Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: huqIkQ/4sa9vvlYNkGDmDEiu1wjtU20YVUYBwb3SfpQ=
Subject key identifier: 41:3E:73:28:72:60:43:A8:CE:63:AD:E7:F7:C1:61:98:E1:DB:2A:68
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019F17C34CD577DB82AC5C48CF0DCB2D5A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 1021
Signing time: Tue 30 Jun 2026 09:01:42 +0000
Manifest this update: Tue 30 Jun 2026 09:01:42 +0000
Manifest next update: Wed 01 Jul 2026 09:01:42 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: 8HY3EHhwqjEad5dQAtxm2nlgAvsHcgVE9HLqP0SU8XU=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:4c:d5:77:db:82:ac:5c:48:cf:0d:cb:2d:5a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Jun 30 09:01:42 2026 GMT
Not After : Jul 1 09:01:42 2026 GMT
Subject: CN=413e7328726043a8ce63ade7f7c16198e1db2a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:dc:06:98:e1:33:3f:93:e0:fb:52:83:e1:
e1:11:cf:09:4a:01:69:5d:5f:c7:38:6d:3b:41:f0:
3c:78:3d:18:64:ee:6d:f0:fe:d0:d6:36:0f:12:74:
15:11:a7:1f:be:c1:f9:3a:7f:a5:dd:7f:d4:9b:4d:
d5:2b:98:dc:f5:ae:36:41:e9:57:7d:25:a2:8d:5e:
25:af:f2:e0:97:84:ef:a8:57:7e:1f:e2:c2:5a:50:
3d:92:3c:d5:22:4e:ff:03:e5:57:8a:7c:48:d0:e2:
c7:e9:8a:bb:6b:75:ba:42:6d:29:33:5a:f5:20:20:
bf:19:c3:4d:bb:e8:d9:5e:d4:a0:f5:4d:91:62:d2:
c9:3f:80:05:18:64:06:ca:ae:51:54:47:87:8c:5b:
9c:c7:28:c6:b8:88:1e:7d:b7:cd:35:47:f7:6a:99:
0a:0d:f9:49:6b:ab:a3:1e:5b:34:b4:88:6f:cd:cc:
28:d3:94:dc:9a:11:d7:ad:c6:ca:6b:b1:b8:1a:ed:
0c:27:11:bd:98:73:d7:cc:e9:1e:1e:65:19:cf:bb:
d2:18:40:7f:78:6e:22:e6:27:85:a7:b3:00:29:36:
11:65:13:65:1b:2c:37:45:ae:a8:96:98:9d:0d:2f:
09:26:bb:d9:07:51:e5:78:0c:a0:15:9c:b2:c2:31:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:73:28:72:60:43:A8:CE:63:AD:E7:F7:C1:61:98:E1:DB:2A:68
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:0d:16:00:e4:8f:c1:3a:c5:71:11:8d:2f:a5:4a:96:6e:
da:12:04:03:fc:7b:7c:15:94:81:27:15:f1:21:3b:23:25:4c:
be:44:79:bd:b9:3f:cd:4e:0c:52:e2:23:12:f6:ec:51:f8:69:
7c:78:62:8d:de:05:15:c3:50:88:f9:1b:8f:a4:08:92:f3:04:
01:02:a6:db:e9:3b:e8:78:72:b0:97:73:00:d2:55:00:6d:70:
44:f4:64:65:24:f4:02:cf:c0:99:4d:d3:33:ff:9b:56:be:6b:
eb:e8:69:30:42:3e:59:75:9d:76:1d:26:21:d7:cb:be:cd:18:
f8:2c:f9:8a:84:7a:5e:c8:32:37:0c:44:1a:ed:99:0b:3c:32:
e1:6e:a4:17:38:32:bd:1b:24:17:b5:0b:2b:f2:1a:46:4b:5e:
4c:cb:0e:e2:4a:88:fe:15:47:39:e4:5f:80:27:9c:23:2a:58:
7c:f3:73:fe:c0:61:63:d6:06:cd:6d:36:e5:de:85:79:8f:05:
46:85:6b:3f:ba:74:48:9e:0f:b6:d6:ec:cf:a5:7b:b9:44:81:
f0:e0:a2:52:21:11:00:66:18:62:75:4b:29:c1:b5:af:a2:12:
87:43:1a:86:43:a4:5f:e0:3d:5c:68:ff:ce:e7:44:e4:ee:b0:
ef:2b:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client