Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: Mkeut4Xoy03Gxyypbl8ssebnevHL5VGJUucM+4kQQhM=
Subject key identifier: 3A:E9:0A:63:16:04:90:D2:5B:38:00:30:52:46:22:F8:4D:44:B4:77
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019F17557165A8F568DE5E28D1015074DC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0BAB
Signing time: Tue 30 Jun 2026 07:01:42 +0000
Manifest this update: Tue 30 Jun 2026 07:01:42 +0000
Manifest next update: Wed 01 Jul 2026 07:01:42 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: tQBu3HVJjwuDBpTzVX1MdavKzg1mT6jLLZjeY2ipHh4=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:71:65:a8:f5:68:de:5e:28:d1:01:50:74:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jun 30 07:01:42 2026 GMT
Not After : Jul 1 07:01:42 2026 GMT
Subject: CN=3ae90a63160490d25b380030524622f84d44b477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:23:dc:7c:82:0e:12:5c:d2:77:e3:e1:83:
5c:ed:62:d7:31:2e:bd:c7:b4:a2:68:9f:7a:37:47:
3d:96:27:d7:b2:c1:6b:f2:a9:ca:0c:53:e8:64:58:
21:09:ea:b1:06:9c:df:6b:3a:14:d8:c1:3e:06:b6:
5e:8d:17:6c:5f:22:46:18:5e:62:a9:0e:f6:b1:9f:
39:d9:d4:ae:38:ec:13:bd:46:04:dc:74:60:94:d4:
52:07:72:60:4b:a6:f0:5b:a6:3a:de:df:80:58:64:
95:0b:59:aa:82:ff:f5:37:57:ce:f6:38:5a:86:18:
f2:92:a8:03:84:27:a9:4a:5c:3f:78:f5:ff:7a:08:
4a:db:c2:c6:fe:16:c0:db:ac:aa:fd:74:17:f5:c3:
6d:7a:54:72:6f:da:50:61:8a:21:a3:3e:d3:94:74:
fa:c5:40:04:20:10:b9:1a:78:5f:c5:5c:3b:f5:6c:
95:27:e5:de:79:b8:26:1f:cc:3e:c5:b0:a8:fc:fc:
2c:79:91:84:ff:79:ae:b2:dc:7e:98:42:5d:f8:96:
a6:88:e6:d6:d7:33:f9:0a:41:0e:a7:58:0b:09:17:
1e:b5:92:21:65:24:4f:5d:9d:9a:f4:fa:f0:f2:52:
3a:be:4c:3a:4b:d4:8d:7e:50:49:9d:88:07:4a:68:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:0A:63:16:04:90:D2:5B:38:00:30:52:46:22:F8:4D:44:B4:77
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:0e:7d:34:25:a3:5d:ec:5b:c4:83:ae:fe:f2:52:7c:f4:
be:c2:0a:77:eb:3e:71:20:f9:e7:d6:0c:43:64:ce:e5:03:97:
d0:c0:05:2c:a7:f5:15:fb:df:36:fd:a2:89:7f:68:7b:30:fd:
df:87:8c:f4:50:c1:c5:d5:a1:80:e5:38:0c:08:10:70:34:97:
e6:2e:a9:99:d0:55:d4:d3:4a:25:86:d9:70:c9:96:72:40:20:
6f:45:d4:e7:24:08:2d:8b:2c:58:e6:7f:2a:8e:9f:39:54:5f:
7d:12:31:81:0f:78:28:89:0c:3b:9f:cb:72:cd:6e:4a:34:85:
9b:6b:b3:8d:84:d8:23:24:73:da:ab:45:85:6a:c2:f2:a6:c9:
5e:e6:30:c5:c2:dd:dc:b0:4f:5a:b4:03:41:bc:14:3c:e5:d1:
2e:dd:57:94:b5:eb:e6:67:24:e1:05:d9:08:3d:d4:39:39:c5:
23:58:20:8e:22:7a:f1:da:f0:da:37:1e:2a:5c:66:6b:4b:1c:
b5:d0:18:e1:13:17:27:0b:3d:3e:d1:29:84:2d:f9:82:aa:aa:
37:21:b9:f9:9d:57:33:1d:e1:ab:7c:75:4a:b2:b1:7a:cc:2d:
87:52:3d:4b:bf:ec:bf:d4:0f:be:86:ef:c6:10:40:c8:54:26:
89:f0:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:28 2026 by rpki-client