Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: x76aX4G4B5AVZGXj6457tq3PaWuD5BC9VhOfZIoYrS0=
Subject key identifier: 54:FB:85:43:5D:E2:82:DB:83:98:F0:11:F9:F5:06:09:A7:12:A6:3F
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019F18D6BD57B27C59DDFED145DCE4A0960A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0CF1
Signing time: Tue 30 Jun 2026 14:02:34 +0000
Manifest this update: Tue 30 Jun 2026 14:02:34 +0000
Manifest next update: Wed 01 Jul 2026 14:02:34 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: CEc4Xh/66gam07qyteiG4ZfDx4K6CYsk9VrlbMVpWHo=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:bd:57:b2:7c:59:dd:fe:d1:45:dc:e4:a0:96:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jun 30 14:02:34 2026 GMT
Not After : Jul 1 14:02:34 2026 GMT
Subject: CN=54fb85435de282db8398f011f9f50609a712a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:be:13:2b:b9:0a:72:16:48:d1:5d:bb:6b:
2b:ff:ac:50:72:ca:2f:b8:05:36:2d:07:b6:9c:16:
83:6b:bc:30:7a:90:5c:12:46:82:b8:9e:23:a4:dc:
5f:46:21:7f:7a:7a:6b:a7:81:34:41:73:5f:53:39:
33:77:25:b6:5b:51:8c:3a:97:35:d7:c1:2e:ac:c9:
22:d5:bd:1d:1e:91:44:ef:82:45:6f:bd:b8:03:cc:
6a:e2:3f:5f:13:23:8c:18:a5:4f:b2:f9:cb:75:55:
59:a4:f5:28:55:3c:56:a5:6d:f7:ad:3e:14:43:46:
b6:aa:17:5c:ec:6c:6e:9f:bc:7a:e0:5c:4e:99:0e:
93:68:90:52:1f:80:39:71:76:dc:7c:0d:2c:c4:1b:
ca:e5:c4:bc:cc:2f:01:15:be:db:e2:0c:66:a5:0b:
d5:dd:fb:38:82:17:c2:42:24:a1:bb:07:80:10:80:
35:3e:eb:3c:dd:12:bf:4a:03:fd:f6:75:9b:6e:c1:
79:c7:04:61:81:40:7c:fa:5e:71:0b:38:6a:fe:20:
c8:5c:a2:67:f7:28:a1:45:75:7c:9d:3c:8d:cf:bf:
c6:5b:53:07:a5:90:9c:58:11:3b:8a:aa:3b:a1:13:
39:cd:4e:43:2d:dc:2d:ed:b1:34:df:23:8d:d7:89:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:85:43:5D:E2:82:DB:83:98:F0:11:F9:F5:06:09:A7:12:A6:3F
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:c8:9a:87:9f:db:db:67:2d:04:62:a1:a4:52:37:56:7e:
38:67:fb:d5:1b:01:2a:b3:67:e3:e6:c7:af:3e:4d:f3:5f:d1:
a9:83:df:fe:aa:e6:d7:be:1c:83:53:d4:4a:4c:e6:11:25:ab:
f4:87:e4:16:26:fd:49:20:76:5e:a9:31:ae:8e:cd:35:20:0e:
83:93:1b:ff:31:1a:1f:7e:2f:e7:83:e8:75:b7:ef:10:d4:86:
8b:00:5a:53:50:f2:6d:52:ed:78:28:f1:d2:9f:d6:2e:4a:9b:
b6:e4:26:81:97:8b:12:84:a5:3c:54:7a:d0:43:20:7f:7d:c6:
7a:84:82:08:7a:f4:cd:9e:fa:32:55:69:6b:68:82:19:e9:c6:
c3:0e:28:b0:35:85:3a:5e:61:4d:ed:3c:18:d9:49:1d:07:e5:
47:f9:08:db:2d:9c:59:3f:4b:91:6f:e7:2a:58:0e:85:56:1f:
0b:ba:99:a4:a5:18:35:e9:b1:e0:05:4a:2a:ae:8d:5a:b4:a2:
48:70:51:2b:64:93:4f:96:69:fa:50:4b:b1:98:b3:d3:35:3c:
a1:50:46:c6:fc:90:fc:0a:5d:68:2c:42:d4:67:c6:33:08:d8:
a7:8e:c4:8a:6d:83:20:5b:e6:3f:51:54:25:c0:e1:76:6a:60:
7e:98:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:20 2026 by rpki-client