Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: CwLXgjOXPiIrgmFA2wUm6OHOumYtSSKUn+lbEyZMFag=
Subject key identifier: 08:CB:8C:65:D3:62:3B:04:F5:B8:0D:40:6B:66:57:2D:63:8B:E6:42
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019FA1BB3ABA176CCD1CB30815414C16EDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 04:00:29 +0000
Manifest this update: Mon 27 Jul 2026 04:00:29 +0000
Manifest next update: Tue 28 Jul 2026 04:00:29 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: +MJHQailIEmfMbu9PTQVmVe7zWx85c4+yKOUTtMCxVE=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:3a:ba:17:6c:cd:1c:b3:08:15:41:4c:16:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jul 27 04:00:29 2026 GMT
Not After : Jul 28 04:00:29 2026 GMT
Subject: CN=08cb8c65d3623b04f5b80d406b66572d638be642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:52:06:da:d2:5d:9b:9d:f1:c9:8a:51:ba:
23:ad:a8:83:04:3f:4f:f1:2d:cb:9b:ed:c3:ed:24:
50:d9:80:ff:35:6a:73:be:7c:61:7d:f4:c8:ff:73:
a5:8a:1c:a9:0d:d9:e1:48:f8:ba:79:e0:56:30:d3:
c3:90:4a:29:c8:e9:be:8c:44:2f:9d:2f:e9:44:ef:
8b:01:20:37:1a:4b:5c:85:62:ea:f7:1f:04:2a:f3:
07:14:81:d9:dd:56:75:e1:5c:43:aa:98:e2:65:3b:
15:78:2c:ba:f9:db:22:c4:06:a3:03:28:e6:93:40:
d6:d9:42:92:be:26:b0:d8:4e:9b:c5:cf:fd:50:cd:
e3:ed:6e:3d:75:bc:0c:fd:08:06:05:0f:69:0a:c2:
b9:01:80:65:f8:05:dc:60:0c:d0:6b:05:f3:64:d5:
4a:e7:2e:90:97:af:e0:32:e5:8f:bd:be:9d:a7:7f:
71:1b:3f:c2:6e:de:64:c3:31:f1:d1:50:99:92:63:
f1:25:3c:fc:0c:c5:36:f0:bf:97:03:d4:79:52:77:
09:d6:6c:ca:91:be:00:95:ad:e4:9a:57:72:06:71:
8f:89:a6:3a:0d:4b:ab:26:78:7e:08:f9:a1:78:a5:
98:73:58:b6:12:7d:3d:d2:c0:fe:fa:ed:67:37:ca:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:8C:65:D3:62:3B:04:F5:B8:0D:40:6B:66:57:2D:63:8B:E6:42
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d8:b9:50:e7:1b:c7:14:5b:5b:16:57:ea:59:6e:e2:a8:a4:
5c:34:56:a0:92:cf:95:6a:84:8e:0f:d5:23:02:6f:2c:bf:14:
da:93:5c:fa:80:f9:c3:b2:df:9f:17:b1:1b:aa:b3:0e:a9:68:
e2:55:dc:e0:81:5f:fc:7e:9d:5c:1a:06:60:65:d9:da:49:05:
47:21:92:f1:33:a8:c2:cd:e6:e6:77:32:40:31:07:25:0c:67:
2f:da:d0:8b:95:6e:79:9e:55:d6:70:36:f1:53:63:35:5b:0f:
c4:26:16:e5:c9:6d:0b:af:d4:06:ec:99:17:2e:a0:64:e2:60:
64:b1:af:10:bb:2f:6d:49:0c:0e:e5:c1:3d:37:72:48:1b:b6:
1f:1a:b6:d7:f1:4d:3b:64:3d:40:98:6f:a2:6e:96:bf:13:29:
46:3e:d7:17:1b:4c:44:5f:03:8e:b7:c0:4f:e0:d6:e6:54:8e:
1a:74:a9:18:5f:77:b6:df:77:c5:f2:67:86:14:73:8c:d4:e7:
88:eb:42:78:55:8c:5a:65:46:3a:69:7f:06:30:9d:c7:41:c6:
e4:4f:90:7e:88:8e:1d:1e:32:a9:a9:00:f3:20:a5:20:58:0d:
cd:d5:6e:09:9f:b0:34:42:db:f5:8b:10:62:dd:a3:c8:6d:73:
66:f4:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:50 2026 by rpki-client