Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: 7YWOg9dLXmBlGyGbKLYrrQ1wcghBPgxmB9ZlJaf07ik=
Subject key identifier: 81:E0:E7:57:7E:32:06:A0:F4:A5:14:85:30:74:44:78:C9:55:65:EF
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 019F12657C8EB8595DB99114A2CC15343870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 01A2
Signing time: Mon 29 Jun 2026 08:01:08 +0000
Manifest this update: Mon 29 Jun 2026 08:01:08 +0000
Manifest next update: Tue 30 Jun 2026 08:01:08 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: axhR2x1DSrTKXDOZTutO+1xHlwERbnsOHlDthhAPLrc=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:7c:8e:b8:59:5d:b9:91:14:a2:cc:15:34:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Jun 29 08:01:08 2026 GMT
Not After : Jun 30 08:01:08 2026 GMT
Subject: CN=81e0e7577e3206a0f4a5148530744478c95565ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:21:8e:74:dd:c9:f4:9f:2d:bb:42:1e:28:
d0:71:19:97:73:0b:e6:49:38:df:35:bc:37:2e:d1:
ab:b7:76:3f:88:0e:c3:ad:9f:8d:13:72:ca:bb:46:
b8:d0:50:04:2a:86:64:2b:32:2b:fd:33:0e:b1:95:
53:9e:a2:ea:7b:8a:bb:37:54:6b:e4:c8:ec:1b:3a:
be:0c:ed:52:ac:82:63:e7:49:52:f9:67:70:78:98:
a8:ea:da:ea:48:d5:4b:e0:08:50:2b:9f:92:fa:41:
66:d6:94:02:60:a7:b6:cd:8f:03:e9:35:95:b2:32:
41:f5:77:8b:29:0e:94:75:ff:dd:41:b2:39:af:eb:
d7:26:f4:4e:c5:74:4e:2f:ac:e1:ce:5e:5b:a7:07:
94:18:42:08:b7:1e:47:fb:11:70:79:ef:23:cd:72:
67:d4:f9:a8:f4:a9:24:29:80:d7:ff:45:dd:59:cf:
ff:2e:54:d2:c1:ba:c1:17:bc:c4:4f:da:c5:1e:78:
36:1e:a9:e5:f6:d7:f6:d1:71:08:2a:5e:2b:a0:bc:
60:07:3d:36:de:d5:fb:95:33:6e:36:26:f3:af:af:
b6:31:59:72:95:c0:3f:3d:00:09:90:f8:c0:ea:87:
b5:00:7e:a5:76:e8:60:26:61:5e:f7:06:b2:6a:06:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:E7:57:7E:32:06:A0:F4:A5:14:85:30:74:44:78:C9:55:65:EF
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:12:53:97:53:84:28:a0:d8:65:80:38:13:e5:77:d4:38:
1d:c8:ed:cc:ef:13:1c:4c:c1:0c:a9:53:26:6d:93:a7:cd:a8:
d1:84:2d:fb:bc:78:89:f8:c8:3a:77:38:b7:4a:77:50:2d:1e:
6a:e9:0b:ea:1f:47:c3:1d:5a:d0:ed:fe:b9:26:11:a3:9f:35:
33:47:86:4b:f5:ee:71:a4:a1:e9:fb:91:35:26:e9:a2:c1:dd:
f9:d7:49:04:40:78:b0:d0:13:c8:c3:c2:a1:8c:c3:df:a0:52:
12:3f:54:1b:f2:b4:9c:54:89:e3:ec:e7:3d:79:a0:a1:26:a8:
9b:7e:02:ee:fc:01:95:dc:e3:fe:0a:09:63:22:0e:58:a7:a5:
0a:dd:e1:76:2f:00:e7:b4:4b:46:9c:d2:47:4a:07:47:79:e8:
5a:24:00:21:0d:5a:9f:6b:9d:a8:ee:3e:a7:57:48:45:cf:a2:
12:01:a0:b0:83:41:ed:f8:82:24:09:4c:0d:d2:49:80:2d:97:
f7:92:a8:b3:43:34:fd:da:e6:87:42:9b:c9:a5:d9:20:97:1d:
f9:26:a0:08:a1:7a:7b:b9:13:24:f9:00:a0:39:fc:87:dd:16:
1b:0a:e0:58:74:6c:10:2c:ff:9b:04:f4:a3:a4:15:81:c6:c4:
65:a0:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:05 2026 by rpki-client