Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: /JinFFwSkKEIfmL5/waJZ9lWC0gh49cvIFewFSzkzNs=
Subject key identifier: E1:54:65:1C:1D:98:8D:B7:18:F5:23:EC:91:2E:41:27:29:10:F4:F6
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019FA29722C23C58D2326C3C9F9808506816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0E4A
Signing time: Mon 27 Jul 2026 08:00:41 +0000
Manifest this update: Mon 27 Jul 2026 08:00:41 +0000
Manifest next update: Tue 28 Jul 2026 08:00:41 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: csj6h1afElSHGe7Dj0bMDC99tniULarMPagGZk78amI=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:22:c2:3c:58:d2:32:6c:3c:9f:98:08:50:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jul 27 08:00:41 2026 GMT
Not After : Jul 28 08:00:41 2026 GMT
Subject: CN=e154651c1d988db718f523ec912e41272910f4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:ce:7e:d9:5f:d6:d9:42:c6:16:34:ab:03:
ed:9b:a4:59:4c:2a:52:ea:7f:e9:55:cf:1e:95:19:
e5:f3:4c:28:50:d4:fd:96:1a:1e:e9:84:b5:c0:77:
5e:af:67:c4:68:01:f7:64:da:39:9e:4d:ca:65:5e:
24:83:1a:d3:c3:8c:64:55:09:95:fc:48:e7:1d:20:
7e:df:8b:02:13:66:97:78:78:35:92:00:d9:f4:0b:
e3:ec:06:9b:37:14:d7:54:f5:58:3a:7e:3d:e6:45:
a5:4b:0c:15:9e:94:31:c8:7c:6f:62:db:42:db:0f:
e0:de:7f:d7:40:5d:9b:92:0a:13:d9:72:95:3b:35:
d2:e7:84:90:ab:ef:65:7f:fd:aa:a4:ef:21:01:41:
00:07:90:1f:fe:44:91:e4:21:98:3e:30:46:39:56:
29:67:e0:08:ed:99:0f:9c:8c:16:f9:e2:ed:02:b9:
d7:6a:14:76:03:91:9b:4b:d5:a1:a2:33:ab:f8:3b:
0f:f7:0c:4b:e4:94:40:ef:92:ed:be:63:7d:47:a8:
b4:a8:99:8c:45:a8:52:86:c9:d8:3c:e0:5e:92:45:
03:fa:15:9b:70:01:11:70:61:92:70:a5:59:c3:5f:
49:3a:9a:d3:60:a2:60:9c:4b:88:3f:0f:87:0f:35:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:54:65:1C:1D:98:8D:B7:18:F5:23:EC:91:2E:41:27:29:10:F4:F6
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2f:4b:6e:c5:25:81:1c:c0:de:ea:b4:72:fe:0e:ac:af:a6:
38:51:63:c7:9c:7c:4a:07:5d:65:89:5f:59:90:3c:da:34:de:
e8:5e:5e:3e:ab:32:29:98:14:a8:a4:fb:51:88:37:13:99:d8:
ef:47:2e:4c:63:c8:42:64:6d:3b:7f:6e:ec:b1:5a:50:a6:71:
63:b8:d3:f0:7d:dc:cd:b6:08:39:08:7f:ad:22:63:71:a3:81:
55:45:23:95:6e:c9:48:2a:2e:c7:6e:dd:ac:92:a6:8a:b2:a4:
a2:76:59:f6:06:99:ee:f2:37:c7:e7:28:7f:02:93:9b:8c:18:
b0:d7:d5:7a:c9:50:ef:27:f5:4a:36:de:a2:50:ca:b3:9b:9f:
21:b8:b2:3d:60:68:5c:13:50:b9:17:8c:cc:cc:d4:8b:2f:36:
7a:51:c2:8e:e2:a9:3a:5f:39:2b:2e:7c:4d:25:93:26:e1:28:
eb:c5:2f:bb:66:0e:e6:e9:aa:03:a8:d4:15:73:2f:dc:f2:e5:
93:4a:f1:9a:7d:95:02:27:53:d9:43:b5:ee:40:66:6e:70:98:
82:ce:10:6a:f2:a4:4b:82:48:07:d8:2f:85:34:6c:db:38:95:
2e:78:80:ab:dd:0f:bb:a4:f6:66:01:a5:d1:73:45:7a:1a:39:
d2:4f:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:52 2026 by rpki-client