Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: USODg8AB5MY1boxkGALK8mEBRY/co+Uxdap0X6g8ITk=
Subject key identifier: F6:0A:AF:B2:1F:04:F3:67:5D:5A:34:50:FB:FC:E0:48:74:B4:7D:F6
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019E89484E1975ED24D83E2ACE1C77166EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 06FC
Signing time: Tue 02 Jun 2026 17:01:17 +0000
Manifest this update: Tue 02 Jun 2026 17:01:17 +0000
Manifest next update: Wed 03 Jun 2026 17:01:17 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: Lfb+Y6GYCB87xSjQlCZJTJbqpYUwcWGTTm47hZsP8/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:48:4e:19:75:ed:24:d8:3e:2a:ce:1c:77:16:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Jun 2 17:01:17 2026 GMT
Not After : Jun 3 17:01:17 2026 GMT
Subject: CN=f60aafb21f04f3675d5a3450fbfce04874b47df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:b6:9f:bc:b7:8c:6e:1b:01:a5:09:85:b4:
79:89:9f:df:e8:77:cb:76:c0:14:6a:6e:9e:96:04:
c8:97:09:ff:8c:88:72:34:1a:7f:ee:48:3d:3b:5f:
e8:60:92:46:24:58:59:28:42:d0:f6:cd:3c:f5:0b:
ae:7d:cb:28:14:53:a7:0b:80:79:94:c6:43:a8:69:
fe:9b:b6:2e:8c:a9:52:23:b1:e9:80:ba:59:6f:4d:
93:77:0b:30:24:6f:38:aa:8f:e4:bd:0a:75:21:c6:
ce:36:fd:5d:98:61:e7:f5:8d:97:31:62:6e:4c:c2:
09:c4:fb:d0:b7:2b:ae:45:8d:e3:c8:08:15:03:cb:
40:f9:0c:0b:1a:f2:a1:23:98:8d:8c:2d:bd:13:da:
aa:67:e7:5a:38:a4:94:49:4c:9d:f2:96:6f:2b:29:
13:1e:54:b3:49:b7:69:ca:2e:38:e0:5c:ef:6a:34:
e2:41:3c:19:0e:6d:b6:86:f8:ab:2d:15:40:35:10:
04:f4:93:6a:bd:cd:5a:6e:96:19:8b:9b:9d:0c:94:
91:31:3b:54:45:2b:52:30:09:4b:27:76:39:35:3f:
5c:51:5c:91:30:7e:f2:81:9f:e8:21:d2:bf:3a:ce:
b8:90:b4:57:06:6f:7e:cb:16:05:b3:c4:a3:2e:c3:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:AF:B2:1F:04:F3:67:5D:5A:34:50:FB:FC:E0:48:74:B4:7D:F6
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:97:74:02:dc:0b:9d:ee:c9:4c:be:8e:b5:68:eb:26:ad:d9:
d1:a2:66:0b:3f:d4:3c:8d:19:8f:b6:3a:a8:4a:02:54:86:f8:
fd:e0:31:32:4b:4d:a6:52:54:40:1f:b3:d1:0f:9c:98:87:c7:
b7:e2:81:04:48:92:99:60:8d:83:66:42:e0:44:35:2e:d4:0a:
65:aa:a4:1e:00:c1:d5:66:11:bc:00:1f:72:01:d2:78:de:4d:
c1:79:44:29:06:40:33:e4:16:10:60:98:5d:53:c0:59:cc:0e:
dd:36:bb:c6:7d:6a:92:1a:37:67:41:01:65:a3:8f:28:8c:19:
5b:ee:d9:81:dd:7f:04:76:47:7b:97:b6:b6:6e:23:f9:de:9f:
9c:dc:03:50:b0:be:c0:de:da:33:d1:db:54:8c:8b:d3:e7:84:
7d:83:10:6c:b5:32:3e:70:a0:34:c7:53:db:37:f8:00:3b:22:
38:7c:e1:71:44:35:bc:bd:51:2f:9c:91:f8:b1:c5:17:f8:8b:
4c:88:84:de:51:fb:6f:7f:07:eb:f5:9c:e9:0a:4d:35:bf:81:
99:1a:86:99:75:78:87:4f:a1:89:da:fc:3e:6f:f2:17:13:1f:
1a:e8:1e:08:e1:c5:ca:d7:c1:69:34:29:29:50:40:55:ff:a6:
c5:09:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:44:00 2026 by rpki-client