4e:f9:b3:
11:ab:e8:88:9d:65:51:57:3b:12:f6:a8:dd:d4:5f:0c:77:0d:
65:80:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:36:36 2026 by rpki-client