Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: G6mQZbZezKucOgaHDFe7ScqQ4RDoTTRakp4WYKUMtT8=
Subject key identifier: ED:DD:64:03:39:61:E8:AF:95:1C:83:0C:CB:0C:C1:1D:4A:0C:E2:10
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019F197A06B1874C7F395A4DC0E26A31974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0687
Signing time: Tue 30 Jun 2026 17:00:55 +0000
Manifest this update: Tue 30 Jun 2026 17:00:55 +0000
Manifest next update: Wed 01 Jul 2026 17:00:55 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: SbiQGK4eV7bueHDTsc4YiUZjGy0IDuo8n7U3GmFhuEg=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:06:b1:87:4c:7f:39:5a:4d:c0:e2:6a:31:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jun 30 17:00:55 2026 GMT
Not After : Jul 1 17:00:55 2026 GMT
Subject: CN=eddd64033961e8af951c830ccb0cc11d4a0ce210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:12:2c:de:7a:ad:41:e0:bb:7c:8d:4c:a1:
7e:73:37:ac:32:e5:42:ec:a7:50:a5:1d:82:ae:b0:
fc:d0:82:f2:c1:0e:e8:6f:56:1f:19:d2:5a:43:95:
1a:d4:01:5f:6b:7c:a3:c4:5d:f4:c8:89:f0:da:5c:
bc:ed:1a:c6:a3:1a:ad:9d:29:b1:92:b7:75:9d:f5:
e3:c9:51:e1:9d:a0:1d:86:9b:33:e8:ee:2f:a7:c2:
9a:5a:0c:d8:74:de:79:ef:85:78:91:5a:ee:8d:54:
b4:04:04:03:8d:ac:7b:77:31:46:cd:79:75:f6:d3:
86:8c:d8:6c:03:4e:db:2e:de:e7:a8:82:c7:49:c3:
15:85:9d:06:a1:6e:be:d7:92:27:22:6b:5d:28:87:
b3:d7:92:3c:b1:9b:8c:9b:15:cc:a4:3a:5c:f5:7f:
5c:39:9c:ec:10:af:2f:62:e2:e6:58:e6:b8:0a:c6:
67:23:1e:14:8e:8f:14:e2:69:8d:6c:37:58:9c:47:
0c:35:73:7d:3f:71:a0:a3:4b:ef:ca:86:68:c5:7f:
9c:0d:56:ca:ae:d5:12:09:28:f9:c5:e5:a3:d1:28:
93:0d:97:f9:73:38:34:41:3f:00:b1:43:12:47:b6:
80:2f:14:6f:b2:05:1e:6c:36:96:4e:10:51:5e:cb:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:64:03:39:61:E8:AF:95:1C:83:0C:CB:0C:C1:1D:4A:0C:E2:10
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:77:29:6f:ee:ab:50:66:64:dd:1c:5c:e9:c0:fb:57:54:09:
51:5f:19:3f:cd:5b:9b:66:74:43:9f:9e:12:ff:8d:46:e8:ae:
35:a0:9c:1f:18:87:9d:0c:76:30:15:43:53:3d:b6:e2:75:23:
e5:56:cb:47:16:12:e4:df:a2:dd:88:6d:02:16:7b:66:7f:1d:
41:bb:97:04:87:40:58:5d:cd:64:95:2a:35:1f:64:4c:a3:66:
05:c8:f5:5a:80:b1:db:ee:46:ee:94:f4:fd:8e:70:f4:31:7b:
24:de:e4:9a:62:b3:09:e9:4f:cf:79:77:2d:d8:05:39:c7:7b:
76:0d:d2:bf:c5:ef:27:38:29:7d:77:83:42:cf:ad:27:93:5c:
34:9a:0c:a7:55:fe:b2:c1:e0:c8:5c:57:16:2e:81:86:92:ed:
26:b9:61:6c:f4:4b:fe:4c:e8:ca:5f:ac:50:3a:90:6f:c1:36:
1e:83:78:bd:c1:7d:57:ed:cc:46:d3:0a:55:6b:bb:33:09:fb:
db:ae:02:21:79:3b:72:7a:6e:0c:bf:e2:4a:94:0a:d2:1e:57:
7f:5e:f2:12:be:32:0f:dc:76:4b:87:8a:bc:6d:59:28:79:fa:
ca:39:42:57:72:f0:b0:72:a5:a6:57:4f:4d:f3:25:72:6e:7c:
e2:4c:51:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zegaxh0x/OVpNwOJqMZdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjYwNjMwMTcwMDU1WhcNMjYwNzAxMTcwMDU1WjAzMTEwLwYDVQQD
EyhlZGRkNjQwMzM5NjFlOGFmOTUxYzgzMGNjYjBjYzExZDRhMGNlMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMkSLN56rUHgu3yNTKF+czesMuVC
7KdQpR2CrrD80ILywQ7ob1YfGdJaQ5Ua1AFfa3yjxF30yInw2ly87RrGoxqtnSmx
krd1nfXjyVHhnaAdhpsz6O4vp8KaWgzYdN5574V4kVrujVS0BAQDjax7dzFGzXl1
9tOGjNhsA07bLt7nqILHScMVhZ0GoW6+15InImtdKIez15I8sZuMmxXMpDpc9X9c
OZzsEK8vYuLmWOa4CsZnIx4Ujo8U4mmNbDdYnEcMNXN9P3Ggo0vvyoZoxX+cDVbK
rtUSCSj5xeWj0SiTDZf5czg0QT8AsUMSR7aALxRvsgUebDaWThBRXsuXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3dZAM5YeivlRyDDMsMwR1KDOIQMB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3cpb+6r
UGZk3Rxc6cD7V1QJUV8ZP81bm2Z0Q5+eEv+NRuiuNaCcHxiHnQx2MBVDUz224nUj
5VbLRxYS5N+i3YhtAhZ7Zn8dQbuXBIdAWF3NZJUqNR9kTKNmBcj1WoCx2+5G7pT0
/Y5w9DF7JN7kmmKzCelPz3l3LdgFOcd7dg3Sv8XvJzgpfXeDQs+tJ5NcNJoMp1X+
ssHgyFxXFi6BhpLtJrlhbPRL/kzoyl+sUDqQb8E2HoN4vcF9V+3MRtMKVWu7Mwn7
264CIXk7cnpuDL/iSpQK0h5Xf17yEr4yD9x2S4eKvG1ZKHn6yjlCV3LwsHKlpldP
TfMlcm584kxRAg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:49 2026 by rpki-client