Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: 3QSZqLMcUeP9xTJhAeCxOl2mzVzpuQMc/0y4qW/1OWU=
Subject key identifier: BE:A8:53:D8:A9:18:AF:52:1C:2B:4C:4B:0A:A3:E8:93:2E:E7:B3:F6
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019F18D63D99DF5DA136E532F054254E5667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:02:01 +0000
Manifest this update: Tue 30 Jun 2026 14:02:01 +0000
Manifest next update: Wed 01 Jul 2026 14:02:01 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: G+Gupxkch2jx1B0G3ES/VtMwcka4anvQmFm9HBmgUGs=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:3d:99:df:5d:a1:36:e5:32:f0:54:25:4e:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Jun 30 14:02:01 2026 GMT
Not After : Jul 1 14:02:01 2026 GMT
Subject: CN=bea853d8a918af521c2b4c4b0aa3e8932ee7b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:e6:52:78:88:b3:4b:e1:64:16:25:b2:d9:
da:23:b3:30:de:d1:39:d2:78:b5:55:22:ad:d3:56:
eb:08:7c:4e:4e:1f:1c:d7:45:cd:40:e5:b9:3e:41:
09:48:ed:e0:75:9d:83:0d:01:8c:a6:36:59:a3:35:
36:bd:34:df:c5:1a:b3:d4:09:d1:0b:87:11:c8:80:
ab:4a:55:71:c2:76:1a:2e:55:90:17:29:38:49:69:
92:ec:9e:13:5f:e5:93:76:1f:de:f2:01:dd:b1:1d:
51:52:33:5b:09:3f:b4:a0:ec:56:26:13:f8:02:86:
a5:9b:d1:76:66:b2:b8:e3:94:09:f5:14:f5:ae:eb:
52:9b:ae:a1:ab:3b:1d:97:ba:48:99:a5:d2:77:27:
c9:2c:61:be:38:5f:f6:9d:d2:fb:67:03:68:16:81:
ad:7a:5b:9c:6d:e6:cf:b1:30:89:4b:62:b9:2d:83:
a2:8b:e1:77:82:48:39:21:4f:78:b8:de:6d:68:ca:
ad:31:f0:f1:dd:8d:72:4c:e1:ab:44:8c:c2:96:45:
bc:b4:16:2b:84:d2:77:06:74:9a:87:1e:90:fa:ca:
73:2e:89:2b:0a:89:3a:30:1e:d8:7b:90:28:52:26:
6c:55:a9:64:ae:ee:f2:7b:e9:4d:e0:d1:0c:c4:c6:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:53:D8:A9:18:AF:52:1C:2B:4C:4B:0A:A3:E8:93:2E:E7:B3:F6
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:97:ca:96:92:39:f0:bc:35:9e:4e:d3:ad:23:d8:21:0b:
a4:30:14:c1:69:06:21:db:28:cd:b9:61:b6:f2:20:6d:b2:13:
1b:85:e9:3a:9c:1a:09:44:c3:aa:4c:37:43:47:70:7f:59:6c:
b2:17:54:8d:81:82:d8:a7:92:f1:ce:b9:a9:a4:91:a8:12:50:
fa:94:0b:c8:0a:61:08:18:b3:da:8f:35:55:d6:bf:66:0e:6b:
f9:f7:9d:3e:5e:ec:72:11:24:5a:ca:7b:6c:fe:9a:98:41:f4:
c4:22:4e:29:b7:3e:01:5e:c0:c1:ee:35:4b:6b:dc:6c:eb:ff:
43:c4:10:a5:71:0a:90:84:26:c3:c3:6a:86:77:f8:b8:7f:27:
2f:f4:ed:af:65:25:32:06:fa:fe:9f:1d:7c:ca:3a:64:8a:b6:
9c:56:ba:c0:38:e9:f2:26:51:73:a7:61:76:a1:9a:b5:8a:48:
95:48:29:2f:3a:b7:83:f4:fc:bb:cd:ef:7a:3f:94:8d:50:60:
5a:52:c1:11:a9:42:01:a3:40:29:3f:cd:9f:b3:90:a2:4d:0e:
4e:b8:5c:5a:0a:17:66:61:e2:0c:75:8d:69:fc:d6:8d:f8:f5:
fe:1a:b7:32:1f:f2:e8:06:bc:be:54:6d:9a:78:53:a5:67:59:
f6:82:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:14 2026 by rpki-client