Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: OD89Yo7gCZwMry+tQzfayerSE935DUqow3DfUCOPWSg=
Subject key identifier: 43:4F:BB:94:DB:33:CB:A3:10:EF:4D:3E:B7:F9:75:BA:BC:CE:33:19
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019F12D3960E7B186B0D7B6DFF6EB413F12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0EA2
Signing time: Mon 29 Jun 2026 10:01:24 +0000
Manifest this update: Mon 29 Jun 2026 10:01:24 +0000
Manifest next update: Tue 30 Jun 2026 10:01:24 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: CT1pChDikLTfGpz2z+AO3fA7bOazJNAkSexz4O3ZvTo=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:96:0e:7b:18:6b:0d:7b:6d:ff:6e:b4:13:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jun 29 10:01:24 2026 GMT
Not After : Jun 30 10:01:24 2026 GMT
Subject: CN=434fbb94db33cba310ef4d3eb7f975babcce3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:68:b4:61:86:ab:1f:7c:e6:4b:e1:3d:e2:
6b:cb:d0:f2:66:d7:2c:96:3f:02:b0:02:84:3c:76:
98:55:5c:cd:7c:3f:63:a5:6c:2e:9b:45:88:f4:c8:
e5:cf:f3:6b:0e:e9:93:94:45:6d:f6:57:8f:65:84:
f1:27:a3:16:83:ef:a9:c6:f9:2f:85:26:e5:5e:d2:
07:9c:03:fb:20:9c:71:88:03:04:3a:b2:6d:6c:5b:
56:2c:85:06:85:53:bd:7c:58:7e:11:fa:e4:cb:ef:
0b:45:19:ff:27:1a:54:83:71:34:99:1c:9d:01:ae:
86:3b:6d:5c:68:30:8b:f5:32:08:d5:7e:a1:06:a4:
e0:3a:21:ee:b9:8a:77:39:6b:b1:21:a1:79:0e:78:
74:0f:a3:11:71:53:c6:2b:1d:78:28:4e:2d:0d:50:
4c:01:7d:f8:ae:5e:c9:ce:79:06:bc:25:84:aa:21:
49:a9:a5:b2:8e:3c:e3:b7:21:87:ea:ed:f7:3f:04:
3a:59:94:92:67:98:08:fe:17:be:7d:39:aa:6e:6b:
0c:ea:f9:a9:df:53:c8:34:d7:f6:13:7f:38:68:da:
f9:41:5c:da:82:9f:bb:94:e5:22:f0:a6:8b:13:a5:
a8:ae:d4:f0:33:23:01:c3:dc:1c:a0:a5:e4:fe:25:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:BB:94:DB:33:CB:A3:10:EF:4D:3E:B7:F9:75:BA:BC:CE:33:19
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:c9:f4:c4:17:68:3f:ef:51:c2:a7:d4:4c:04:e9:d4:ff:
24:0b:7d:6d:10:2a:33:81:b2:96:3e:51:4a:32:d8:3b:c5:36:
3f:3a:11:3c:c8:ca:77:c3:7b:21:d9:07:c6:2a:68:28:59:c1:
ef:87:33:72:6c:f2:8b:32:5b:84:2b:3f:02:e1:ae:b0:da:b0:
5c:5a:8e:7e:b4:18:c6:68:3a:c4:ca:52:a6:d0:90:ff:db:0d:
82:e3:54:b8:d8:4c:4c:4c:73:ce:79:ea:6f:bf:fe:a2:e0:52:
c1:66:da:7e:65:96:4a:23:62:5a:71:57:69:86:0b:24:91:5b:
b2:17:cc:d6:bb:98:cb:f7:f0:96:8f:ba:4d:e7:b3:0b:c5:7d:
78:a0:6f:4b:63:b3:ea:26:62:19:42:30:da:8b:0b:3d:21:36:
f4:88:51:e5:fd:a3:38:62:ea:f9:08:5b:00:8d:21:8f:6e:8e:
d4:91:53:11:0a:a7:f0:73:4c:6a:fe:ad:69:87:06:c5:56:7c:
81:45:3d:79:19:68:a6:47:34:e4:16:5c:8d:db:d5:34:83:87:
1c:67:3a:2e:fb:81:ac:2f:b5:a5:2d:98:23:be:a2:f4:41:b8:
bf:64:ee:6c:eb:f7:55:bd:c8:2c:3e:d7:50:20:c1:4d:b7:39:
2f:38:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:05 2026 by rpki-client