Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: Qa5dRKwLmdJw2BYkNgWC1qedwBZYSG6GES3ReKIHVHQ=
Subject key identifier: 54:9A:61:DD:A6:D2:4B:65:87:DF:1E:A0:A5:FF:50:09:A2:54:C9:7E
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019F190CF59C5DAD91AA6EF6CA914FACF80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 12EC
Signing time: Tue 30 Jun 2026 15:01:47 +0000
Manifest this update: Tue 30 Jun 2026 15:01:47 +0000
Manifest next update: Wed 01 Jul 2026 15:01:47 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: I6w3VIPIGCRh40gur6GB41W+c250nfQZhVcWrp21QqM=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:f5:9c:5d:ad:91:aa:6e:f6:ca:91:4f:ac:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jun 30 15:01:47 2026 GMT
Not After : Jul 1 15:01:47 2026 GMT
Subject: CN=549a61dda6d24b6587df1ea0a5ff5009a254c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:77:6c:17:ef:bd:9f:3c:91:27:0e:f1:13:
8a:d3:d8:d0:0a:4c:40:e9:e3:43:e8:ff:88:17:75:
a4:6f:2c:cc:cd:9f:a3:e4:aa:b9:bc:3a:38:42:f0:
7a:b1:f5:38:63:98:9c:aa:79:ff:c8:a6:07:b4:ab:
03:68:62:31:be:59:b4:5c:8c:a4:54:52:00:c4:a2:
bd:70:2f:0b:87:1d:26:1f:1c:04:a1:6b:8f:08:d9:
8d:ef:4c:0c:f1:46:a5:74:fe:4d:f4:0e:28:00:1c:
14:fe:ea:47:90:6e:69:93:04:b4:31:6a:a2:42:53:
e9:d1:e6:50:a0:1c:0f:98:a8:bd:09:1d:f9:5e:35:
7f:6f:14:ea:b3:b9:ee:f2:2b:62:fd:63:d2:52:02:
5c:80:12:b4:46:ed:25:f7:59:43:48:c9:f1:af:51:
14:cc:a7:b2:ad:ad:13:ad:e9:ca:8a:a7:c8:3f:d4:
f1:3b:df:f9:c9:10:ab:11:12:10:24:b8:14:2e:ab:
41:1f:c2:96:0c:27:4b:64:69:95:0e:88:85:ec:35:
03:db:10:c3:ea:5e:fb:c5:1d:cc:65:51:a9:d2:0b:
ce:41:d9:3e:00:06:4e:9a:df:67:83:c4:16:ba:ac:
97:3f:77:e5:49:26:81:fb:74:53:84:bb:7d:13:1d:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:61:DD:A6:D2:4B:65:87:DF:1E:A0:A5:FF:50:09:A2:54:C9:7E
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f3:cf:e0:aa:2e:aa:5a:e8:bf:0f:f7:42:e8:86:95:52:19:
16:61:3d:58:e9:4a:aa:a7:9f:9c:91:bb:3f:bf:32:53:98:ec:
57:20:2d:23:07:67:e9:4d:5f:9d:0a:b5:5d:34:47:56:05:c9:
33:60:3e:22:6c:26:cd:82:ed:4b:0b:c6:28:6c:d6:28:f9:89:
9e:ea:99:8c:bf:cf:e8:16:7c:c8:d6:60:e3:d5:d1:e4:83:1e:
80:98:1d:4f:91:95:71:14:33:5d:d7:81:3a:ff:ee:5a:e8:cf:
d2:9c:dd:6f:f9:bd:b2:c1:c0:37:af:ae:25:78:f3:96:90:1a:
7f:8a:9c:2b:7f:0e:ac:c0:b5:46:17:50:2b:10:db:2f:81:7b:
fc:1e:ab:e3:f9:bc:0f:0d:59:c6:ad:bb:37:3a:9b:eb:a6:c0:
02:da:46:70:a7:f7:9e:0e:35:4c:02:f8:d4:54:43:48:d0:7f:
18:53:43:ae:b6:fd:17:43:aa:ac:62:23:79:70:b5:bc:29:eb:
80:56:87:b5:e2:1d:5e:b3:9a:cd:71:2e:3a:37:43:01:11:86:
c2:d6:c5:9c:96:c5:20:f2:8c:3e:af:84:e9:59:44:2c:4f:83:
86:72:4a:b4:1a:72:9d:78:b1:b3:73:26:b0:72:92:3f:d8:68:
d9:ee:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:14 2026 by rpki-client