Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: /YxtHza4a1KVIyJLyyAoCNbCLCoQY3QGtco28Mi6z8g=
Subject key identifier: 86:DE:B5:9F:24:8B:7B:AF:79:6E:0E:57:FA:76:8C:FE:57:55:8D:DD
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019F197A026EA6F9C3655C11B57926F76A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 17:00:53 +0000
Manifest this update: Tue 30 Jun 2026 17:00:53 +0000
Manifest next update: Wed 01 Jul 2026 17:00:53 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: PCfjWi0SenOQZcX6Mvn0Vkum3PuWD5jneEhL1oDUPsA=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:02:6e:a6:f9:c3:65:5c:11:b5:79:26:f7:6a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Jun 30 17:00:53 2026 GMT
Not After : Jul 1 17:00:53 2026 GMT
Subject: CN=86deb59f248b7baf796e0e57fa768cfe57558ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:ef:91:94:0e:d2:97:99:1a:bf:c4:4b:7e:
8c:1a:f9:1d:b6:f6:08:b8:61:37:95:e9:e7:9d:83:
ba:2c:06:17:39:36:bc:c0:78:9a:df:4a:4f:6f:1f:
32:8f:21:b9:0a:21:bd:60:78:54:8a:35:a1:c8:80:
17:5d:92:7b:21:6e:7e:8b:18:ec:32:7f:88:0e:07:
03:b3:11:4a:8b:88:d5:ee:f8:40:37:d9:7b:69:85:
88:b1:5b:68:a5:ef:7f:1c:3a:4e:79:74:88:95:c4:
af:8a:34:df:c6:85:27:e2:ec:d5:4e:3e:5c:a9:08:
ce:3c:a8:be:9d:ec:bc:b6:ca:50:43:ae:01:7c:2d:
3b:2a:a7:4d:f2:5b:e6:ec:42:a5:a3:57:98:d4:d1:
a1:84:d1:89:e3:37:c1:40:e2:50:25:c5:a9:e9:dd:
41:38:f8:3c:d6:ca:f2:1a:c3:e8:c6:84:8c:28:ef:
d5:a9:38:99:d8:69:c1:10:b7:a6:5d:a3:20:6c:5c:
f4:20:28:7b:48:a6:b5:58:d7:a2:73:25:cc:32:9e:
d9:9c:8f:53:ae:15:a3:05:3c:37:26:30:cf:43:59:
eb:fb:c3:35:8b:f4:61:58:fc:e6:f5:6e:34:50:24:
47:ae:b2:fe:1d:c9:a2:4b:83:c5:b7:4e:58:a2:18:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:B5:9F:24:8B:7B:AF:79:6E:0E:57:FA:76:8C:FE:57:55:8D:DD
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7e:1c:91:7c:13:03:2f:c4:a5:19:56:e6:2d:11:81:a9:d3:
8e:a6:a6:65:7d:a5:56:0a:86:9a:89:5c:b3:13:9b:87:04:36:
17:4e:e8:a9:de:ec:07:ff:02:32:8d:b0:39:2d:0b:ae:4e:fa:
5b:52:64:f0:64:1c:f8:24:3c:2c:89:2c:ee:09:a9:f5:bd:23:
f7:25:a4:f7:2f:04:de:82:bd:bc:cf:79:ba:b2:73:dc:40:47:
7e:b1:5a:a2:7e:05:aa:b7:e7:f0:67:6f:64:81:af:b1:ac:cd:
f7:5a:06:8e:d4:ae:5b:a7:b8:be:7b:36:66:88:37:80:7e:4f:
3a:12:c7:65:ca:25:e7:2e:7b:a4:38:ec:54:7c:bd:b8:92:ec:
00:e4:72:a9:88:51:b5:05:4f:55:2a:b2:bd:8a:07:7d:26:fe:
07:d0:96:90:8c:fe:93:08:a1:93:2c:51:a9:36:61:bb:34:e7:
2a:16:8a:68:b5:4d:95:7b:70:b6:65:92:ce:8b:90:fa:08:76:
30:c0:fc:a2:f5:e3:ef:0d:9e:c1:24:90:0c:8a:5a:eb:1d:fa:
65:75:61:f8:da:3b:8f:72:00:6c:db:7e:c3:38:db:71:07:c5:
ac:80:c2:78:39:50:59:39:97:b0:07:9c:74:31:94:8b:9e:a7:
b7:94:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:24 2026 by rpki-client