Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: D0yJC+gT2XKAk7ObtsaE/lsUYjhL6q/s7atSDm6C/UQ=
Subject key identifier: BC:F8:EC:C8:CC:98:38:73:7C:77:D4:7F:8F:D1:B6:2D:EB:E1:85:E1
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019FA14DD3A1C7D9362C6C4D26CD4FA05CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0A33
Signing time: Mon 27 Jul 2026 02:00:59 +0000
Manifest this update: Mon 27 Jul 2026 02:00:59 +0000
Manifest next update: Tue 28 Jul 2026 02:00:59 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: Tjd+ncEQPVCKlLxgX1ai7qoujZgBO2FPjjz9DO8Oo5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:d3:a1:c7:d9:36:2c:6c:4d:26:cd:4f:a0:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Jul 27 02:00:59 2026 GMT
Not After : Jul 28 02:00:59 2026 GMT
Subject: CN=bcf8ecc8cc9838737c77d47f8fd1b62debe185e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:5c:32:39:36:4f:60:1d:38:6e:97:cf:5e:
48:ed:34:71:2e:0c:bc:ec:6c:29:fa:68:58:ac:ec:
79:09:96:73:b9:3e:c4:d6:c3:c1:cf:b5:79:bf:23:
c5:25:f6:e5:f8:9e:e5:45:83:dd:b1:91:06:fa:84:
b1:75:6a:da:4d:ae:04:a7:bd:5a:22:df:5c:d3:6e:
7e:eb:0f:87:30:ac:9e:a0:3a:e8:af:45:50:06:87:
b7:c4:c8:b6:5f:be:b5:5a:6c:91:8e:94:e6:82:76:
29:8e:34:87:9b:d2:5b:de:ac:cf:00:d0:92:79:f2:
4d:16:5a:ab:da:2a:1b:34:e1:87:86:d4:2a:a8:84:
14:67:7c:ed:69:be:22:0b:d6:83:62:3e:35:4d:50:
8d:ed:b6:99:05:14:ee:88:b2:81:db:d9:9c:56:77:
6a:50:ce:5e:a0:82:41:95:25:04:87:4b:f3:eb:a1:
b0:4b:ff:b3:16:c3:01:34:69:54:ee:2a:e4:da:d7:
68:47:42:c2:16:ad:5f:9e:8b:6a:c2:64:db:ad:9e:
16:c8:98:61:3a:54:73:f4:d5:62:7c:04:65:98:e2:
a8:28:bc:5b:ef:44:c6:9b:94:cc:73:3c:9f:8c:bb:
c0:65:49:d8:65:94:50:83:62:ba:bc:66:d2:b2:6b:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:EC:C8:CC:98:38:73:7C:77:D4:7F:8F:D1:B6:2D:EB:E1:85:E1
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6c:9f:76:42:89:61:c1:5d:3f:e7:0d:c1:ac:00:b8:c0:28:
5e:be:7d:cd:c9:1d:e4:1c:2a:63:fb:1d:3a:35:87:bb:69:9e:
cc:65:a2:97:6f:74:18:bd:05:cf:08:20:5b:f7:5d:02:15:d5:
5b:16:f3:62:93:9c:a0:80:b4:d6:f1:be:c1:50:a2:b9:a0:76:
31:60:44:6f:cd:fa:93:e2:f1:81:2e:90:ec:f8:c9:f0:94:2d:
bb:49:d2:94:18:bb:0b:c5:1e:48:39:b8:f8:5c:50:e3:73:37:
bc:53:38:96:c7:07:56:8a:05:ae:4c:fe:c5:fc:0d:c7:2c:d4:
9d:26:1e:5d:b0:62:cf:eb:e5:c8:6a:33:3b:90:95:8a:6d:83:
2b:54:9e:19:30:c9:f7:bd:aa:14:1a:6d:d9:8e:9f:e5:5b:60:
c8:d4:c1:f2:96:cc:59:3b:b0:be:43:58:b4:3c:fb:c2:de:d1:
d6:21:22:f4:0f:48:cf:0c:bc:7f:06:ad:73:72:eb:53:54:01:
b2:46:e5:b5:b0:cf:ec:9e:58:cb:98:15:0e:89:74:cd:92:1d:
e9:51:05:89:25:02:10:f3:e8:f1:db:75:86:0c:64:11:7e:89:
e3:26:b0:31:d6:a8:31:c8:ae:a9:b6:8c:55:5a:44:c1:94:9e:
3d:87:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:19 2026 by rpki-client