Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: t0TC+1wglFExXxBPSOYReevoQbk2SqrGmWjxfjp5VM8=
Subject key identifier: FB:39:C8:E7:C7:85:81:A5:4F:F1:9F:6B:51:A6:29:17:CD:83:CA:3D
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019F178C45E459E9691D9ED2965A0240C1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 08:01:36 +0000
Manifest this update: Tue 30 Jun 2026 08:01:36 +0000
Manifest next update: Wed 01 Jul 2026 08:01:36 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: gRm7Snd5RIOWxcx6KMi5GNSMp6nmn5LtC5NZ8hs64hw=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:45:e4:59:e9:69:1d:9e:d2:96:5a:02:40:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jun 30 08:01:36 2026 GMT
Not After : Jul 1 08:01:36 2026 GMT
Subject: CN=fb39c8e7c78581a54ff19f6b51a62917cd83ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:21:56:e5:75:d5:50:3e:27:46:44:ff:a7:
ec:ff:4e:a7:91:d7:59:e1:a9:b2:27:be:35:a3:22:
c6:83:86:2e:25:1f:c5:76:dc:0d:c6:58:e2:57:7a:
fa:82:f1:8b:ec:8e:40:3b:64:56:33:c2:19:81:e1:
fb:db:bd:2d:35:41:57:db:99:cc:20:4c:99:52:05:
17:bc:f0:56:f6:4f:2c:f8:74:60:d8:be:43:06:66:
31:80:a6:3d:c7:51:c5:a8:fd:5c:a2:5f:40:be:73:
d4:00:c0:56:21:66:1a:2e:13:ef:91:2c:ad:8d:70:
54:1b:76:1b:dc:15:6e:e3:b9:e5:d7:23:8a:d7:08:
00:90:95:c9:5f:dd:d9:00:63:c7:86:50:a2:4a:46:
25:70:10:ca:2b:7f:f3:4e:aa:ec:68:78:7a:22:41:
99:fd:9b:97:e9:e1:12:6c:af:9e:b1:13:f2:42:63:
c9:50:b8:2f:3b:a2:e0:4e:16:be:26:0a:26:9a:bd:
2f:05:19:4f:1e:4b:5a:38:59:96:6e:86:67:63:b4:
6e:7d:6c:35:44:db:b4:84:30:07:eb:b2:da:4c:ff:
06:cf:9e:b8:d2:69:5a:d9:24:6e:ab:ba:22:51:73:
12:fe:a0:bd:72:ce:1d:1d:4b:71:f0:4e:83:45:2e:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:C8:E7:C7:85:81:A5:4F:F1:9F:6B:51:A6:29:17:CD:83:CA:3D
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d4:38:bf:bf:80:af:c2:5b:7f:11:6e:2d:3b:48:52:fc:6e:
8e:7b:b1:a1:b1:ef:ad:f7:a3:ac:f7:9c:a3:65:4e:a9:a7:5e:
5d:4d:10:2e:6b:a6:0c:7b:22:ff:26:1c:6a:8e:47:0b:82:5a:
73:16:a6:ca:3a:9c:59:58:d5:fb:fa:e0:9d:0b:f4:af:1a:92:
77:a5:c8:d5:ed:3a:e2:bc:85:14:93:f6:ff:07:c3:e9:0f:da:
70:73:61:2b:e4:79:ae:40:3b:2d:6d:b9:d7:c6:47:80:d1:ff:
ba:74:eb:35:02:63:7a:7e:ec:2f:7f:57:68:0b:8c:e3:7b:a5:
80:f0:e6:09:77:71:b4:92:a8:49:cc:1f:cd:f4:86:d5:22:31:
d7:ac:35:f8:43:55:75:6d:d0:94:f4:4b:69:c3:56:a5:74:af:
60:6c:bf:f9:b2:0a:17:b6:7b:da:96:66:8c:4d:e9:85:60:b6:
71:83:52:79:3a:bb:6d:f7:43:23:a4:ef:ca:98:4c:be:ae:ef:
58:e8:5c:4b:31:cb:00:a1:11:41:2d:23:0f:36:97:4b:c5:0d:
1d:10:69:cf:d7:72:bc:ce:45:f1:7b:3b:8a:d6:27:82:c2:78:
0d:53:7a:f0:fb:8b:dd:82:73:69:9c:3d:b4:8d:74:15:25:23:
e3:b2:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:38 2026 by rpki-client