Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: RPW+UFtd60Uw1AuPwAdTN1l57BqfC7a/eDxbP3Z23QM=
Subject key identifier: E7:0C:15:42:52:D0:17:4C:05:1E:70:87:96:6A:E8:34:08:20:D1:DD
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019F18675C34385AD2F30E9BA5F55AA2EB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0E29
Signing time: Tue 30 Jun 2026 12:00:54 +0000
Manifest this update: Tue 30 Jun 2026 12:00:54 +0000
Manifest next update: Wed 01 Jul 2026 12:00:54 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: N8ZrRGDs0Aad6mNu7Ppi48hgfkh/wzAscVLtZ6vzwsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:5c:34:38:5a:d2:f3:0e:9b:a5:f5:5a:a2:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jun 30 12:00:54 2026 GMT
Not After : Jul 1 12:00:54 2026 GMT
Subject: CN=e70c154252d0174c051e7087966ae8340820d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:e5:84:2c:d7:26:e5:cd:a7:07:d8:59:f2:
5c:cd:07:c1:dc:55:43:67:d3:7d:67:7b:27:2a:a7:
72:dc:ad:ca:f2:b4:94:a5:73:e1:5f:13:29:c7:c2:
c5:ec:cb:80:cf:e2:66:0d:84:e9:a4:14:e7:cf:27:
cc:5e:31:6c:b2:b2:87:3c:f1:eb:6e:ad:00:ec:49:
fa:45:35:ec:46:d0:05:21:4b:c8:a6:84:fc:c3:ea:
a6:25:39:b5:5b:80:07:56:72:50:94:50:38:51:21:
f9:ab:9a:bc:59:ff:cf:13:05:43:5d:b1:a0:cc:c1:
80:8f:f9:f7:79:92:81:ce:e8:b5:b4:8f:1d:e2:34:
d8:2b:0f:56:e6:4c:44:c7:7d:af:31:15:a8:d5:1e:
47:f4:bd:84:8b:99:51:0d:50:0a:37:25:19:9c:0b:
2a:2a:19:7b:c2:6c:d6:e6:66:07:32:41:52:96:85:
97:66:30:9a:14:fb:77:6c:46:64:0f:48:39:fa:a2:
ff:f1:36:26:9f:37:75:da:93:cc:fd:9b:7e:d5:9e:
bb:e4:38:ae:e8:47:7e:78:61:b2:b2:2b:2a:de:6d:
29:d0:ab:ed:a3:01:43:f1:b8:35:aa:fe:c3:d4:28:
ac:f1:40:94:06:3b:bb:35:39:21:be:2c:28:4d:74:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:15:42:52:D0:17:4C:05:1E:70:87:96:6A:E8:34:08:20:D1:DD
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:ae:fe:c0:ca:e6:a1:0b:03:6b:79:a2:9d:65:e2:7c:a1:
0d:61:3c:d9:14:23:82:37:72:30:cb:18:29:81:4c:e2:38:d0:
48:33:18:f0:af:16:c3:14:02:75:a0:7c:9c:2f:9a:df:82:ac:
05:ab:95:13:54:96:c1:fd:20:35:d1:2f:a0:5a:34:20:45:b2:
64:8b:b3:59:c5:e4:d6:f8:b2:af:4d:22:ec:5c:23:8e:df:17:
c7:c6:ef:55:ac:bd:b6:7e:6c:a9:cf:27:17:e3:b0:d1:ce:3a:
41:af:d0:29:8f:8a:ae:48:8f:85:75:7f:55:d4:c8:ba:23:8f:
cb:eb:e3:ff:0a:ab:2a:3c:4e:b8:7f:ce:16:86:2f:56:7d:df:
59:0f:e1:d2:67:cc:b6:58:0f:08:52:7a:2d:9b:62:f7:85:b9:
30:7d:cd:dd:35:66:bb:f4:18:95:a2:ce:7e:aa:40:a2:30:eb:
dc:77:de:af:bd:ab:45:21:0a:6a:d7:a1:55:3a:fb:61:bb:0f:
2e:ae:a1:48:97:23:3d:ef:39:18:67:1c:46:5b:95:82:21:09:
26:04:27:c3:bd:48:f3:1a:11:08:c8:2c:43:ef:b3:7c:f3:28:
94:55:d8:9f:20:30:8a:7f:d7:f8:ad:a5:71:81:af:6f:44:25:
da:40:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:15 2026 by rpki-client