Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: Dig/NkaZxoqZeB2VjmqpQhRUydmoAIUrRBafP3AKfe0=
Subject key identifier: 28:28:BC:0C:4A:0A:63:29:BC:76:E1:BE:39:DA:CD:F2:A1:CC:79:34
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019F183143B019ABCC0DD09C5C4ED32449E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0C9E
Signing time: Tue 30 Jun 2026 11:01:49 +0000
Manifest this update: Tue 30 Jun 2026 11:01:49 +0000
Manifest next update: Wed 01 Jul 2026 11:01:49 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: V/8QV8oxinfqJeNriSLBYHY1e997rhGzKVNku8wJ3mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:43:b0:19:ab:cc:0d:d0:9c:5c:4e:d3:24:49:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Jun 30 11:01:49 2026 GMT
Not After : Jul 1 11:01:49 2026 GMT
Subject: CN=2828bc0c4a0a6329bc76e1be39dacdf2a1cc7934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:ab:11:93:3a:24:5f:10:be:2f:d4:21:2b:
4a:e9:f9:bc:f0:61:78:da:f3:fc:3d:a1:75:e2:45:
7b:f9:f8:13:a6:47:b2:c2:d7:de:8f:e0:51:ae:86:
d1:4a:58:2f:20:01:65:22:84:35:06:12:9f:a3:c7:
e5:2c:ba:77:e0:5d:d6:09:8b:1c:df:92:0c:17:60:
b0:c7:c4:07:79:48:b4:9f:4e:24:84:41:e8:70:8f:
58:0d:01:80:f2:6f:3a:ec:4d:01:4c:28:bb:cc:c1:
4c:64:a7:45:5a:2b:c9:10:9a:91:71:27:dc:ce:c1:
f8:4d:1e:3d:9f:0f:8e:23:26:d7:a8:e8:78:64:1f:
d8:8e:19:43:c0:c4:37:5e:09:37:e9:03:a5:7b:08:
ce:7d:8f:d1:c3:6d:fb:d9:16:5c:4a:e2:36:93:05:
9d:af:15:4a:07:d9:ca:35:e1:0b:50:46:f0:a6:b0:
a4:ec:21:aa:5a:bf:89:a4:4a:0b:48:36:c5:59:0f:
63:32:84:61:60:fe:6e:e8:5e:59:a8:5c:7f:d4:06:
51:fd:82:44:ed:63:0d:92:e2:6c:6a:ea:b0:46:14:
47:aa:39:ec:c9:02:bd:d1:f6:0d:eb:ee:84:9e:42:
be:fc:5b:4c:1d:fe:20:d2:1f:e0:56:d1:46:f4:59:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:BC:0C:4A:0A:63:29:BC:76:E1:BE:39:DA:CD:F2:A1:CC:79:34
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:33:55:d5:22:39:47:6d:1b:d6:eb:4a:14:b4:8b:b1:40:
ef:12:53:63:d0:fc:2b:d6:bb:70:08:31:39:d2:c6:ea:24:4b:
11:c5:20:0d:31:98:2e:3d:6c:be:3f:bf:b8:f1:65:d8:9a:6a:
aa:48:2b:2e:f3:ab:94:9c:ee:54:36:39:ae:c6:d4:13:43:82:
f1:b7:3c:4c:f3:e6:5d:47:6e:26:8e:37:f9:43:0e:34:84:bc:
89:ad:36:6d:29:38:99:9a:20:b2:2e:fa:92:9e:26:9f:18:b8:
d2:78:df:a7:5f:eb:4d:75:25:75:f2:29:b0:4f:9c:52:25:14:
b0:e6:8a:8c:f1:96:e1:a2:79:18:4a:e6:b6:4d:5b:30:8a:a7:
10:dd:91:44:7e:45:bc:0b:4d:ab:bd:ca:1b:29:8f:f6:0b:12:
ec:dc:ea:24:ec:20:88:9c:5c:99:55:46:81:e2:8b:b7:48:11:
69:b0:9c:92:48:cb:93:3e:d4:e6:1e:fd:af:55:ea:b2:d5:d1:
8b:24:5d:ec:b1:a2:11:f3:e1:0b:82:9a:64:e9:e4:5d:61:bd:
44:6d:5d:57:c3:61:62:de:cc:c0:24:82:02:aa:0b:b8:3c:f0:
31:1c:41:63:dc:c9:74:22:aa:12:4d:fd:46:14:b0:c3:4d:4a:
96:82:db:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMUOwGavMDdCcXE7TJEnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx
MGM4OWIwHhcNMjYwNjMwMTEwMTQ5WhcNMjYwNzAxMTEwMTQ5WjAzMTEwLwYDVQQD
EygyODI4YmMwYzRhMGE2MzI5YmM3NmUxYmUzOWRhY2RmMmExY2M3OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV2rEZM6JF8Qvi/UIStK6fm88GF4
2vP8PaF14kV7+fgTpkeywtfej+BRrobRSlgvIAFlIoQ1BhKfo8flLLp34F3WCYsc
35IMF2Cwx8QHeUi0n04khEHocI9YDQGA8m867E0BTCi7zMFMZKdFWivJEJqRcSfc
zsH4TR49nw+OIybXqOh4ZB/YjhlDwMQ3Xgk36QOlewjOfY/Rw2372RZcSuI2kwWd
rxVKB9nKNeELUEbwprCk7CGqWr+JpEoLSDbFWQ9jMoRhYP5u6F5ZqFx/1AZR/YJE
7WMNkuJsauqwRhRHqjnsyQK90fYN6+6EnkK+/FtMHf4g0h/gVtFG9FlW+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgovAxKCmMpvHbhvjnazfKhzHk0MB8GA1UdIwQY
MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt
NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy
LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPgzVdUi
OUdtG9brShS0i7FA7xJTY9D8K9a7cAgxOdLG6iRLEcUgDTGYLj1svj+/uPFl2Jpq
qkgrLvOrlJzuVDY5rsbUE0OC8bc8TPPmXUduJo43+UMONIS8ia02bSk4mZogsi76
kp4mnxi40njfp1/rTXUldfIpsE+cUiUUsOaKjPGW4aJ5GErmtk1bMIqnEN2RRH5F
vAtNq73KGymP9gsS7NzqJOwgiJxcmVVGgeKLt0gRabCckkjLkz7U5h79r1XqstXR
iyRd7LGiEfPhC4KaZOnkXWG9RG1dV8NhYt7MwCSCAqoLuDzwMRxBY9zJdCKqEk39
RhSww01KloLbPQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:20 2026 by rpki-client