Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: 9PaQVjOwJYS1so5dL9xr9VX7XPRU8q3VW4CTkEw0CXE=
Subject key identifier: 85:30:D2:CD:5F:C1:24:9C:FD:B7:F3:21:0C:4A:B8:69:F8:82:23:E9
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019F19E7E6AE338057205F32072C8F7E48AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0DB2
Signing time: Tue 30 Jun 2026 19:00:55 +0000
Manifest this update: Tue 30 Jun 2026 19:00:55 +0000
Manifest next update: Wed 01 Jul 2026 19:00:55 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: wzvCquAaO2LUNEYlR7+9421XCMBp2vE6+B0vF6lu+vE=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e7:e6:ae:33:80:57:20:5f:32:07:2c:8f:7e:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jun 30 19:00:55 2026 GMT
Not After : Jul 1 19:00:55 2026 GMT
Subject: CN=8530d2cd5fc1249cfdb7f3210c4ab869f88223e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:bc:19:8f:d8:4a:9c:c3:5e:77:a7:ae:f2:
c1:c3:b4:81:3d:29:16:79:bb:5c:36:c6:6f:33:ee:
59:c0:08:70:3e:4c:a9:72:2e:d8:1b:b5:50:b7:f3:
6b:97:53:65:80:7b:8a:22:90:57:cc:a4:8c:49:1b:
cd:41:69:53:77:80:81:4c:83:5e:47:98:2f:2a:84:
fb:94:25:35:fd:19:43:2f:2a:03:6b:05:98:5e:5c:
de:d0:99:b6:ac:27:65:3c:eb:3c:dd:28:fb:97:9e:
f1:5a:42:97:54:21:11:25:58:04:1f:20:c2:37:9c:
34:c6:e0:57:ae:6e:7b:7a:ad:1a:01:10:86:87:f9:
7d:8d:9d:53:b4:33:e5:cf:cb:29:ff:a3:13:b2:25:
ff:c9:49:d2:3a:f4:7a:19:79:68:83:0f:2f:0a:3e:
ed:ab:06:37:b8:c8:2f:15:5a:e3:3e:bd:51:6c:5c:
92:c3:6d:5d:dd:06:4c:c9:38:ef:17:51:f9:02:d0:
0f:bf:17:7a:d9:90:5c:67:db:71:5f:9a:25:0a:29:
3d:a5:5b:09:c8:0b:47:f9:4e:84:44:a7:ec:6d:ac:
fb:99:95:fa:88:53:a1:d8:95:a8:a1:77:06:56:96:
52:26:9d:16:b6:87:e5:3e:f4:c3:93:6f:d3:a0:e0:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:D2:CD:5F:C1:24:9C:FD:B7:F3:21:0C:4A:B8:69:F8:82:23:E9
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6b:da:b8:5f:58:d9:bc:2f:ab:9e:0d:df:0f:24:50:90:77:
7b:01:cf:38:2f:d1:53:a0:63:8c:ad:6b:49:c4:51:5f:ec:17:
20:a0:d4:ec:3e:ae:a5:51:55:6f:4b:43:52:2b:ca:eb:d9:9c:
04:d0:f5:24:84:7b:6b:d1:c1:2f:79:ee:86:99:f3:7c:38:d7:
dd:fc:2a:d3:09:63:5e:9b:4c:87:8b:37:ec:46:ac:64:e5:98:
9d:20:e7:6b:86:0f:55:e5:fa:7d:8f:9d:8b:57:9a:24:3b:81:
f1:70:30:db:14:41:91:b8:db:de:0d:89:cf:79:ed:8a:2f:ed:
5b:bc:37:c2:01:47:26:76:f4:b6:07:fa:c7:ea:fd:73:70:8c:
c2:d5:f2:34:95:4d:d0:c8:38:fe:6a:a8:53:b7:81:51:b0:92:
96:8b:43:8e:d6:2a:49:60:1a:a2:6b:ae:21:45:43:b2:19:69:
30:c9:cf:de:3e:54:cc:08:6a:85:55:c0:83:de:6f:00:83:75:
b4:70:62:13:b8:fa:13:c9:69:42:64:f2:19:2c:94:ee:25:d2:
d3:70:0d:4b:7b:68:ea:46:2f:0f:e7:f8:99:aa:a0:f8:79:96:
65:9e:a6:30:b1:78:ba:37:ad:33:94:cc:fe:8a:a5:f8:40:0d:
3c:74:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:41 2026 by rpki-client