Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: tL1XV7p+MhbfrpIFdMy/3aLDt/h9jhHF1HL+gx8fb/k=
Subject key identifier: 26:62:4E:9B:05:46:D0:E5:38:08:30:53:01:8B:E1:D4:4E:4D:9E:5F
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019F17C2B99DB46D2055F7091F6C59181251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0C86
Signing time: Tue 30 Jun 2026 09:01:05 +0000
Manifest this update: Tue 30 Jun 2026 09:01:05 +0000
Manifest next update: Wed 01 Jul 2026 09:01:05 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: AuaXOGrGittHxvvXQr7YSHuAVJVSIXENdoKXs4fVK0c=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:b9:9d:b4:6d:20:55:f7:09:1f:6c:59:18:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jun 30 09:01:05 2026 GMT
Not After : Jul 1 09:01:05 2026 GMT
Subject: CN=26624e9b0546d0e538083053018be1d44e4d9e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:a8:ec:fe:c6:f3:31:56:ee:c7:e5:93:7e:
fb:bc:c9:46:4a:7d:12:f0:6b:dc:80:88:f2:c9:2d:
68:6d:56:97:74:65:6e:7a:28:31:b2:19:3d:da:94:
45:fa:c2:75:76:94:c1:3b:5f:59:ec:27:13:e7:d7:
c1:ee:90:81:4d:f2:59:68:45:c0:b7:83:1f:2a:ee:
a0:d4:f9:8c:23:9e:aa:cd:08:d7:9a:66:fc:2d:68:
e2:0d:1e:bb:19:a3:43:9a:1a:6e:94:6e:1a:b0:1f:
8d:c8:de:ff:ec:83:14:dc:7f:ed:89:0c:c2:db:5d:
6b:ca:4c:29:4b:7f:5d:34:af:f0:70:9e:f4:ea:d5:
c8:70:d0:ba:16:f5:6e:37:73:7a:e7:3d:7a:7e:cb:
87:e6:db:8e:b7:75:05:a8:b7:2d:77:ea:04:26:f4:
50:20:68:1d:5c:10:b6:76:9d:a4:4f:2f:6a:63:58:
21:4e:e0:17:69:15:fd:39:83:46:82:47:16:b1:32:
28:61:08:9e:c8:9f:1f:e2:be:32:67:ca:43:61:d9:
25:80:16:35:64:1b:87:c0:eb:4b:c0:fd:43:b8:11:
9a:a3:33:5f:6f:e1:b2:e3:3d:ba:80:2f:ef:a8:85:
ce:a4:de:ad:86:5b:21:0f:71:2f:39:b3:16:dd:ff:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:4E:9B:05:46:D0:E5:38:08:30:53:01:8B:E1:D4:4E:4D:9E:5F
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:b1:6d:9d:4b:ed:fe:7a:73:b1:c5:8c:58:e2:86:77:82:
d5:2d:8a:cb:e6:a1:90:49:d0:d5:c9:47:58:63:72:34:24:25:
92:94:d5:38:74:1e:d7:ec:cd:dc:81:f1:f0:d3:31:c3:b2:5d:
00:e0:51:e3:e1:60:8b:40:87:42:ed:1a:6f:9c:71:5d:d8:b1:
ba:1c:8a:69:65:9e:84:2f:29:ed:27:a0:30:bd:da:53:dc:38:
c8:9e:73:19:db:62:c2:97:22:88:bc:1c:08:8d:73:4a:0a:47:
72:b9:b3:ea:76:f1:d6:be:56:7b:43:f0:3c:1e:4e:73:f3:41:
a1:af:e8:2c:33:4e:d6:c0:c0:12:d5:9c:4e:16:af:1b:7d:60:
8a:6f:99:60:81:c1:b0:89:83:d5:20:a9:cc:44:f9:ea:86:ee:
3c:0d:1f:d3:e5:cf:50:f6:73:85:e1:8c:f5:9d:eb:a9:ce:33:
ad:dc:df:06:87:74:b8:9e:8a:6d:94:11:c5:7c:93:74:94:d2:
3b:ed:4d:c6:52:f6:b8:d1:fe:72:a9:f4:c4:a9:62:fb:d8:1f:
24:31:a7:64:b6:fb:67:66:6e:8c:c5:c7:c3:38:f4:6c:2a:15:
1b:91:17:8f:5a:6f:83:4b:a9:4c:88:f1:99:12:4e:4b:97:79:
09:57:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:03 2026 by rpki-client