Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: fUku1DiOp8frxj+7yDXTYlxIrz0pAcQZ0hAi0ULDi0A=
Subject key identifier: D9:E4:2E:10:DB:6A:1B:59:C4:C7:08:11:D0:25:65:B8:84:3E:67:F2
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019F12D3640FF3D438140C40B0CA970DCC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 05F3
Signing time: Mon 29 Jun 2026 10:01:10 +0000
Manifest this update: Mon 29 Jun 2026 10:01:10 +0000
Manifest next update: Tue 30 Jun 2026 10:01:10 +0000
Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=)
2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: yXu8JL5KPogQleMTA9473PSa+EMTWiZV36oQoLx6c7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:64:0f:f3:d4:38:14:0c:40:b0:ca:97:0d:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jun 29 10:01:10 2026 GMT
Not After : Jun 30 10:01:10 2026 GMT
Subject: CN=d9e42e10db6a1b59c4c70811d02565b8843e67f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:d0:09:42:a4:55:0f:6c:fc:f5:c5:26:06:
51:74:4b:9a:b7:f0:94:3b:c5:ad:84:b7:e2:bd:54:
a7:01:81:1f:9a:f0:e1:cb:2f:63:9a:7e:95:80:8d:
b1:61:3e:55:cd:9c:b0:3a:d6:c0:0f:30:ff:7e:d0:
2a:46:04:b8:d1:85:07:3b:6c:27:16:da:3e:8e:bd:
0d:e8:64:c9:70:36:ae:97:a6:13:ea:89:63:52:e2:
c0:68:74:0f:be:03:7f:e6:75:ab:53:11:69:68:d0:
de:28:1e:eb:7c:8f:1e:2c:ab:48:3c:16:72:66:8a:
34:57:36:59:e8:aa:48:3a:c8:70:33:16:1c:30:66:
dc:15:df:14:8e:06:48:ec:d4:da:c2:1b:3e:27:4d:
51:71:94:14:2d:72:3c:ed:78:8c:4d:ed:23:e1:11:
91:55:b4:da:f9:8c:e9:9f:39:21:73:bc:28:0f:b9:
30:0f:78:82:49:09:ed:44:11:07:5b:b7:05:9d:6a:
ca:7d:9f:2a:41:fc:86:14:83:b2:89:d1:ea:7a:13:
34:19:23:e2:78:de:32:21:eb:9c:19:46:32:4f:c1:
e6:3f:e3:ef:10:7f:b2:6d:01:b8:b3:96:97:c0:14:
bb:31:d9:85:2d:e5:37:7d:b1:e9:95:a3:39:f5:b3:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E4:2E:10:DB:6A:1B:59:C4:C7:08:11:D0:25:65:B8:84:3E:67:F2
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:71:13:f5:61:57:e8:b3:72:98:33:15:1d:a0:a5:5f:e6:
11:0d:41:2e:ad:42:94:a8:cb:d6:0c:4b:3f:32:a4:5d:65:4f:
9d:f6:4d:e1:74:7d:22:67:83:a2:ef:f8:3e:d5:b9:fd:1d:e9:
f7:f8:8f:67:e9:5f:16:42:38:83:de:03:71:e3:a0:3b:1e:fb:
ce:07:32:07:5f:24:5d:85:10:04:cd:c6:8f:9d:fd:01:45:60:
e8:2a:59:ee:1e:1a:fa:9a:a9:24:fd:3f:39:e9:ad:3b:55:cf:
dc:bf:cf:2f:8c:8d:1f:0b:06:4e:0c:a0:0e:5f:39:d2:8e:9e:
b5:f3:31:d2:84:43:68:df:3c:bb:a0:68:2e:23:dd:dd:70:44:
a9:50:c0:9d:be:18:d2:0f:12:36:e2:5d:b2:c3:d8:b5:72:4e:
23:d5:4c:5a:8d:a9:9f:a0:ea:c4:30:f5:97:a9:c3:0b:90:d0:
a3:6b:ee:24:9f:d0:23:e6:6a:f7:99:10:84:87:24:c3:f1:e8:
f5:99:43:e1:a4:54:8a:b2:6c:e5:98:87:14:f3:a9:4e:61:92:
a3:c8:84:ef:de:ad:8f:e6:5f:1b:d6:dc:5b:16:1b:42:55:fe:
7c:c5:c4:72:09:ad:01:f7:e8:13:79:31:61:c7:6e:fb:d7:49:
30:71:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:25:54 2026 by rpki-client